Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OVypGyZX0tx-4t3KTpREwgO1E8g.roa
File: OVypGyZX0tx-4t3KTpREwgO1E8g.roa (raw, json)
Hash identifier: KjL/skdMHoAYdun2C9VTr0I40N+eVNhn2lr+bjZjM/M=
Subject key identifier: 39:5C:A9:1B:26:57:D2:DC:7E:E2:DD:CA:4E:94:44:C2:03:B5:13:C8
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0186B76E400643A6379315942E736B132F9D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OVypGyZX0tx-4t3KTpREwgO1E8g.roa
Signing time: Mon 06 Mar 2023 14:58:21 +0000
ROA not before: Mon 06 Mar 2023 14:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 87.227.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:6e:40:06:43:a6:37:93:15:94:2e:73:6b:13:2f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Mar 6 14:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395ca91b2657d2dc7ee2ddca4e9444c203b513c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:74:b7:77:1e:69:3b:52:c3:99:55:ed:9f:
a0:23:6e:e6:10:8c:da:af:31:8b:40:ae:ed:3d:12:
dc:a8:6c:a8:34:15:66:4e:61:ff:6c:7e:5b:7d:39:
d4:24:93:9b:2f:34:33:a5:df:58:92:1b:b4:62:75:
a4:7a:1f:dc:df:a3:05:62:cc:bf:bd:41:fc:6e:a1:
e3:92:7a:48:60:da:48:66:10:2a:38:9e:5d:97:5f:
4f:00:4f:f4:a3:6d:57:e3:76:0d:a9:3e:9d:5e:02:
e2:78:04:1b:0e:b6:4e:81:58:5b:ae:71:d3:c7:18:
49:ee:9b:54:b1:cc:9f:53:db:31:98:53:24:63:cc:
99:32:9b:2b:4e:fd:36:9d:74:f7:c9:95:21:d1:3d:
2a:38:48:b8:2c:72:bb:08:38:39:8b:31:5b:4d:7f:
45:42:25:6e:da:0e:ce:cc:74:62:34:56:99:6f:b1:
aa:d1:e6:a6:3c:e7:4b:2a:42:e2:ec:23:ca:e8:44:
07:53:68:5f:05:d3:bc:35:1f:1a:e6:6b:87:11:e0:
66:29:c1:cd:c7:41:9a:52:28:60:db:a2:85:76:eb:
ad:7a:da:4d:b7:c5:4f:a2:a1:24:96:e2:bf:f4:ab:
1c:08:9f:39:48:3f:ac:26:02:9d:5b:76:ba:a4:e0:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:A9:1B:26:57:D2:DC:7E:E2:DD:CA:4E:94:44:C2:03:B5:13:C8
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OVypGyZX0tx-4t3KTpREwgO1E8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:80:9e:e5:3a:26:76:9d:72:7b:7c:5e:6b:ed:4f:d8:a2:76:
a0:18:44:88:e1:cf:e7:04:e7:b7:ab:4d:1b:9e:0d:d3:96:d2:
9f:59:fa:2a:61:76:1c:2b:b9:3f:79:b2:38:8c:fe:be:ed:e9:
cb:9e:34:08:20:35:c8:64:2e:84:a8:a2:ca:92:50:f5:c4:0d:
8a:96:49:01:f8:ab:5b:d9:74:71:37:83:f6:b9:bb:4a:b8:e7:
14:9b:0e:66:29:01:c9:a0:08:63:01:10:4d:9e:8e:06:55:b0:
bd:b0:39:97:57:2b:c2:dd:b1:b4:55:15:1c:69:36:e8:d0:ff:
86:96:19:c3:09:45:7f:f2:4b:42:15:cd:43:ca:14:4c:2c:7c:
12:c3:c2:98:67:f3:5f:05:f5:4d:9e:9b:04:05:54:49:52:4e:
25:f8:ed:68:d8:ae:22:73:ac:87:c0:1f:27:29:55:73:f0:87:
71:49:0b:9b:fd:b6:57:cd:d0:86:04:ef:8a:1d:f1:38:b0:ec:
a3:90:f9:b8:1f:81:13:57:c3:d4:5f:23:78:62:64:51:49:8c:
fa:61:8a:d2:5b:7e:99:ee:ec:e0:03:65:c8:06:6b:3a:fd:66:
ea:a0:c4:1c:29:ea:de:96:25:86:8b:07:5b:1e:85:8c:8f:97:
fc:05:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org