Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/O_SZrIpda-i6f-3UombxGe9xDUo.roa
File: O_SZrIpda-i6f-3UombxGe9xDUo.roa (raw, json)
Hash identifier: o5as2XedIJDgMCmwSDK+TzRiAlYZm4WRrS4xI8nKl4M=
Subject key identifier: 3B:F4:99:AC:8A:5D:6B:E8:BA:7F:ED:D4:A2:66:F1:19:EF:71:0D:4A
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 0185728343760DEFA3CCCDDFDC50860E403E
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/O_SZrIpda-i6f-3UombxGe9xDUo.roa
Signing time: Mon 02 Jan 2023 12:44:43 +0000
ROA not before: Mon 02 Jan 2023 12:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209781
IP address blocks: 128.246.0.0/16 maxlen: 24
141.6.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:43:76:0d:ef:a3:cc:cd:df:dc:50:86:0e:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 2 12:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bf499ac8a5d6be8ba7fedd4a266f119ef710d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:5e:c6:eb:e5:2d:92:7a:08:8f:5f:82:38:
3b:ce:9f:87:ab:fc:c8:ab:c9:dc:26:5b:2a:c0:81:
03:61:38:8b:d2:9a:ba:c3:1b:3b:7e:41:c1:c3:1e:
10:5b:be:6a:10:6c:62:68:86:df:3f:bf:0a:bf:8d:
fc:04:0a:27:85:c8:89:29:53:e7:63:0c:a2:db:42:
c7:2a:54:c2:f1:d1:48:ac:4e:18:25:86:27:74:7e:
13:e8:fd:7b:95:cf:9c:a9:0a:09:90:b7:cb:83:42:
8a:52:dd:46:6b:e6:1f:96:f2:6e:ff:4d:df:8f:e4:
16:e9:54:ea:29:29:2a:6a:5a:e4:fa:ce:a1:b2:c1:
8c:df:3f:49:6a:79:33:b8:fd:f8:93:90:f4:dd:4c:
bc:14:df:8e:99:c0:43:af:17:ff:08:11:d1:95:87:
13:ea:66:1d:87:9f:da:e0:52:2e:44:33:93:14:f0:
f2:81:b0:a4:5e:a4:82:68:13:43:ca:d8:a9:37:06:
11:09:8c:cf:e1:21:d0:80:45:ea:fc:03:22:95:ed:
32:7a:21:65:f2:6d:c6:ff:29:12:34:4c:07:66:18:
70:2f:25:21:92:4e:f0:e3:7a:9a:79:4d:b4:6c:d7:
fc:f7:ff:5e:26:79:e0:c6:a6:88:54:f9:e5:90:62:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:99:AC:8A:5D:6B:E8:BA:7F:ED:D4:A2:66:F1:19:EF:71:0D:4A
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/O_SZrIpda-i6f-3UombxGe9xDUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.246.0.0/16
141.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:c1:a4:b7:27:ec:4a:92:df:a2:d5:e0:bc:29:6d:46:83:f3:
1f:7b:1d:29:79:ec:6c:5e:d0:eb:f0:08:4b:58:e4:44:24:6f:
a0:bc:07:b6:99:32:e6:8d:d6:dc:9c:8a:ce:72:56:cc:6b:15:
54:89:5b:4b:9d:02:68:4d:e4:a0:06:b6:8d:6f:8d:89:02:7e:
73:8f:d3:34:bd:b9:6b:72:9f:6d:76:15:a9:0b:52:c3:8e:94:
b7:ec:fb:d6:12:32:9b:fc:48:61:c5:58:22:e9:bd:45:ab:11:
a0:65:a0:7c:4e:de:64:38:e7:df:c8:86:2f:6f:06:99:88:33:
33:c7:78:44:4e:21:5f:8c:df:59:d2:f9:54:43:86:42:43:66:
63:d4:a8:6f:a1:6b:76:ea:e1:1d:34:dd:45:c9:e8:f6:73:ef:
88:b2:23:d0:ae:28:1a:e8:ed:c6:e9:e1:3c:57:9f:82:a1:c7:
81:e4:6f:ef:05:2f:60:ce:c9:8b:27:fe:3e:35:9e:70:c9:49:
6d:8a:23:d8:46:a0:76:64:e0:f6:66:6f:8e:92:e5:ed:bf:88:
f7:fd:90:c0:c9:de:da:fe:75:a6:9a:54:a8:7b:57:34:4d:07:
08:81:da:53:5e:36:23:a1:3e:42:c5:a3:52:f6:c6:71:83:c1:
c9:67:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:39 2024 by rpki-client on console-ams.rpki-client.org