Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OZAYCnY5gnGEec9oTXr9cBTj3SE.roa
File: OZAYCnY5gnGEec9oTXr9cBTj3SE.roa (raw, json)
Hash identifier: aEm5CROMc1VEUyB1fTheW/qP+b6toil3z9H4o3jS5Ck=
Subject key identifier: 39:90:18:0A:76:39:82:71:84:79:CF:68:4D:7A:FD:70:14:E3:DD:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01887C54811A3468E300238FB8EAF11575EA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OZAYCnY5gnGEec9oTXr9cBTj3SE.roa
Signing time: Fri 02 Jun 2023 13:38:12 +0000
ROA not before: Fri 02 Jun 2023 13:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 84.54.51.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:54:81:1a:34:68:e3:00:23:8f:b8:ea:f1:15:75:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 2 13:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3990180a763982718479cf684d7afd7014e3dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:e5:4e:fe:bb:be:d9:91:79:46:12:a3:d1:
9c:70:d8:37:c8:92:17:96:d0:e1:b5:ca:57:a9:44:
ea:0d:00:07:dd:0a:9a:20:5f:ef:b6:e3:14:e3:3c:
49:dc:8c:5c:7c:65:fa:28:82:53:70:e5:88:ae:9c:
32:6e:45:f8:b8:07:0f:f7:9f:a4:bb:f3:50:ad:bc:
cc:76:62:bd:86:c6:40:58:f7:38:99:40:01:da:12:
49:46:1b:89:7b:a1:7c:8c:c1:7c:b2:fc:99:e6:eb:
b2:03:37:8d:a4:9c:a9:c5:43:eb:28:55:85:14:37:
d2:e2:0b:8c:56:ae:10:3e:06:85:17:11:a3:cb:04:
09:9f:09:1f:ea:6f:84:08:aa:00:d5:f7:88:13:85:
7a:be:d0:22:a0:20:87:ae:7a:fa:53:65:d8:fc:b0:
95:aa:9c:66:4f:5e:63:ac:7d:56:64:73:c7:49:ed:
2d:af:e1:3f:16:87:a6:c4:f5:2b:bb:a1:dc:b2:f9:
a4:56:37:6b:64:d0:54:0c:7e:44:84:36:8b:46:d0:
12:e4:72:9e:de:0a:e5:ef:f2:d1:b4:85:c1:88:99:
3d:b3:6e:0f:08:86:70:53:cd:6b:ca:b4:17:52:b9:
1d:93:1e:9e:09:d2:1a:cd:03:ce:e7:54:79:b4:0f:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:18:0A:76:39:82:71:84:79:CF:68:4D:7A:FD:70:14:E3:DD:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OZAYCnY5gnGEec9oTXr9cBTj3SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.128.232.0/24
84.54.51.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bd:be:f6:7a:8a:bf:3d:6f:ca:94:9a:fc:4c:94:3f:9d:88:
3e:2c:5c:80:cc:3a:00:42:05:4f:8f:49:c3:37:9a:39:32:f3:
f7:c9:97:28:97:16:ea:a5:a2:24:b1:43:4c:f9:62:3c:75:b2:
dc:52:f1:04:e0:2a:31:fc:1d:e9:e9:3f:52:6c:b9:1e:e7:9f:
89:a4:fc:2c:ca:96:7e:eb:15:8a:3f:41:93:d6:d9:2c:a1:4f:
dc:db:c9:57:18:5a:32:f8:43:fe:42:4b:8d:73:b6:75:5e:8d:
89:15:96:17:99:6a:fd:4c:53:7d:05:a8:3a:9f:f7:b7:0d:48:
35:95:34:f1:6d:f0:83:a7:62:c8:61:0b:e3:eb:8a:59:f1:80:
5a:14:ee:7a:d8:bd:2d:54:ab:0f:8d:30:3f:11:cf:21:b7:7b:
e7:36:cb:b0:f6:95:73:58:fe:d9:32:dc:a2:e1:94:b4:26:04:
52:40:df:ea:2c:a1:bd:b2:12:c5:a2:65:70:16:05:c1:c2:d6:
67:cc:71:b0:a4:0a:c9:eb:47:11:63:2a:91:d6:44:d4:18:69:
41:f6:9d:c3:ea:4d:84:a2:5a:3b:0f:b0:cd:d4:72:0e:e4:f8:
4b:2b:c0:66:37:88:2a:02:fe:5b:ff:e9:ed:dc:94:e2:ca:e0:
f4:7d:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org