Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/OaHXcfEY2YluQEjB0D-DWb5Lmj8.roa
File: OaHXcfEY2YluQEjB0D-DWb5Lmj8.roa (raw, json)
Hash identifier: w5bh+xPo6oBH97zdbr/OVQH6m/kwSn5T+e7v90RP0LY=
Subject key identifier: 39:A1:D7:71:F1:18:D9:89:6E:40:48:C1:D0:3F:83:59:BE:4B:9A:3F
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 018ADFEB628A4C66D3458DEBFA72E3C830DF
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/OaHXcfEY2YluQEjB0D-DWb5Lmj8.roa
Signing time: Fri 29 Sep 2023 07:50:59 +0000
ROA not before: Fri 29 Sep 2023 07:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:eb:62:8a:4c:66:d3:45:8d:eb:fa:72:e3:c8:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Sep 29 07:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39a1d771f118d9896e4048c1d03f8359be4b9a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:96:1f:5a:fd:ed:4e:37:0a:a9:b4:d0:e9:
73:32:bb:ed:2b:7d:00:76:70:ee:86:30:0c:75:1a:
6c:17:2e:92:ad:b0:1e:a5:ce:5a:07:43:4f:1a:8a:
41:dc:40:ba:6a:d6:2d:25:ff:7e:28:d7:d7:36:4f:
b9:5e:32:4c:a8:44:f4:5f:bc:58:b7:11:15:e3:aa:
13:7b:35:dd:d6:38:00:87:09:de:b2:e8:b4:f5:71:
a3:eb:2a:d5:cc:7d:56:ae:2a:aa:dd:47:62:cd:81:
60:a3:d2:f1:90:80:04:70:78:a3:c4:b7:68:41:f5:
92:76:11:61:ed:7a:31:d5:25:75:ac:57:f8:6e:0a:
56:9c:7d:56:1f:7b:28:c8:87:8c:81:db:7b:38:55:
d0:c3:60:f7:6f:bd:40:ef:2c:ef:e6:41:50:97:9f:
98:24:02:51:91:66:55:f6:93:1f:1e:e0:0f:51:65:
68:f4:29:59:3a:b4:40:c3:04:6e:6a:6b:60:99:bc:
c6:e6:59:a2:d1:e7:5e:12:71:26:c4:23:3a:d1:52:
1c:46:ad:5b:f3:f5:a9:b4:71:d7:d9:59:85:1c:fc:
e0:e5:71:32:54:47:0c:c7:3d:12:00:90:04:07:35:
57:db:0f:68:d7:45:b8:8f:85:c4:94:d7:2f:39:f3:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:D7:71:F1:18:D9:89:6E:40:48:C1:D0:3F:83:59:BE:4B:9A:3F
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/OaHXcfEY2YluQEjB0D-DWb5Lmj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:62:01:34:29:f6:64:19:1d:29:f6:a1:0e:0c:b8:64:dd:0c:
da:51:92:f5:6d:46:57:c3:3c:57:7f:ff:34:14:87:df:9a:d6:
d1:f4:c3:f0:77:77:6a:3d:7d:4f:48:cd:c9:82:bc:ee:27:17:
34:7a:b4:73:1f:4c:d5:1c:b1:76:46:51:ce:44:72:6d:d8:15:
4a:71:db:1e:e5:bc:b3:d9:2a:b3:3d:2c:71:97:6c:ee:58:d8:
a5:a1:c6:1b:cc:97:48:a8:e3:4e:e7:00:d0:49:c4:45:a6:51:
da:c4:03:04:53:7b:0d:84:7a:70:c4:cc:19:31:90:ca:27:3c:
a4:d1:03:9c:ea:1a:14:77:96:e8:b5:55:cc:bf:ad:e0:8f:ba:
b7:21:73:f4:b8:52:28:e6:83:b4:5e:d4:08:84:51:45:6f:ca:
4c:9d:c3:25:d9:fd:a8:e5:d4:34:3c:32:b7:d9:74:3a:19:25:
6b:86:88:c5:7d:a2:c7:30:36:4b:ee:b1:70:32:f4:ea:e8:a5:
74:20:3e:e8:e1:7d:04:f1:da:94:dd:f0:97:34:f7:16:33:a8:
13:86:87:86:ce:35:ea:4a:df:98:1b:0d:63:61:a1:a1:93:f0:
7c:fd:33:05:35:22:f5:0a:0b:db:00:dc:ba:86:9a:e2:34:5e:
67:0e:fb:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrf62KKTGbTRY3r+nLjyDDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTQ3ZDA4ZmM4NTIxM2RmNGZkYTJjZjk1NjFiOGU2OGJj
MjczZGMwHhcNMjMwOTI5MDc1MDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWExZDc3MWYxMThkOTg5NmU0MDQ4YzFkMDNmODM1OWJlNGI5YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv2WH1r97U43Cqm00OlzMrvtK30A
dnDuhjAMdRpsFy6SrbAepc5aB0NPGopB3EC6atYtJf9+KNfXNk+5XjJMqET0X7xY
txEV46oTezXd1jgAhwnesui09XGj6yrVzH1Wriqq3UdizYFgo9LxkIAEcHijxLdo
QfWSdhFh7Xox1SV1rFf4bgpWnH1WH3soyIeMgdt7OFXQw2D3b71A7yzv5kFQl5+Y
JAJRkWZV9pMfHuAPUWVo9ClZOrRAwwRuamtgmbzG5lmi0edeEnEmxCM60VIcRq1b
8/WptHHX2VmFHPzg5XEyVEcMxz0SAJAEBzVX2w9o10W4j4XElNcvOfMJ7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmh13HxGNmJbkBIwdA/g1m+S5o/MB8GA1UdIwQY
MBaAFIqkfQj8hSE99P2iz5VhuOaLwnPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMWYwYTAtNDM5ZC00MjY2LWEzZGIt
ZTZiMWU5ODZmOTVmLzEvT2FIWGNmRVkyWWx1UUVqQjBELURXYjVMbWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hMWYwYTAtNDM5ZC00MjY2LWEzZGItZTZiMWU5ODZmOTVm
LzEvaXFSOUNQeUZJVDMwX2FMUGxXRzQ1b3ZDYzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQjmMA0G
CSqGSIb3DQEBCwUAA4IBAQBvYgE0KfZkGR0p9qEODLhk3QzaUZL1bUZXwzxXf/80
FIffmtbR9MPwd3dqPX1PSM3JgrzuJxc0erRzH0zVHLF2RlHORHJt2BVKcdse5byz
2SqzPSxxl2zuWNilocYbzJdIqONO5wDQScRFplHaxAMEU3sNhHpwxMwZMZDKJzyk
0QOc6hoUd5botVXMv63gj7q3IXP0uFIo5oO0XtQIhFFFb8pMncMl2f2o5dQ0PDK3
2XQ6GSVrhojFfaLHMDZL7rFwMvTq6KV0ID7o4X0E8dqU3fCXNPcWM6gThoeGzjXq
St+YGw1jYaGhk/B8/TMFNSL1CgvbANy6hpriNF5nDvva
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:23 2024 by rpki-client on console-ams.rpki-client.org