Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OEScvtgTjSsAiDLGXEnEe73MkGI.roa
File: OEScvtgTjSsAiDLGXEnEe73MkGI.roa (raw, json)
Hash identifier: mPZbueRsjnkeT+XiRKZStT4KbV5ogbBNoy8sLDZVDsQ=
Subject key identifier: 38:44:9C:BE:D8:13:8D:2B:00:88:32:C6:5C:49:C4:7B:BD:CC:90:62
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F15061EE14A773D333E33614F35DE88
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OEScvtgTjSsAiDLGXEnEe73MkGI.roa
Signing time: Sun 01 Jan 2023 20:45:26 +0000
ROA not before: Sun 01 Jan 2023 20:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60615
IP address blocks: 85.120.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:06:1e:e1:4a:77:3d:33:3e:33:61:4f:35:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38449cbed8138d2b008832c65c49c47bbdcc9062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:53:bc:bd:15:85:84:48:36:80:a9:18:2c:
a9:75:1d:b3:f2:23:16:dd:18:31:6c:68:ca:e9:ac:
69:b9:04:c6:c3:9a:8e:51:eb:3a:96:87:49:8d:3e:
45:13:65:38:58:6c:b5:a9:d9:4d:54:4a:18:f3:10:
3b:f6:64:eb:a0:3f:17:8a:8c:31:5a:5a:17:e3:07:
3d:1a:bb:1e:75:29:d3:24:ca:6f:aa:8d:ca:0b:c2:
a0:4a:d8:b2:7f:d6:2f:b1:0e:c1:5d:9d:88:95:72:
69:16:b2:fe:35:4d:cd:80:23:8b:87:25:c8:b3:be:
49:fb:9b:23:18:38:cb:03:dc:17:4a:b6:b4:b4:4c:
fc:96:23:a8:8b:b4:fd:66:25:8f:dc:60:9f:bc:34:
c8:92:2b:f7:4f:03:43:92:9c:0a:8d:f1:58:f0:1c:
a5:84:2b:ef:c2:bd:46:db:89:bf:aa:d8:c9:20:f8:
f2:4e:71:fa:59:e4:e5:40:48:b4:65:26:62:3e:1a:
71:2f:cb:12:9d:b2:43:3d:2d:93:a7:56:7f:9d:5d:
6a:6b:f7:f6:05:95:3c:b0:6b:61:a2:81:16:63:22:
dd:52:ce:a3:ee:e2:1a:81:d4:e7:87:dd:44:f4:1b:
ec:f7:69:58:dd:79:45:2c:2a:99:9c:e5:c6:1d:b4:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:9C:BE:D8:13:8D:2B:00:88:32:C6:5C:49:C4:7B:BD:CC:90:62
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OEScvtgTjSsAiDLGXEnEe73MkGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.232.0/23
Signature Algorithm: sha256WithRSAEncryption
32:76:74:c7:23:c6:8e:b3:c7:c0:22:65:7c:89:c4:fc:3f:4a:
a2:fe:3a:c6:77:14:45:44:17:45:e7:96:c7:18:00:74:09:d3:
53:c6:9f:0e:de:de:9c:34:3b:32:be:42:4e:ca:5f:0e:d7:4f:
92:aa:0a:c4:13:31:41:91:d3:98:14:3f:cd:fb:b9:62:50:63:
2e:dd:9a:08:94:14:70:8b:18:aa:b8:77:92:85:4b:44:18:46:
66:1a:9a:99:8e:b7:be:72:7f:34:e9:6f:95:0c:3f:43:a8:5d:
51:ec:80:1c:53:9d:f7:9b:bb:37:ca:16:af:4f:a0:4a:b0:0f:
d8:be:b8:fb:04:68:07:7e:15:14:7b:f0:a3:3e:ac:25:43:f9:
4c:26:b9:c3:00:a1:23:7e:9e:db:6d:a0:6a:0b:33:65:37:e2:
3e:f7:a8:bd:dd:71:d3:bc:f9:6b:c6:57:84:d0:03:8e:04:68:
47:0c:98:ce:b9:a1:6b:4b:5b:53:c7:24:f3:fc:91:bb:98:66:
46:7b:39:d0:4f:64:06:a6:57:9c:10:7a:33:19:87:70:4d:6f:
a7:49:14:dc:d2:07:1c:70:c0:b0:9d:e5:b8:2e:43:f3:c9:ad:
05:e4:cb:d9:35:9d:84:e6:27:be:87:da:c2:57:b8:42:c9:e9:
c1:a3:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org