Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/Oe8N3yseHurD8ocAMoP4kksYznc.roa
File: Oe8N3yseHurD8ocAMoP4kksYznc.roa (raw, json)
Hash identifier: KX24wR8SkAKoDAuFN6t/4o+TCDYGZ4CbUS1lyoQqThU=
Subject key identifier: 39:EF:0D:DF:2B:1E:1E:EA:C3:F2:87:00:32:83:F8:92:4B:18:CE:77
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01856F0B7A841090FC99535B690C2A3745E1
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/Oe8N3yseHurD8ocAMoP4kksYznc.roa
Signing time: Sun 01 Jan 2023 20:35:01 +0000
ROA not before: Sun 01 Jan 2023 20:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208673
IP address blocks: 37.49.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 17:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:7a:84:10:90:fc:99:53:5b:69:0c:2a:37:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 1 20:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39ef0ddf2b1e1eeac3f287003283f8924b18ce77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:10:d9:ec:0f:69:e2:13:66:03:2a:e0:8b:
f0:45:b1:0e:18:cf:3c:83:06:8e:21:b8:76:fb:38:
e8:8d:43:b2:5d:62:0e:4e:d3:5d:ea:a9:f7:f0:5c:
9d:8a:15:dc:39:c7:09:e1:12:6c:9f:0a:30:7d:96:
a0:e5:99:1a:f8:22:c1:0f:ae:93:08:3b:8f:d6:83:
7c:e8:97:3c:df:5e:6b:49:74:3c:0d:7f:3f:55:79:
df:76:4b:97:41:fc:bf:d4:2e:8d:e4:88:7c:23:1f:
2b:a8:c2:c1:0c:21:54:c6:cd:04:bc:10:16:93:e0:
9f:3b:2f:23:b2:51:cf:54:2c:70:0b:83:f8:42:ab:
e2:ef:71:1a:05:9e:95:56:91:8e:9e:cb:0b:0c:56:
d7:35:df:b6:cc:6f:99:84:84:27:e7:37:11:09:78:
2f:43:5b:d4:8a:61:e0:54:c8:81:c5:84:1c:9d:35:
2c:56:1b:10:46:0f:21:8c:af:22:08:50:76:ad:cc:
1c:33:05:b4:ed:22:53:f8:08:d5:d8:e6:79:07:fc:
89:b7:4f:20:01:93:62:43:8d:1f:01:27:d5:d3:02:
78:a0:21:db:ff:fd:e8:13:00:d6:53:b7:10:41:db:
e7:c1:44:ef:fc:28:43:3f:08:1f:f5:ac:48:d0:6e:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:0D:DF:2B:1E:1E:EA:C3:F2:87:00:32:83:F8:92:4B:18:CE:77
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/Oe8N3yseHurD8ocAMoP4kksYznc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.231.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ec:df:a6:9b:ba:3b:a8:a7:f2:d0:8e:cb:f5:af:d2:f6:89:
62:9f:d4:cf:22:3c:66:02:e7:b7:f4:a7:83:0f:42:ec:66:1c:
bd:0d:2b:04:1d:8b:6f:bd:9c:f9:2f:98:41:3a:33:69:db:35:
49:6d:9e:70:9e:69:66:e6:df:29:83:5d:63:d0:c6:28:ee:82:
e9:be:70:0e:1b:20:3f:48:a2:94:4f:47:c6:3f:09:92:36:98:
cb:3e:97:67:9f:8c:dd:74:a1:b7:5a:42:e5:fe:66:1b:04:78:
fc:b4:a1:12:06:da:2a:c5:1a:8f:90:82:ed:e0:a7:3a:75:82:
d2:26:d4:bb:3e:b8:1b:9a:75:36:ea:09:43:04:65:1c:11:8c:
20:5f:ca:66:39:80:96:f6:bf:0c:18:2b:3b:0e:98:89:94:25:
67:17:7d:8d:fd:ba:3e:fd:2d:74:11:b0:bc:33:b7:88:d8:3d:
05:17:12:4b:bf:8b:db:58:74:0d:94:4f:1e:86:bf:cf:40:e9:
00:8f:61:3e:7c:c7:22:e7:4c:42:32:70:b2:5a:34:98:72:37:
9c:42:0c:36:71:44:fb:18:f2:9e:ce:ad:3a:b7:ac:1d:e7:11:
31:7d:72:59:9a:9f:d4:a2:6e:28:8f:04:be:38:01:e3:00:a6:
a3:ff:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:50 2024 by rpki-client on console-ams.rpki-client.org