Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/o2iFi_Hf7XlatX7TSWTFvqnc7X0.roa
File: o2iFi_Hf7XlatX7TSWTFvqnc7X0.roa (raw, json)
Hash identifier: tMXlusQjN+NxTYfCN26NkbIDccISXVVAdoYsMQzJ0no=
Subject key identifier: A3:68:85:8B:F1:DF:ED:79:5A:B5:7E:D3:49:64:C5:BE:A9:DC:ED:7D
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF75A5FBB6E8336934AC2BD068ABB8
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/o2iFi_Hf7XlatX7TSWTFvqnc7X0.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201125
IP address blocks: 148.81.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:75:a5:fb:b6:e8:33:69:34:ac:2b:d0:68:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a368858bf1dfed795ab57ed34964c5bea9dced7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:19:93:52:6a:4f:66:7b:2d:6c:83:25:53:
ab:8b:47:88:f3:f6:dd:b3:90:02:ce:79:66:6c:3b:
c5:f2:37:c4:fa:8d:c2:82:0b:6f:b9:dd:dd:e5:e1:
0b:3e:f3:39:b8:e6:cd:d0:67:24:67:c9:9e:11:a2:
12:70:f9:a0:27:d3:af:97:cd:3f:b1:b4:c5:7f:59:
df:11:13:b1:27:f0:07:a4:28:7d:3f:cb:e9:fe:8d:
1b:b2:9b:a0:e2:72:76:f5:76:a5:fb:52:f9:3b:e6:
98:bb:45:2d:53:0a:70:85:d9:55:d1:33:09:f1:2c:
86:52:d2:e4:30:f5:0e:b4:ef:52:1a:d8:2c:e2:b8:
ed:03:b5:0f:6f:b8:bb:09:95:74:86:5f:61:30:18:
62:00:13:c2:16:35:57:bd:94:c6:8f:31:d3:64:85:
1b:ae:c9:d2:3e:5c:a4:c9:ae:95:7f:4d:e7:58:30:
84:81:1b:e7:84:59:76:54:52:2f:96:21:f3:63:ef:
1f:85:16:ab:8c:71:d3:a9:ee:13:2d:a3:40:99:b8:
c8:98:75:5b:a4:b5:ce:d0:15:10:29:2a:05:75:02:
93:23:83:2e:43:98:cc:73:78:4b:37:1d:c9:bc:df:
3b:40:29:4d:1a:e7:50:8d:f4:97:3e:9a:9b:69:e1:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:85:8B:F1:DF:ED:79:5A:B5:7E:D3:49:64:C5:BE:A9:DC:ED:7D
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/o2iFi_Hf7XlatX7TSWTFvqnc7X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.248.0/24
Signature Algorithm: sha256WithRSAEncryption
01:32:d5:64:30:00:21:51:c9:fb:56:5f:f4:a2:32:45:0b:95:
56:0f:97:37:6a:61:8b:58:f1:7a:21:40:a1:c1:0f:77:cc:e8:
f4:19:81:5d:26:09:95:cd:ff:49:87:4b:0c:a7:7c:85:86:54:
f4:2c:90:04:d0:bb:f4:99:01:10:14:86:68:a9:66:da:a0:19:
96:38:04:a8:48:de:92:53:c6:c5:df:41:d0:e4:a1:d2:cb:c8:
af:ef:ee:78:19:34:ef:45:d8:e5:70:12:38:40:51:6f:44:76:
6a:33:ce:b0:c0:81:a2:4a:9d:4b:af:13:0e:d4:e7:a3:53:71:
12:21:73:1a:29:d6:e5:f5:ea:17:bc:37:34:8c:c3:fe:0c:24:
55:29:a8:06:0c:c8:9c:fd:19:5d:47:f9:35:c0:39:75:f4:ea:
a5:72:0c:c2:67:d1:ba:ce:5a:a8:11:30:e6:f6:8f:7e:da:b3:
de:9b:c9:f9:6f:88:ec:18:ec:9f:5d:74:50:e5:8e:87:b3:36:
f7:36:cc:ca:a0:87:62:f7:f5:3e:4d:5d:cc:25:a6:9c:37:65:
58:7d:d4:ad:6f:59:15:6b:32:b4:07:79:c8:20:3a:38:3d:ae:
92:da:8e:a5:7a:e4:63:fa:b7:2d:3b:bb:42:bd:5d:91:81:3f:
2b:59:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org