Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/OEP3SfOBT92h2gOBfknVekKpY98.roa
File: OEP3SfOBT92h2gOBfknVekKpY98.roa (raw, json)
Hash identifier: dg4BfuRQ1C8AA7TxKTvOwrglTZhv2LdzYE6FuagZkTI=
Subject key identifier: 38:43:F7:49:F3:81:4F:DD:A1:DA:03:81:7E:49:D5:7A:42:A9:63:DF
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 019146459C4EF43A9D773766CC082FDC58E3
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/OEP3SfOBT92h2gOBfknVekKpY98.roa
Signing time: Mon 12 Aug 2024 11:07:32 +0000
ROA not before: Mon 12 Aug 2024 11:07:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216288
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 16:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:45:9c:4e:f4:3a:9d:77:37:66:cc:08:2f:dc:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Aug 12 11:07:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3843f749f3814fdda1da03817e49d57a42a963df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:26:15:80:c4:ae:e1:17:37:46:dd:37:5b:
c1:e6:6e:29:a7:b3:20:6f:8b:b8:fc:1a:85:cd:cd:
dc:d8:07:7c:e1:1a:90:c6:19:51:19:55:7a:8a:0e:
52:d3:e9:3d:eb:2b:bd:1e:26:76:af:49:16:46:84:
a0:22:69:04:21:3d:d5:c1:46:e1:e1:21:98:ab:22:
0c:b3:96:c3:7e:38:58:63:00:02:91:24:b3:f0:cc:
b3:3e:dd:44:71:58:95:e2:0c:f6:ac:df:8b:5c:8e:
36:73:96:b6:24:6c:1a:49:10:e2:d7:9e:6d:b8:af:
5c:ac:f6:72:af:cc:90:22:6d:bc:db:0d:22:95:60:
c4:e7:a5:17:4f:ad:cd:a1:1f:c8:34:39:7d:09:da:
9a:b2:99:e2:13:68:4c:48:9e:2e:17:2f:a9:75:70:
37:08:6f:a9:8a:d3:e7:34:aa:ec:f3:96:72:17:3a:
dc:26:f7:46:e4:d8:90:9e:05:72:4b:6e:e6:a3:0a:
25:18:4f:0c:08:69:74:80:b7:89:38:d8:50:75:a9:
5c:7a:5e:ca:fa:bf:06:3f:70:71:50:21:df:3a:0e:
9d:77:9d:f3:71:7c:2a:61:85:25:5c:68:69:8b:ac:
e5:24:b9:c3:bf:31:9d:00:c7:5a:4a:a2:73:23:be:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:F7:49:F3:81:4F:DD:A1:DA:03:81:7E:49:D5:7A:42:A9:63:DF
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/OEP3SfOBT92h2gOBfknVekKpY98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7e:f8:cd:b0:80:b3:7a:f2:86:7e:98:75:d3:6b:de:fb:5c:
1d:5d:8c:7d:17:62:3b:eb:dc:6a:46:af:e4:bd:c8:1c:72:f1:
76:09:cf:a5:b3:87:fd:89:b5:9f:cb:dc:9a:b6:cd:1f:78:80:
f4:89:d3:c5:8b:58:05:18:3c:0c:38:10:d9:0c:97:f9:de:20:
49:15:9a:85:5f:33:21:f5:ea:82:95:39:a7:65:5f:db:c1:52:
49:65:68:15:5b:c7:bb:f4:4f:d1:6a:2f:87:33:28:b6:36:03:
08:e9:77:29:c0:af:c4:b2:0a:2b:c3:d3:8e:4a:0e:fe:90:ac:
27:51:79:e1:0c:3e:17:2b:d2:f9:b5:d5:0c:66:5b:2d:a2:20:
e2:94:12:68:ce:88:06:05:7f:49:41:ff:93:b3:3c:cd:f4:df:
4e:6b:5e:88:68:60:39:d6:46:b7:c0:57:ee:7e:c5:4d:5f:34:
2e:71:78:71:cf:b2:e8:32:e1:4e:b6:7b:d6:d1:64:c7:9c:b5:
3f:8f:7f:97:3a:47:ee:f5:0f:58:bf:e3:29:e5:b6:5b:e7:a0:
ef:84:b0:88:f6:44:85:1c:8e:65:18:15:01:51:cc:6f:06:9e:
5a:98:24:12:d8:08:52:fe:a7:f0:cc:7e:58:2b:c5:8b:6e:7b:
87:d2:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 18:42:07 2024 by rpki-client on console-ams.rpki-client.org