Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/o4j5zoOkwnZ6pse5Dp1TqVpKxTg.roa
File: o4j5zoOkwnZ6pse5Dp1TqVpKxTg.roa (raw, json)
Hash identifier: uFRPOPDgE4UOzet/Y/ZkQ81yyYO+ga8aztVg1pgGxb4=
Subject key identifier: A3:88:F9:CE:83:A4:C2:76:7A:A6:C7:B9:0E:9D:53:A9:5A:4A:C5:38
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 01856D2F37CA362C76694248E69B719F2C30
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/o4j5zoOkwnZ6pse5Dp1TqVpKxTg.roa
Signing time: Sun 01 Jan 2023 11:54:49 +0000
ROA not before: Sun 01 Jan 2023 11:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56376
IP address blocks: 94.231.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:37:ca:36:2c:76:69:42:48:e6:9b:71:9f:2c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Jan 1 11:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a388f9ce83a4c2767aa6c7b90e9d53a95a4ac538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:0f:3a:23:83:e5:89:7a:9d:0c:c7:af:24:
2e:01:2b:87:e4:50:8a:67:fd:c4:70:69:00:32:73:
2b:c0:89:a4:01:3c:1e:71:70:af:48:b0:1f:00:a7:
d1:9c:f5:0d:72:80:6c:30:d5:88:34:12:f5:d6:07:
73:79:aa:b2:d3:98:94:bf:36:17:dd:59:c6:e5:e4:
49:aa:e3:6c:fb:70:79:8e:af:44:a2:dd:5f:40:fd:
eb:fc:ef:7c:3a:43:7d:90:76:0b:9a:a1:90:a9:8c:
23:1e:9e:0a:7a:05:de:60:8d:f2:1e:4d:cc:07:89:
9f:61:ba:2f:b0:c9:97:b7:ef:17:33:0e:01:63:69:
37:da:03:53:80:1e:9e:6a:d6:1a:94:76:c1:e1:49:
8d:27:9e:d9:59:c1:fc:a7:91:28:6d:ad:f7:d5:78:
f1:62:b3:1f:6d:2a:2b:9c:c7:52:d1:14:90:34:89:
2f:6d:87:e6:59:94:ae:7a:93:10:c1:f4:3b:b7:1b:
bd:6c:1c:61:2a:f4:c2:0a:21:3b:c5:e3:8d:d3:7e:
72:aa:76:69:92:7c:c8:9f:98:f3:27:9d:de:24:c9:
98:4c:fb:86:7d:b4:6b:0e:38:1f:9d:53:ba:98:45:
bf:3c:95:6e:02:15:1d:8c:f4:7c:8c:dd:7b:a0:32:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:F9:CE:83:A4:C2:76:7A:A6:C7:B9:0E:9D:53:A9:5A:4A:C5:38
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/o4j5zoOkwnZ6pse5Dp1TqVpKxTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.196.0/24
Signature Algorithm: sha256WithRSAEncryption
11:cb:df:e7:81:3b:29:96:02:d2:cb:e2:fd:d9:90:38:33:e7:
45:b4:73:94:57:fa:c1:93:98:1b:f0:64:14:87:8a:3e:14:89:
86:15:8e:36:0a:24:97:69:65:74:8a:8a:d8:e1:f3:6c:a5:a6:
fc:0a:dc:ce:cb:19:62:13:d7:b6:c3:a5:db:4c:d0:51:36:71:
39:84:41:2b:07:c7:ca:ef:c4:d9:f9:1a:81:f7:92:01:cd:f8:
c2:62:bd:50:12:be:d5:2b:7f:09:cf:89:b8:c9:aa:77:6b:59:
1d:da:0c:9c:4e:2f:77:53:c0:b0:37:45:49:34:ac:82:77:07:
2e:1e:26:2d:e0:0d:14:09:ca:7e:d2:1a:f2:dd:bd:9f:b7:a1:
65:3d:3a:e5:ec:a1:7d:eb:a9:da:15:cf:16:01:c5:97:35:66:
6e:8e:1c:c0:a1:38:83:c8:a0:6a:4c:8e:b4:50:6a:f4:1b:e1:
60:d2:7e:e2:8a:2a:8f:a6:67:9a:57:73:df:05:ac:bc:cc:26:
62:79:08:e2:54:0b:ab:f5:9d:cd:00:99:20:84:0b:f0:3a:b9:
f6:59:7f:55:9e:a6:da:8e:9a:d7:bf:a4:45:cf:64:fd:91:19:
bf:c2:76:6b:8a:7a:b2:b5:dc:d5:93:ee:69:b0:c2:b2:11:38:
48:78:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:55 2024 by rpki-client on console-ams.rpki-client.org