Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Oyp_iSTtOE3yRf-oegASX3-jYBI.roa
File: Oyp_iSTtOE3yRf-oegASX3-jYBI.roa (raw, json)
Hash identifier: FeYNk0F5g2Gyt1tUXKMJehGxSAfWdLW4VICZ1ukjzvo=
Subject key identifier: 3B:2A:7F:89:24:ED:38:4D:F2:45:FF:A8:7A:00:12:5F:7F:A3:60:12
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018958DC2EFDA264A8861EAD9F7A120789D6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Oyp_iSTtOE3yRf-oegASX3-jYBI.roa
Signing time: Sat 15 Jul 2023 09:22:52 +0000
ROA not before: Sat 15 Jul 2023 09:22:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41798
IP address blocks: 193.124.45.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:dc:2e:fd:a2:64:a8:86:1e:ad:9f:7a:12:07:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 15 09:22:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b2a7f8924ed384df245ffa87a00125f7fa36012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:bb:ce:83:24:a6:c7:09:60:05:07:b1:d9:
88:bb:e7:1e:d2:03:27:5c:0d:f8:a5:69:0c:b6:69:
1d:65:b7:4d:a4:c1:a6:78:91:6d:b1:f5:41:ac:bb:
5e:99:4f:ab:6f:ad:64:81:2d:a7:41:7d:fd:8a:dc:
56:4c:37:57:53:bb:68:b9:e9:ab:9e:14:4c:84:69:
cb:25:e3:11:92:b6:ee:72:b5:42:75:bb:d4:a7:ac:
22:7c:5d:e1:99:96:e3:71:14:08:7b:6d:55:01:0b:
6d:57:01:42:97:86:bc:18:e3:89:26:8f:ab:8a:b0:
65:ab:55:43:ff:e5:2e:ce:a5:3e:20:4e:06:a4:c1:
18:e2:f4:7f:36:0f:88:98:2f:35:8d:b8:a9:5d:d9:
7d:13:0d:3c:2d:f7:64:91:52:02:ca:c0:ab:77:51:
17:5a:74:d3:86:d4:4e:66:bf:96:36:78:0d:ee:e7:
d1:95:46:8a:b6:5d:c2:cd:6a:39:e5:e7:07:1e:a0:
cd:6d:18:f5:a2:6a:00:a2:f4:54:50:5c:37:2f:17:
a3:18:fe:83:74:4b:03:36:6a:65:0d:53:57:c9:7a:
d2:b3:f9:f1:b9:f5:27:a8:21:ab:1c:1e:0f:9e:52:
8a:d4:49:54:73:8d:8e:42:b4:20:a4:25:02:07:7a:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:7F:89:24:ED:38:4D:F2:45:FF:A8:7A:00:12:5F:7F:A3:60:12
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Oyp_iSTtOE3yRf-oegASX3-jYBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
193.124.93.0/24
Signature Algorithm: sha256WithRSAEncryption
29:88:48:be:cc:a4:97:5c:81:d0:df:1a:a0:45:83:07:df:d8:
10:fe:5b:d8:e3:77:c7:61:ba:b5:82:57:70:97:6e:c7:d4:93:
5f:d2:1e:1a:74:b7:9f:2f:69:f0:4e:58:81:27:a8:3f:17:cc:
58:eb:74:4b:38:cf:ea:00:1e:e2:75:2a:31:88:05:21:f4:95:
1e:a2:4a:5a:f1:b1:e3:7b:46:63:a2:ac:56:a2:be:90:11:4a:
55:12:22:7d:fd:cf:26:f4:3c:41:18:00:c3:38:87:39:21:7f:
44:0f:47:79:f4:f6:4f:c2:da:48:23:05:8f:3e:30:54:81:b9:
8b:5f:b8:1a:9e:fd:18:f4:a8:f8:df:ee:01:9b:99:19:a7:94:
f5:b6:f8:b2:63:0a:7a:9c:9c:0e:0a:c8:b8:4e:2d:ce:b7:68:
a8:4d:2d:fc:b8:2f:ff:81:c9:62:4d:25:e1:ad:28:45:66:bb:
51:13:8c:05:8c:57:35:fa:a8:fe:7f:b2:f8:3c:2b:5a:b5:6a:
48:63:82:2c:48:dd:0c:c6:ec:3d:3e:2a:94:79:a6:8c:1d:7f:
c4:72:af:d4:f3:bc:7a:dc:a2:70:b3:f7:f7:be:f2:61:e7:5e:
99:06:b5:09:c6:ea:dc:8e:d6:30:0e:88:92:55:a3:b7:83:16:
3a:64:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org