Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/OGKA16ghh5ilbzhq45hZtAc2jZc.roa
File: OGKA16ghh5ilbzhq45hZtAc2jZc.roa (raw, json)
Hash identifier: afiFB4Dn97qWc8EP5CUVjn14HBkPhkGxZAy5pP/l6lc=
Subject key identifier: 38:62:80:D7:A8:21:87:98:A5:6F:38:6A:E3:98:59:B4:07:36:8D:97
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F1991FF522665647DE3E93A6EA274C
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/OGKA16ghh5ilbzhq45hZtAc2jZc.roa
Signing time: Mon 02 Jan 2023 19:24:51 +0000
ROA not before: Mon 02 Jan 2023 19:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59967
IP address blocks: 87.246.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:99:1f:f5:22:66:56:47:de:3e:93:a6:ea:27:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=386280d7a8218798a56f386ae39859b407368d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:f8:c3:21:69:37:f2:bd:b9:00:59:01:b4:
5f:14:e8:c4:2f:3d:8c:db:9e:b4:0a:da:44:94:38:
35:ed:a6:84:e8:53:77:8e:c5:b5:89:7c:58:a8:c2:
00:83:ca:13:a1:3b:aa:cd:a5:c0:fc:57:ea:62:e1:
fe:36:de:7a:79:d9:0b:1c:70:3c:ea:9c:26:43:c6:
1e:11:ff:49:4e:97:3b:5a:1e:cd:5b:b9:19:9e:5f:
7e:82:af:94:02:d0:15:24:be:9f:67:b6:62:cd:44:
9f:9a:7b:59:e1:94:89:05:ca:29:6a:a7:f7:45:b0:
93:f2:7b:d2:63:e1:00:42:1d:b4:8d:9b:42:86:19:
a6:0b:3c:ec:dc:a3:fc:18:2a:2f:25:47:81:50:b8:
ba:09:88:d3:b5:34:da:7f:a9:62:1c:96:50:c5:09:
20:fc:a5:a7:fe:94:5e:94:eb:37:77:55:25:1e:aa:
be:57:ce:36:88:99:ac:ce:e3:ef:0a:23:5c:d6:39:
f4:b0:46:eb:f8:45:ef:a9:56:c5:f3:f4:f9:2c:f5:
13:75:f6:b2:f2:9e:00:46:60:56:75:4d:3a:e8:49:
9f:30:f8:c6:3a:a0:c6:23:a8:2e:dd:18:f1:e5:9c:
95:5c:8f:9e:f1:b0:2a:b8:e8:b6:8c:f7:c5:4f:58:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:80:D7:A8:21:87:98:A5:6F:38:6A:E3:98:59:B4:07:36:8D:97
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/OGKA16ghh5ilbzhq45hZtAc2jZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:af:f4:21:4a:48:f3:4e:fa:51:b6:76:8d:93:64:01:6b:01:
be:bd:98:66:12:3d:22:5c:01:3d:5c:33:31:11:c2:78:10:56:
29:86:a4:62:98:a6:54:4d:b7:25:4b:06:3f:81:7e:b6:51:b8:
b2:45:a7:06:95:ea:e6:98:f0:b4:54:0e:6e:21:9e:f2:4d:2e:
28:1f:38:12:ca:08:b4:aa:1f:58:ec:9b:40:f1:5f:30:6b:46:
e7:76:b5:1e:93:47:9b:85:73:67:32:96:12:41:2e:e8:3f:55:
b4:78:ba:ec:d1:c6:7f:f9:23:ee:f2:77:a8:dc:c5:5e:03:e1:
db:0b:8d:35:b4:bc:60:a5:f3:d8:27:93:32:7e:57:47:a1:b9:
04:12:17:a5:87:c3:0c:df:a4:9f:b0:29:be:76:c8:28:14:f5:
da:02:61:a8:d3:17:cd:0f:8a:a8:1d:f4:cf:e7:a0:fe:26:e2:
db:9c:ea:51:f2:47:09:c2:3c:e3:3e:db:5f:96:73:d3:a9:10:
19:42:ec:31:07:3b:d0:f6:36:33:d2:41:f9:be:37:02:e6:90:
0f:29:b7:4e:46:b2:75:c3:4f:2a:0f:54:71:dd:18:80:08:ca:
ab:86:77:6c:62:a9:64:8e:f9:49:02:9b:46:33:37:c7:30:e8:
87:39:81:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org