Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ocOC_2v8323Op0cVO-L_hsBUW4Q.roa
File: ocOC_2v8323Op0cVO-L_hsBUW4Q.roa (raw, json)
Hash identifier: AQVLdS6WmSJFNflv8IZlnywHYzioQ7U4g7joT/oRY8A=
Subject key identifier: A1:C3:82:FF:6B:FC:DF:6D:CE:A7:47:15:3B:E2:FF:86:C0:54:5B:84
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1174E36161982B4DD751DB467D316807
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ocOC_2v8323Op0cVO-L_hsBUW4Q.roa
Signing time: Mon 27 Nov 2023 15:45:22 +0000
ROA not before: Mon 27 Nov 2023 15:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:74:e3:61:61:98:2b:4d:d7:51:db:46:7d:31:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 27 15:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1c382ff6bfcdf6dcea747153be2ff86c0545b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:2a:06:1c:fc:3b:f8:f3:96:a4:bf:82:10:
ed:99:bf:d9:2c:e8:ee:79:48:20:7f:62:8c:5d:95:
4b:95:84:94:63:b7:55:ff:0f:c3:d3:c3:0f:ef:e1:
49:52:ce:1a:89:b8:7d:6e:03:57:5a:09:a3:42:ed:
eb:d7:12:ce:9c:3a:8c:68:61:e4:f9:80:6f:c4:ca:
12:9a:ed:67:7d:88:77:35:34:db:8c:39:49:b5:f0:
b3:08:ac:12:bc:b2:a1:d0:48:18:91:c1:83:6f:19:
e9:8f:75:b8:4a:02:2f:0b:bd:61:78:86:85:57:a7:
56:c5:85:67:51:81:f7:e9:c0:be:9a:52:a3:8d:21:
11:f8:d0:86:ee:97:61:4a:69:df:ea:ce:01:07:84:
a3:f1:a6:4f:b2:03:76:7a:f6:a4:75:a1:6a:25:0b:
a6:a5:81:e4:c4:23:9a:f4:15:98:14:77:47:ff:a0:
18:88:1b:1c:14:e4:96:c0:2a:27:5d:71:a9:48:71:
a2:be:7d:ef:c5:03:2c:4d:62:51:e7:cb:77:21:58:
6c:b5:5f:ab:8d:0b:9f:11:ac:1c:1a:ac:ea:d3:93:
b5:ca:85:4c:8f:be:50:6c:8d:c4:3c:87:fe:23:3a:
93:5b:35:2c:13:e5:af:6c:a6:e8:16:0c:37:2c:8b:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:82:FF:6B:FC:DF:6D:CE:A7:47:15:3B:E2:FF:86:C0:54:5B:84
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ocOC_2v8323Op0cVO-L_hsBUW4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:31:9a:ea:ff:ac:64:c4:e2:63:62:4e:c7:74:c3:4d:90:35:
64:c6:e6:96:3e:8f:cc:68:d7:4d:58:06:66:4a:d4:cd:57:1d:
94:8f:9e:c8:97:d9:61:73:98:cf:a4:e0:13:57:7c:04:57:b7:
78:0f:e5:44:85:db:98:24:1e:d7:a9:6b:70:63:99:90:a5:b5:
69:54:61:16:56:4b:c3:64:d6:3c:79:ff:b2:c2:d4:bb:8f:e7:
cd:4e:be:93:b5:93:d9:f8:b2:1f:2c:9a:72:49:7c:ca:c4:b5:
1f:31:8f:a4:13:bc:57:98:9e:57:c7:8d:73:d7:98:29:8a:e7:
b9:a2:33:07:54:c1:fd:34:1f:aa:b1:63:13:b8:fb:c8:3a:aa:
54:55:ed:94:5e:1f:d1:eb:2a:a7:35:c5:aa:d1:a5:63:10:e2:
26:c0:aa:26:85:a6:a7:fb:34:42:25:4a:04:81:54:ec:f7:8c:
bb:6f:f0:ee:8e:78:6b:17:12:98:77:4f:b7:8a:83:d4:b2:34:
6f:91:a8:91:d1:e2:ba:36:62:82:f9:d8:af:b4:9b:56:6f:4f:
95:c6:a0:4b:79:fd:00:54:c1:1e:e0:4d:67:79:40:78:b5:a5:
ae:3b:c2:dc:70:41:9a:fb:b8:09:ad:b9:d5:4a:7b:16:14:47:
52:14:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:48 2024 by rpki-client on console-fra.rpki-client.org