Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OBIWmz6Why67QBuzB_9MxaeSQzE.roa
File: OBIWmz6Why67QBuzB_9MxaeSQzE.roa (raw, json)
Hash identifier: F2yHeSyRFWced3mUkpbpu5/VVfS7pIohB8p7LOloUuQ=
Subject key identifier: 38:12:16:9B:3E:96:87:2E:BB:40:1B:B3:07:FF:4C:C5:A7:92:43:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A6623AAF0AA1E25383C0E32FA5C1F59AD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OBIWmz6Why67QBuzB_9MxaeSQzE.roa
Signing time: Tue 05 Sep 2023 16:18:48 +0000
ROA not before: Tue 05 Sep 2023 16:18:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:66:23:aa:f0:aa:1e:25:38:3c:0e:32:fa:5c:1f:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 16:18:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3812169b3e96872ebb401bb307ff4cc5a7924331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:28:f7:85:bb:16:40:44:09:21:4f:e8:af:
d3:6d:95:fc:40:31:38:44:8e:4d:eb:dc:1b:6b:69:
a8:49:63:69:43:d0:34:fb:21:89:0f:fe:63:29:4a:
c9:0c:c1:d5:ed:98:c4:82:2c:51:34:9f:f0:41:bc:
d9:21:69:31:b5:d9:93:25:0e:3a:67:44:81:48:fe:
9c:f1:69:f4:e2:0b:84:e8:35:2d:b7:9f:33:fd:93:
57:48:4d:5c:75:d7:37:12:93:2f:74:c0:69:1a:6b:
91:c9:4c:a5:07:23:bf:d6:0a:2d:88:1f:44:c0:83:
02:cb:69:c1:56:8f:3f:70:e4:8d:f4:37:3c:c7:7b:
1c:6b:c7:48:f7:e6:47:09:c0:71:07:2b:1e:cf:e9:
18:1c:13:d3:e2:52:62:49:f8:be:90:0b:6f:f5:6d:
a6:84:0c:91:c5:71:7a:45:c2:e9:c3:f0:e1:b1:e5:
a0:9e:77:d7:4c:75:89:7d:31:93:dd:98:23:48:12:
68:18:b8:4c:be:ae:2b:65:72:27:3e:ee:b4:3e:4c:
4c:01:6d:ba:e6:1b:1f:a2:ba:bd:d2:bb:77:0f:a2:
59:9c:d7:3e:41:99:8e:56:31:e0:5e:91:15:33:51:
47:45:df:90:45:12:10:dd:42:0a:a7:c8:c0:9a:de:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:16:9B:3E:96:87:2E:BB:40:1B:B3:07:FF:4C:C5:A7:92:43:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OBIWmz6Why67QBuzB_9MxaeSQzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
93.123.84.0/24
109.206.237.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3a:b0:71:39:71:8b:51:3a:d5:22:d1:a4:75:4b:76:cf:77:
d7:d7:3c:63:cd:09:85:bc:0c:99:18:41:63:a8:5e:d5:cd:52:
c5:f0:54:11:90:12:8c:14:14:a4:79:16:26:17:c0:4e:17:40:
ee:45:61:3f:c7:39:19:3c:d9:cc:24:73:11:ae:d7:27:bc:b0:
f5:de:5e:fb:d5:50:13:5f:eb:38:c9:98:50:02:d2:ca:78:9a:
76:1d:28:b6:0a:c8:da:3f:8f:8b:62:fb:78:d0:1f:c3:0d:0c:
09:60:50:16:c7:69:33:b9:a1:bf:b5:dd:21:08:46:6b:fd:7b:
18:02:62:bc:cf:3a:9a:16:14:5b:e2:c2:63:28:43:db:1d:18:
32:63:13:3d:fc:3b:89:a4:0b:da:54:12:ab:5e:cd:ae:be:e5:
3a:21:00:19:10:d7:e8:18:c9:68:0b:00:7e:82:37:10:d8:c7:
f6:9c:93:c2:2b:f7:55:0a:e2:90:7b:97:04:9e:1a:35:d4:b6:
81:53:fc:8f:a0:85:cd:23:08:ac:5e:22:3d:57:c2:0e:4f:1f:
c9:a6:80:27:de:7a:90:28:d6:05:91:9f:cf:81:4b:07:0b:b6:
8f:7f:4d:9a:d2:7b:d1:e1:85:f2:ff:e6:16:28:4a:c0:8d:e9:
76:fa:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 07:57:12 2023 by rpki-client on console-ams.rpki-client.org