Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/oAMzlWXLumyQAf1BL-7Dxw2fYbk.roa
File: oAMzlWXLumyQAf1BL-7Dxw2fYbk.roa (raw, json)
Hash identifier: pYcPsw45vKsrLeot4a7jO1e07TSOt47iWYWlXiyNTYA=
Subject key identifier: A0:03:33:95:65:CB:BA:6C:90:01:FD:41:2F:EE:C3:C7:0D:9F:61:B9
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01856C25CD7B0A95397B4059583DF4A1EFB9
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/oAMzlWXLumyQAf1BL-7Dxw2fYbk.roa
Signing time: Sun 01 Jan 2023 07:04:54 +0000
ROA not before: Sun 01 Jan 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.239.162.0/24 maxlen: 24
193.239.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:cd:7b:0a:95:39:7b:40:59:58:3d:f4:a1:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a003339565cbba6c9001fd412feec3c70d9f61b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:3d:1d:ef:cf:cf:10:55:15:86:dd:85:d1:
10:d6:40:7b:6e:46:f2:48:c9:fd:f9:f7:bd:5c:62:
22:dd:94:2f:bf:f6:12:a7:64:80:f8:67:85:3b:aa:
fa:e1:90:5e:bc:5a:d4:81:40:01:ae:86:56:c1:1a:
33:10:08:91:b9:f8:b3:c3:85:7e:1b:73:e8:ea:90:
86:52:7b:f1:9a:c0:78:e4:95:ac:2b:5e:62:a0:ec:
8e:ca:1f:48:f0:59:b5:e8:01:8b:6f:19:58:d4:f6:
69:37:62:a0:50:67:27:da:30:6b:49:f4:76:02:22:
35:a7:16:0b:6d:79:eb:c0:21:03:81:78:c9:4c:f3:
85:88:c4:1d:b9:b8:03:dd:2f:8a:20:1d:05:7a:31:
ce:45:d7:a8:77:c1:8d:31:41:48:46:89:8d:37:a8:
db:34:6e:19:e6:e2:94:dc:c7:c4:0c:ca:2e:48:3b:
7a:ea:dc:fd:c4:09:43:b8:13:6a:66:fa:f2:dd:1e:
65:c4:c4:21:d6:b5:eb:c7:9e:a3:54:5f:9c:5f:6d:
08:1f:f5:3b:3a:ea:8f:55:e8:0f:f6:7f:c8:48:a4:
4a:88:60:d5:b7:46:f5:1e:83:fa:53:9c:24:40:00:
cb:09:95:ba:61:1f:3e:4d:cf:6b:62:54:5b:d2:6a:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:33:95:65:CB:BA:6C:90:01:FD:41:2F:EE:C3:C7:0D:9F:61:B9
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/oAMzlWXLumyQAf1BL-7Dxw2fYbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:d8:81:ba:77:48:82:a2:a0:ed:75:05:f5:76:74:64:77:5c:
a4:ae:13:b7:49:ec:98:0d:f4:84:fb:3c:a9:18:48:96:c0:0a:
c0:57:2e:84:2b:1c:6d:bc:be:1e:87:e9:d9:fc:13:f8:ad:c1:
82:83:72:32:d9:75:8d:f6:1c:c5:8c:ee:6b:15:a9:33:0c:b6:
d6:36:32:07:11:b8:b3:51:eb:3c:c4:a4:2b:4f:fd:4d:f0:da:
ba:cb:71:8f:b3:b4:40:b6:a8:8e:47:47:0c:0d:3b:14:4e:d6:
84:05:e0:f4:ce:30:48:b5:bf:6a:f1:55:f8:b2:78:fb:de:3b:
62:71:9e:3f:d2:62:69:42:22:e6:23:3e:43:af:75:d1:a4:37:
1e:30:5c:9c:81:70:94:15:e3:cf:2d:da:a2:bc:1a:da:93:c4:
de:7f:65:24:2f:01:ef:3e:ce:63:4e:f8:4a:17:79:94:5a:91:
0b:75:59:62:0b:ca:44:3b:3a:e7:aa:6a:23:96:2e:45:3d:dd:
15:39:6f:f4:c7:37:03:1f:a2:12:8d:be:86:27:ea:3d:14:80:
53:a1:bb:5e:56:2a:07:ba:2d:6f:2f:f2:2f:e9:e6:0c:dd:2a:
ec:c3:5a:c6:f3:79:1e:54:d1:99:e8:a3:2d:35:71:73:70:b4:
d1:c7:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:35 2024 by rpki-client on console-ams.rpki-client.org