Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/oohzS1U9_lAYREIP-tIuC5qO0cc.roa
File: oohzS1U9_lAYREIP-tIuC5qO0cc.roa (raw, json)
Hash identifier: jRWK81zV/A+cgN5DlysIG7uhDydLsC/pUDzrxkjr7P4=
Subject key identifier: A2:88:73:4B:55:3D:FE:50:18:44:42:0F:FA:D2:2E:0B:9A:8E:D1:C7
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: 01856F39114291B3A88E05421E35500BE1AE
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/oohzS1U9_lAYREIP-tIuC5qO0cc.roa
Signing time: Sun 01 Jan 2023 21:24:48 +0000
ROA not before: Sun 01 Jan 2023 21:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:11:42:91:b3:a8:8e:05:42:1e:35:50:0b:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Jan 1 21:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a288734b553dfe501844420ffad22e0b9a8ed1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:68:a4:3a:a1:94:47:87:6c:bd:0a:1b:0b:
88:8a:19:42:fb:e3:bf:11:dc:31:a9:90:f2:5b:c4:
af:98:16:42:4a:55:fb:9d:0a:82:36:96:13:e5:02:
7c:57:4e:0d:93:e3:f9:c4:ea:dd:aa:b1:b8:af:49:
b5:5a:e8:ab:fe:b3:17:04:6d:ae:30:ff:6e:1a:e9:
fd:33:56:55:fc:e2:0d:b0:74:c1:c2:9b:3d:76:78:
3a:e2:d5:4b:83:f3:e5:d0:3d:55:c9:db:1b:22:f8:
1b:af:db:1e:16:fb:39:dc:1f:67:f8:93:24:85:ee:
1f:5d:e2:c6:81:61:8b:b6:d2:7e:27:d0:d8:29:46:
d6:4b:33:ff:33:1f:1c:15:18:70:08:89:e7:45:e2:
d6:71:0b:47:44:a2:00:ff:6d:9c:e8:ec:a3:3a:bf:
8d:33:7a:63:1b:da:0a:25:14:77:a9:b0:a3:d8:f1:
f5:c1:0a:1a:69:ba:1d:05:cc:9a:9d:e3:99:6a:74:
01:13:5f:e5:98:8d:b3:f3:a1:8e:e1:58:5c:d5:87:
0f:c0:87:f3:63:43:13:05:05:d1:aa:1f:59:60:8f:
b6:88:2d:7c:37:87:dc:dc:88:8a:8e:7a:f1:7a:b9:
aa:7f:56:e2:d3:00:1a:ad:53:a0:60:9d:69:70:81:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:73:4B:55:3D:FE:50:18:44:42:0F:FA:D2:2E:0B:9A:8E:D1:C7
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/oohzS1U9_lAYREIP-tIuC5qO0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
37:dc:64:c0:b2:91:66:8c:05:8b:03:1b:c1:b6:80:db:d5:b3:
83:e7:d6:b4:7b:42:80:31:80:5d:cb:9e:83:23:31:30:b8:b2:
68:96:bb:c4:51:68:5e:c0:31:49:eb:da:93:29:da:35:e3:5d:
13:64:6b:84:cf:1d:cc:33:18:d9:e9:bb:de:35:db:5d:e3:55:
63:9f:34:01:9f:0d:f5:3d:b4:c2:10:6e:fa:b7:2f:15:fc:5b:
78:09:3a:32:ca:2a:ee:45:6c:b8:cf:09:44:36:ab:1b:fa:1d:
c1:b4:c6:9c:55:9e:92:37:49:34:3c:a9:b6:ae:ef:32:01:81:
ca:bd:d0:43:72:41:ac:b8:71:48:fc:36:1a:03:7c:e8:77:57:
65:b2:dc:54:c1:ed:07:65:07:41:21:6d:b9:84:75:24:74:72:
02:11:fb:dc:ee:7c:60:0a:76:d5:46:1a:16:75:74:87:73:12:
45:d5:85:f3:c1:75:da:e9:6c:14:27:c5:16:7c:80:c0:99:bb:
a3:5e:73:bd:d8:cc:59:6e:34:dd:59:00:ca:fa:13:dc:79:32:
a6:00:d6:12:ce:22:fc:2a:2b:5b:75:6a:a2:31:99:dc:ba:5a:
75:fa:ca:b7:1e:c0:6a:cc:f7:7b:3a:e4:d2:a2:8d:4a:7e:1e:
4b:ae:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org