Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OScgxH3swZ2dchfMe8QddBln4RQ.roa
File: OScgxH3swZ2dchfMe8QddBln4RQ.roa (raw, json)
Hash identifier: fl/YZ/t63liXyKNpaNm++zPI3aaqpN8ZQXEVkUQrTr4=
Subject key identifier: 39:27:20:C4:7D:EC:C1:9D:9D:72:17:CC:7B:C4:1D:74:19:67:E1:14
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01884DD6A1011EC153094417F84A8016FDDC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OScgxH3swZ2dchfMe8QddBln4RQ.roa
Signing time: Wed 24 May 2023 12:58:11 +0000
ROA not before: Wed 24 May 2023 12:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28925
IP address blocks: 81.181.202.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:d6:a1:01:1e:c1:53:09:44:17:f8:4a:80:16:fd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 24 12:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=392720c47decc19d9d7217cc7bc41d741967e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:3e:ac:0a:46:8d:0a:87:9b:7f:14:c2:e1:
1d:10:d8:46:21:a3:f8:e4:cd:62:a4:2f:c9:d6:61:
b3:e9:5f:9a:ee:6e:53:85:4b:e7:3d:50:e2:42:6c:
93:85:c6:8c:8a:b0:e0:8e:99:f2:7a:4b:08:07:5b:
11:50:88:28:f5:e0:e2:fd:5f:e6:1a:ab:a9:f4:c0:
cb:53:3c:06:9b:fa:eb:38:d8:be:e7:bf:9a:1d:75:
2d:d1:b6:95:b2:60:55:7f:fe:d1:a1:87:3d:b8:ae:
4d:37:97:fd:a0:26:42:23:ad:d8:77:f9:35:47:a5:
36:0d:81:32:e1:b9:79:57:74:62:6d:4b:b9:03:0d:
78:89:5b:ab:5a:69:1e:a6:61:2e:8c:eb:1e:95:8a:
62:d0:0d:d0:58:0d:c6:36:d9:8a:5a:cc:af:2e:c2:
7c:5d:bf:58:6c:37:88:dc:d1:d8:c4:d4:3b:b2:61:
07:f9:9b:a4:a7:51:9d:a1:cc:e5:12:d2:62:42:3b:
92:21:5d:69:a5:b8:90:ad:a2:01:fd:f2:4e:8d:0d:
75:75:ab:20:99:aa:e4:08:26:af:25:a7:ee:d3:dc:
82:3d:d1:bf:7c:c3:e5:1f:4a:75:d0:8a:c9:c4:fd:
16:04:03:d9:42:c3:be:bd:1f:55:54:b0:88:41:9e:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:27:20:C4:7D:EC:C1:9D:9D:72:17:CC:7B:C4:1D:74:19:67:E1:14
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OScgxH3swZ2dchfMe8QddBln4RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.202.0/23
Signature Algorithm: sha256WithRSAEncryption
98:46:af:85:ef:96:b8:3c:02:ec:a5:d4:10:1e:8e:af:3a:5d:
87:8b:a7:09:53:a9:61:58:4f:2c:46:86:8d:ae:82:c3:e7:a9:
bb:48:38:67:d3:e5:9e:63:55:69:76:8d:b9:fa:42:22:5a:7a:
3b:42:0e:91:b9:ef:ca:de:b9:2e:99:95:2a:78:7b:10:81:77:
da:48:6d:a2:21:cd:6b:58:31:5a:fe:88:ac:8e:ca:38:f0:55:
13:40:03:3a:2e:91:c3:02:bb:a6:e5:aa:75:4c:37:e4:cf:0d:
d3:9d:b9:35:bb:fb:b1:0e:20:9e:bb:fd:d0:5d:96:a6:e2:94:
eb:72:6f:aa:41:be:37:6e:a3:d8:2f:91:24:48:ac:0d:49:30:
38:16:7a:c5:16:8e:b5:a2:c7:60:39:cb:f7:2a:30:ff:30:21:
31:8b:95:91:1c:90:a0:84:63:9b:5c:96:0c:46:d0:21:cb:e0:
6a:30:de:df:f0:e5:9d:e1:88:b5:92:a9:67:2d:35:e7:93:b5:
8e:f9:48:55:67:ff:f1:92:fa:68:e9:5f:7a:bd:7d:d9:44:0e:
75:5c:0f:05:c1:da:93:1b:b3:ae:e7:93:76:fd:d2:21:cb:cf:
8f:4e:fe:f6:cf:d6:aa:70:91:54:b2:e9:2a:d5:e8:e5:3e:4a:
c7:3e:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org