Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/OZOYOhDgV_bw8cuh_2pFuwEhLLo.roa
File: OZOYOhDgV_bw8cuh_2pFuwEhLLo.roa (raw, json)
Hash identifier: N40tht2JqW8Y7kqVR8sRO8Yl/OQK6kiQLlYEdbBOpno=
Subject key identifier: 39:93:98:3A:10:E0:57:F6:F0:F1:CB:A1:FF:6A:45:BB:01:21:2C:BA
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0AD547BDAFDCE789CA5C689DC7568F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/OZOYOhDgV_bw8cuh_2pFuwEhLLo.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42117
IP address blocks: 159.20.8.0/21 maxlen: 21
95.175.160.0/19 maxlen: 19
77.233.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d5:47:bd:af:dc:e7:89:ca:5c:68:9d:c7:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3993983a10e057f6f0f1cba1ff6a45bb01212cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:f8:16:9a:65:8c:b7:3e:01:bd:31:f4:6b:
33:9a:c7:ae:ad:47:ff:ba:f8:b4:ec:05:ce:0e:90:
c7:7e:8b:bb:99:81:a9:af:e5:0f:13:fb:78:88:8c:
be:bf:db:73:cd:b5:c2:03:26:ca:fd:33:3d:0b:e3:
b1:a0:4a:29:a0:4e:38:e7:ad:17:7a:ef:4d:a9:da:
3a:47:7a:bc:fa:12:17:1f:fb:30:8a:9a:29:de:11:
b0:79:72:d0:46:87:63:46:ab:33:39:2a:58:6e:cb:
a9:f0:9d:25:40:f9:5b:aa:a6:d5:c5:87:7b:51:52:
e2:31:2d:a9:f1:3a:c2:65:a0:39:81:e6:d1:73:b9:
a6:7b:3a:96:b5:37:3d:12:50:c2:25:8b:d9:d8:aa:
64:40:bd:09:ef:e3:bc:8d:c8:fc:16:58:cf:d3:0b:
4c:de:4a:08:21:36:33:1c:75:41:8a:66:42:65:f6:
4e:28:14:65:8a:b1:f7:fc:59:94:e9:04:2f:2b:f8:
0b:fe:a6:fe:15:09:0e:07:f3:26:77:5c:be:3c:20:
be:f6:9e:00:98:1d:f5:b1:f5:7a:e8:1a:c0:6f:4a:
6c:d0:4d:66:2f:3e:81:93:73:b8:ff:33:17:b6:41:
1c:0a:c6:69:56:5c:a7:a0:e8:e4:d6:5d:11:24:d6:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:98:3A:10:E0:57:F6:F0:F1:CB:A1:FF:6A:45:BB:01:21:2C:BA
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/OZOYOhDgV_bw8cuh_2pFuwEhLLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.96.0/19
95.175.160.0/19
159.20.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:b1:47:73:f5:e2:cd:d6:97:b2:69:50:52:83:3a:96:8a:45:
0e:67:67:22:d0:27:ee:12:a8:12:60:4f:5b:0d:3f:ec:09:7b:
b9:ac:d4:96:10:27:96:9e:12:d2:25:d7:a4:6c:cd:13:2d:14:
94:3d:5c:2e:b8:b2:53:a5:dd:e3:d8:5d:ef:3f:01:0c:13:03:
7f:7b:38:35:3f:c1:83:8a:46:1c:c7:ff:f2:1b:ae:ca:a9:ea:
74:8d:99:13:cf:6d:c0:c3:81:01:28:98:4a:36:6d:9f:9c:83:
9d:d4:c6:5e:3c:82:ac:fd:04:ee:e4:63:2e:3a:e9:69:ab:1a:
ae:fa:ce:5e:f8:00:7e:88:be:dd:26:37:f0:02:c1:f0:a7:bf:
34:e3:d9:72:73:3c:fd:66:c3:28:ba:e0:0a:7f:bb:e4:39:1e:
4f:9a:12:e1:df:57:1f:d0:98:41:b2:00:83:ce:1a:27:56:9b:
9f:ee:42:3e:a0:4b:50:55:e0:23:54:0e:a7:3b:49:5a:c6:02:
8f:d6:b3:5d:7c:62:c8:85:a2:31:d4:c5:b6:1b:73:28:36:71:
c7:50:11:fa:66:48:97:ed:6b:54:ca:b6:73:96:ec:9d:72:5a:
6e:e6:3f:cf:c9:d5:55:a9:af:2e:10:92:62:7f:b2:a0:df:5d:
a1:43:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org