Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oLP95eQAgT-Fs6PHjwKtuQBtybk.roa
File: oLP95eQAgT-Fs6PHjwKtuQBtybk.roa (raw, json)
Hash identifier: gV06REs1OSQqtu3nqk0FzzVTduWmhkBqbNWVcdXOlws=
Subject key identifier: A0:B3:FD:E5:E4:00:81:3F:85:B3:A3:C7:8F:02:AD:B9:00:6D:C9:B9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F024B0EBFA60247D726F81FB010BC81
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oLP95eQAgT-Fs6PHjwKtuQBtybk.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197616
IP address blocks: 85.254.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4b:0e:bf:a6:02:47:d7:26:f8:1f:b0:10:bc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0b3fde5e400813f85b3a3c78f02adb9006dc9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:c4:19:f9:f5:c8:3a:68:f2:4e:1c:0b:d2:
59:9a:82:4a:ce:ea:34:58:a1:8a:69:1b:12:3e:e5:
77:e0:77:ad:3e:d2:49:4a:89:9e:0f:27:32:31:fb:
a3:7e:e3:c0:f4:a6:ee:19:b9:6c:9f:7c:3f:3a:44:
fe:04:33:f7:12:99:e9:ca:37:82:57:62:06:9d:f1:
2b:59:24:be:80:0d:2e:03:49:a1:24:24:6e:64:4e:
d0:cb:8a:99:40:dc:14:2f:8e:bc:09:c7:f0:d1:3d:
35:ee:fe:7e:17:53:bb:13:fd:f1:ec:a4:91:e8:56:
e1:7e:10:63:2a:3c:6d:89:df:36:af:a5:66:56:f9:
03:69:6c:81:ef:da:d3:5a:83:27:36:8b:a5:99:bd:
12:94:8b:d3:51:7b:d7:e2:82:c1:13:66:e7:5b:08:
e7:03:c4:1d:97:95:80:6c:d8:4d:04:0d:40:2d:0a:
22:bc:5f:a5:13:c7:07:94:1d:0f:e1:01:fd:5f:0c:
79:6f:09:8d:c7:e0:5e:c8:13:47:42:5e:30:fe:86:
d5:5a:19:ef:d3:3f:15:85:29:51:11:f5:72:5e:1c:
bf:f2:d0:d0:eb:a6:52:ff:c9:9f:be:3e:01:f4:e4:
c5:1a:82:76:3b:4a:2c:0b:f8:58:d4:92:bd:8c:f3:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:FD:E5:E4:00:81:3F:85:B3:A3:C7:8F:02:AD:B9:00:6D:C9:B9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oLP95eQAgT-Fs6PHjwKtuQBtybk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.136.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d8:e8:30:91:e3:37:c2:ea:7f:f6:d7:4d:6b:5f:ac:0d:9f:
26:7e:0c:03:7b:6e:29:1a:d4:a7:e8:bf:a4:48:87:cb:df:68:
0c:97:42:91:71:c7:2a:44:25:4c:6c:84:cc:a5:a0:d3:9a:81:
c5:f8:2b:9f:96:11:0c:3b:e6:f6:cb:c8:ef:9b:18:27:bf:d6:
b1:88:80:b2:e1:35:2e:80:a1:c5:87:70:12:a6:89:cb:0e:09:
43:9f:2a:4c:b4:a0:7d:d8:85:1c:26:c4:21:10:86:d0:51:9d:
5a:49:75:b6:62:c3:27:59:56:fc:52:d5:7b:a3:2a:42:0b:b7:
07:77:d3:4f:9d:32:1e:b8:36:91:51:94:25:30:ae:9d:70:f4:
67:d2:98:fd:57:39:97:7b:84:a2:50:b6:41:9e:80:80:a4:72:
2f:cf:d4:34:5c:34:c0:c1:94:d6:f2:8e:d4:f9:49:5d:64:d7:
3c:d1:a6:e8:a0:aa:97:55:6d:e2:b6:c9:75:3b:17:15:53:4a:
50:e8:b1:d8:0d:72:d4:a5:79:6f:14:69:14:89:67:24:e3:25:
c2:ac:6f:ac:d9:cc:d5:63:2d:a3:5d:83:3a:e1:74:c0:39:90:
cf:b4:f6:1f:9c:20:77:06:76:87:5d:c7:5f:0e:e3:44:5f:32:
dd:57:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org