Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/OOvi1WzXof4j2hk_53nSzVMxyt8.roa
File: OOvi1WzXof4j2hk_53nSzVMxyt8.roa (raw, json)
Hash identifier: HDwFK2RIR+ugOstR/nHmkdlUSYx0pTCzoMzbRL+baEc=
Subject key identifier: 38:EB:E2:D5:6C:D7:A1:FE:23:DA:19:3F:E7:79:D2:CD:53:31:CA:DF
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018B331F10E52646CDA46E5E086CEDD9472F
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/OOvi1WzXof4j2hk_53nSzVMxyt8.roa
Signing time: Sun 15 Oct 2023 11:35:55 +0000
ROA not before: Sun 15 Oct 2023 11:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 11:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:1f:10:e5:26:46:cd:a4:6e:5e:08:6c:ed:d9:47:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 15 11:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38ebe2d56cd7a1fe23da193fe779d2cd5331cadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:34:0b:88:44:ff:b2:c5:f5:16:68:a7:ee:
f5:05:8c:5b:a8:d3:c8:81:5e:48:0d:8a:24:7f:cb:
db:7e:d8:25:a3:5a:0b:37:3d:73:0a:41:56:d9:43:
c5:a1:11:aa:38:5a:96:d8:c8:18:27:75:9b:ea:85:
6d:b3:ea:5f:00:80:ee:a7:6f:e7:e0:c7:b4:3a:88:
2e:fe:00:c2:a0:f4:7f:0d:ee:d0:a2:f0:58:b8:24:
28:33:23:b7:2e:22:ee:99:25:b0:65:72:6b:48:24:
4b:57:a1:e1:c8:bc:0e:7e:75:51:74:33:8d:eb:52:
16:80:59:25:82:9b:95:e4:5e:94:e9:eb:e3:0d:e9:
aa:66:19:7b:42:28:e3:d5:4f:da:3b:4a:86:d5:de:
82:37:50:ff:de:05:05:f0:35:40:1c:df:59:81:7a:
ed:97:e6:d3:fb:53:8a:20:d6:61:59:b9:28:2c:28:
19:15:8e:db:ba:94:ca:90:06:5b:4e:2e:ec:2a:ff:
5b:93:e6:09:15:d8:1d:20:4b:4d:c8:63:93:af:42:
d9:f0:a7:c3:7f:56:56:59:91:23:a3:d6:f0:2b:0e:
18:98:84:34:a9:52:13:87:65:7f:a0:b3:b9:c4:54:
bb:dd:99:a6:41:1c:b3:f5:0a:6d:7e:86:c0:c2:bc:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:E2:D5:6C:D7:A1:FE:23:DA:19:3F:E7:79:D2:CD:53:31:CA:DF
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/OOvi1WzXof4j2hk_53nSzVMxyt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.196.0/24
Signature Algorithm: sha256WithRSAEncryption
55:29:07:1c:3f:9e:65:1f:f9:59:40:20:1e:ad:90:ad:40:a0:
4f:d8:fb:59:d5:f5:74:59:b6:6f:b1:07:06:4c:26:01:08:67:
9d:0e:a9:76:ce:67:bd:a3:c8:b7:24:b0:e2:31:64:a7:f3:5c:
34:34:80:c4:2b:ba:30:de:1b:3a:a5:c2:e8:73:ee:d3:0c:32:
68:61:03:9e:f4:3a:19:c3:89:9c:4b:ac:6c:6f:76:7c:bf:1d:
26:0d:c2:92:ab:5f:3f:75:2a:48:a5:29:97:63:4c:62:a6:32:
02:68:e8:2e:58:af:e5:16:96:2f:f2:91:2c:97:9b:5f:be:01:
76:d8:e8:09:93:ae:13:f6:27:f9:70:f4:61:4e:a6:58:e8:81:
b5:a1:63:b1:e8:64:9e:c1:48:23:9b:1a:a9:b9:69:e4:ec:40:
bf:18:25:a1:36:c2:3d:66:06:07:3e:a4:88:89:63:32:4a:0f:
dd:c8:fa:01:f1:3b:0e:66:24:30:39:f9:1c:8b:ca:5d:ac:9f:
24:ca:c3:4b:3b:d3:14:6f:ef:eb:b8:85:6c:69:f2:40:f6:21:
d9:25:46:56:29:4c:56:53:3e:a3:18:57:b9:a0:b8:80:95:0a:
e6:16:15:1d:65:f2:4a:e5:76:0f:ed:1b:5e:75:3d:7d:76:83:
ce:e1:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org