Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/OWPo8LqgoeBxOdHUsK3sWeREVRc.roa
File: OWPo8LqgoeBxOdHUsK3sWeREVRc.roa (raw, json)
Hash identifier: 9sosTNloXaPnpl1FMduYHJQEh6jDqWauLVlxuTZ+VsY=
Subject key identifier: 39:63:E8:F0:BA:A0:A1:E0:71:39:D1:D4:B0:AD:EC:59:E4:44:55:17
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 01856D13D590E3E5497F6F627670579A7A90
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/OWPo8LqgoeBxOdHUsK3sWeREVRc.roa
Signing time: Sun 01 Jan 2023 11:24:54 +0000
ROA not before: Sun 01 Jan 2023 11:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44576
IP address blocks: 194.8.77.0/24 maxlen: 24
194.8.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:d5:90:e3:e5:49:7f:6f:62:76:70:57:9a:7a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Jan 1 11:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3963e8f0baa0a1e07139d1d4b0adec59e4445517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:77:a9:d9:9e:66:8a:02:bd:d7:6e:fb:08:
d2:92:6c:0d:82:81:fc:30:4c:e9:a7:85:00:b0:cb:
f2:56:dd:09:8c:92:e4:71:a8:0c:87:da:f3:27:c5:
e6:a6:38:31:a6:88:71:ad:77:0e:ef:0f:7b:39:80:
4b:4b:90:aa:e0:f6:6f:e5:a5:a3:44:63:a9:58:21:
8a:8a:37:61:13:97:dd:48:71:92:0c:5b:b3:27:89:
4c:67:6a:b0:e0:75:c1:45:e8:59:80:74:7a:a5:05:
8c:4e:71:1b:24:ea:fa:a2:f9:5c:cf:01:5d:5a:cc:
42:93:e1:7d:de:a8:6c:bd:51:ec:36:cb:8f:33:e2:
33:a8:8a:ae:de:5d:e9:be:31:69:37:85:08:87:c5:
02:50:09:c3:85:ab:43:59:75:75:5b:1a:16:a0:d8:
61:e3:46:5e:2d:60:26:40:e1:15:66:ea:f3:6d:03:
d9:35:c2:9e:b1:6a:6a:5e:05:12:6f:66:bd:d2:d3:
87:df:6a:6b:9b:3d:60:66:65:fa:68:ba:c1:be:55:
ce:19:13:b7:3c:0e:d9:38:51:0a:03:fc:7e:23:15:
5b:59:30:b4:cf:00:7b:fb:f1:2d:3f:57:c5:38:fc:
50:fd:94:a3:ef:04:c6:e1:26:3f:1c:be:b1:31:64:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:E8:F0:BA:A0:A1:E0:71:39:D1:D4:B0:AD:EC:59:E4:44:55:17
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/OWPo8LqgoeBxOdHUsK3sWeREVRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.76.0/23
Signature Algorithm: sha256WithRSAEncryption
82:73:3f:a2:11:8c:1a:ce:2b:57:2c:39:03:4c:0e:db:15:bf:
a1:b2:86:34:82:38:73:94:87:05:36:bc:fe:a1:d8:99:80:eb:
8f:6f:17:87:73:28:ee:f0:55:59:b7:f4:71:22:6a:d3:77:61:
2a:19:9b:eb:69:d3:70:5c:25:df:bd:11:4e:ee:d9:c3:0a:16:
23:2d:b4:e2:21:95:71:8e:ca:91:c2:ec:52:f3:e7:37:70:0c:
a8:22:f7:5d:6a:14:75:63:1b:3f:3e:10:11:a9:97:2f:49:9d:
ff:2e:92:6b:7c:96:16:5b:8b:62:ed:3b:aa:2a:27:34:c1:cb:
dd:26:be:c9:6c:69:fc:a2:01:0e:29:bd:1b:d6:f1:c1:70:4b:
cd:8d:58:54:f8:ba:91:8d:3a:97:ec:35:2a:47:a3:42:26:a5:
7a:fe:ce:2d:de:7a:b1:73:b3:ff:55:33:9a:77:ff:ca:08:e8:
2a:c8:6b:b4:1e:fb:a9:ee:dd:57:21:98:c2:b3:f7:6c:2a:ab:
dc:1a:c2:6e:e3:77:61:39:b6:43:b3:15:c8:46:31:d3:c2:ac:
c1:57:3c:ef:ae:eb:7d:10:9c:b3:d0:85:ca:cd:7e:7f:ce:72:
2c:0b:b5:a9:ab:cb:38:fa:c7:61:ce:5c:b0:71:79:01:9d:4a:
1d:63:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:00 2024 by rpki-client on console-ams.rpki-client.org