Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Od2qOsK40uY2yFcCg7zjmZ2m9KU.roa
File: Od2qOsK40uY2yFcCg7zjmZ2m9KU.roa (raw, json)
Hash identifier: BohWPtR5XQk2dM6SB4PT06tUo/Br81U7DRp3uBvX0Lw=
Subject key identifier: 39:DD:AA:3A:C2:B8:D2:E6:36:C8:57:02:83:BC:E3:99:9D:A6:F4:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018891154E35A6F248F575D32C2012259D29
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Od2qOsK40uY2yFcCg7zjmZ2m9KU.roa
Signing time: Tue 06 Jun 2023 14:21:12 +0000
ROA not before: Tue 06 Jun 2023 14:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:15:4e:35:a6:f2:48:f5:75:d3:2c:20:12:25:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 6 14:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39ddaa3ac2b8d2e636c8570283bce3999da6f4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:c4:80:71:00:cd:dc:f6:1e:4a:bb:da:fc:
8d:f0:5c:13:06:04:42:91:8e:9c:34:a8:9a:3a:88:
14:f7:7e:ab:9c:f1:cd:cf:f9:ef:00:16:f0:4b:0f:
20:f6:51:25:cd:e4:73:47:24:c5:36:31:58:e0:72:
b7:d1:bd:64:6d:b8:e3:3e:4d:50:b1:ea:06:25:90:
7b:2e:8f:bb:97:4c:e7:47:3f:94:30:9d:d7:86:63:
16:38:53:f2:3c:8a:80:11:b0:9b:b1:1d:10:c1:bd:
53:fb:85:f1:18:cf:d7:af:01:03:3e:28:2c:c3:05:
9d:b9:3e:d7:57:50:bb:12:d2:2a:c3:cb:c3:42:0d:
4a:7c:a0:72:e7:af:bc:93:a3:d8:ea:57:07:14:98:
be:25:aa:82:08:b2:54:1e:58:c0:64:5a:75:c7:98:
6a:b9:e7:b3:30:38:3b:35:b4:02:85:e9:e0:44:09:
d1:c6:f8:30:51:61:50:77:6d:2b:fe:de:29:5a:83:
62:3d:f9:18:f5:a2:26:bc:46:2a:4b:0c:8f:47:f7:
25:1a:c3:b3:ff:cc:33:7d:13:ba:31:16:9e:a2:7e:
c0:4c:e2:bc:4d:69:8b:38:db:68:6f:fb:c6:9a:f3:
c7:37:fc:6b:67:b8:d0:c1:af:9f:94:99:a0:af:75:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DD:AA:3A:C2:B8:D2:E6:36:C8:57:02:83:BC:E3:99:9D:A6:F4:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Od2qOsK40uY2yFcCg7zjmZ2m9KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:71:0a:12:73:8b:bc:c1:82:7d:7d:bd:6e:d3:ed:01:8b:5c:
09:ef:1c:cb:a4:45:2e:4c:f1:ad:f0:d1:46:aa:dd:ba:87:58:
61:a2:db:3d:95:b4:ac:c1:ea:52:cd:ba:33:0f:f2:09:e8:09:
c9:bd:83:05:5d:6b:5c:6a:5e:9a:18:c0:8a:b3:94:8e:92:35:
b0:cf:f4:b9:99:c7:7e:c5:1c:5a:4b:6c:ce:6a:02:62:1e:03:
81:fc:1c:c0:29:20:d5:fd:0f:f3:d4:52:54:15:79:d4:e8:b0:
e8:22:97:35:f0:67:23:3a:1c:98:08:2f:6f:e0:ed:74:04:fb:
6c:ea:8c:26:dd:4d:a7:95:b1:8b:27:be:4b:df:ea:2c:49:a8:
3a:09:d3:36:e7:fe:f9:09:75:33:f7:b9:89:9f:f7:ae:1e:55:
87:9f:5f:86:19:5a:0c:51:7f:85:77:41:20:73:c9:83:85:21:
24:a2:4c:9c:8e:7d:12:39:83:7c:9e:a5:1b:3a:83:6c:35:af:
59:84:7b:88:29:ed:b5:c5:12:92:af:c8:b7:35:c0:a4:5c:cb:
0c:13:15:05:f8:5c:fa:14:18:e8:7e:45:b2:79:f6:0e:59:1c:
4e:9a:4d:4b:ee:40:9d:fc:dd:07:88:19:0a:3f:2e:fb:ff:4c:
91:3b:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 06:14:05 2023 by rpki-client on console-ams.rpki-client.org