Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/OScHFe12fihfFw8v3k8RzqalMwU.roa
File: OScHFe12fihfFw8v3k8RzqalMwU.roa (raw, json)
Hash identifier: 8a7mmVw8ZzKlf4TnAN0reo4yjuPKoz5GCkhJFd+7VS0=
Subject key identifier: 39:27:07:15:ED:76:7E:28:5F:17:0F:2F:DE:4F:11:CE:A6:A5:33:05
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 01857082B55A893EA1A5119499420ED79117
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/OScHFe12fihfFw8v3k8RzqalMwU.roa
Signing time: Mon 02 Jan 2023 03:24:52 +0000
ROA not before: Mon 02 Jan 2023 03:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198333
IP address blocks: 176.123.51.0/24 maxlen: 24
194.139.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 27 Mar 2023 14:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b5:5a:89:3e:a1:a5:11:94:99:42:0e:d7:91:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 2 03:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39270715ed767e285f170f2fde4f11cea6a53305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b2:5f:c1:42:e3:15:60:5e:f1:38:2d:87:7c:
da:e6:a8:df:2f:5e:00:cd:ba:c4:44:39:ef:d3:d1:
fd:b6:59:1b:95:f3:d9:37:84:9f:fb:7b:cf:27:be:
c9:71:62:c3:fa:0f:31:a3:8b:a9:b6:38:71:93:d2:
9b:9b:f5:4e:8d:a3:83:94:c5:f4:63:03:50:06:b6:
1f:0e:02:91:75:8d:1c:ff:27:b0:a4:e4:2e:0d:fc:
8c:26:84:da:82:af:fd:fd:d3:37:e1:50:26:ee:2d:
60:f0:49:9a:d6:5e:e7:c0:d6:b9:14:fe:d5:c4:59:
79:ac:cb:a3:6e:45:64:79:06:e3:e8:2f:76:44:3d:
78:94:72:0f:dd:6b:7e:da:8f:8e:3e:1d:90:6f:a0:
0d:9d:b4:c0:99:f8:0a:8e:67:c8:2b:cd:62:95:78:
10:cc:3d:f7:bb:cb:66:5c:0d:1d:e4:23:78:8e:3c:
99:2e:89:b9:f9:69:e9:8c:f5:22:90:da:04:c0:8a:
ea:ae:7e:58:1b:b6:5d:a0:11:2e:49:5e:29:be:a8:
70:ad:c4:97:61:bb:34:fc:70:34:99:ba:51:6d:2c:
63:2e:be:39:b3:15:60:69:a0:df:29:96:eb:78:3f:
39:ab:a3:3e:61:4c:2b:00:9f:d6:2f:ff:38:1a:73:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:27:07:15:ED:76:7E:28:5F:17:0F:2F:DE:4F:11:CE:A6:A5:33:05
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/OScHFe12fihfFw8v3k8RzqalMwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:3c:cc:46:a0:7f:02:5c:4b:08:c8:cd:ee:0d:f0:dc:6c:1a:
e4:f8:bb:8e:aa:27:a2:1d:fa:ab:6a:ed:f9:a3:0a:98:8a:ef:
0b:46:6e:66:62:9e:c1:8d:4f:d5:1b:7c:e1:08:a7:28:d2:14:
97:cd:c7:f7:4a:16:86:1b:08:28:0d:d1:09:67:d5:f9:ae:43:
d7:98:13:b1:44:bb:1e:6b:f5:dc:d6:17:ca:6e:e5:61:ae:1a:
84:6f:12:5e:9b:71:84:d0:13:f0:9f:d2:50:58:10:58:f5:6c:
01:6c:7d:a7:64:4d:ca:b9:61:84:94:e4:be:8e:8d:86:ca:b7:
7b:bf:20:30:4e:66:46:5e:e8:6a:ad:18:df:b1:e6:60:bf:7b:
8d:c4:95:40:f9:59:7b:cb:85:c6:a1:7a:99:bf:b6:b9:c5:cc:
39:35:08:f5:7d:a0:f8:f6:d4:e9:c1:80:07:51:13:b2:88:b7:
e6:4b:8c:b5:df:4f:ab:d5:c3:e7:da:cb:a0:bb:5c:eb:b2:13:
67:bd:45:e4:56:48:b8:cf:7e:ae:0d:93:36:ab:38:f6:95:f1:
a3:9b:d5:f7:fb:b5:6a:d7:23:2a:50:09:68:dd:ad:05:5d:d4:
a8:3f:08:c9:da:8f:0f:2f:2f:a1:9a:67:74:86:db:01:65:ac:
fb:af:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org