Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Om-j-wDAEy_7Ffy7PBsPMH4J-ko.roa
File: Om-j-wDAEy_7Ffy7PBsPMH4J-ko.roa (raw, json)
Hash identifier: wg+/q0jb89D7ssWibT8Na12y06A3wA1rHaJyB9CdtFk=
Subject key identifier: 3A:6F:A3:FB:00:C0:13:2F:FB:15:FC:BB:3C:1B:0F:30:7E:09:FA:4A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185F7DD84CFBC08D90261926CEC74CC9C4E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Om-j-wDAEy_7Ffy7PBsPMH4J-ko.roa
Signing time: Sat 28 Jan 2023 10:12:47 +0000
ROA not before: Sat 28 Jan 2023 10:12:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f7:dd:84:cf:bc:08:d9:02:61:92:6c:ec:74:cc:9c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 28 10:12:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a6fa3fb00c0132ffb15fcbb3c1b0f307e09fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:f0:6c:a4:a3:2c:51:d1:86:50:59:0b:2c:
15:be:a5:3f:87:57:7f:71:73:0b:19:84:54:61:46:
13:0f:5f:92:2a:35:a3:b7:5e:49:97:bc:8e:6d:15:
80:c2:c1:09:62:25:89:29:43:f1:ea:07:ed:37:50:
7f:83:6f:52:af:bb:aa:cb:66:21:e7:5e:86:e3:57:
fb:59:70:d4:cb:76:21:05:b4:84:62:b3:cf:08:15:
a1:44:b6:70:cb:58:aa:af:7d:5a:bd:45:48:91:64:
32:d2:ad:a3:fd:4f:f4:1f:05:6f:57:e7:7e:ff:4c:
bd:10:37:88:66:f4:d8:df:22:81:7b:14:c5:93:12:
d0:90:34:f2:bf:12:d7:df:88:f5:01:23:df:b5:9a:
de:89:53:dc:c8:63:ab:1d:35:2d:82:8c:e8:f5:dc:
a9:5b:92:bc:c9:d6:6c:46:01:9d:1c:67:94:03:10:
1f:d9:d0:c9:31:80:50:a6:68:5e:6b:d2:4d:fc:0a:
28:31:86:13:4a:26:e7:8f:8f:ae:4e:f3:43:a7:f5:
fe:f8:81:1a:96:7c:8d:93:bc:ad:3e:1c:54:fb:4e:
c9:2a:56:8e:d6:87:9d:79:36:5b:49:96:11:ca:0d:
dc:f7:48:3f:61:4d:91:d4:01:ac:de:0a:9d:8a:28:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:A3:FB:00:C0:13:2F:FB:15:FC:BB:3C:1B:0F:30:7E:09:FA:4A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Om-j-wDAEy_7Ffy7PBsPMH4J-ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d9:1d:10:07:a4:79:ab:13:dd:31:1e:19:a0:6d:be:b5:62:
f6:43:e3:38:9f:32:1e:15:bc:66:3a:da:d7:12:e4:2e:49:84:
7b:ba:dc:45:85:f3:76:28:d3:b6:3f:b0:ac:a7:21:06:86:7d:
46:a1:bf:14:24:10:65:94:81:40:59:97:5e:3f:fc:86:f3:80:
5f:57:4e:bc:42:51:2d:42:df:65:3f:83:fa:e9:c6:ad:27:bf:
86:1a:ae:7e:de:43:57:18:83:4a:21:29:38:bc:63:cf:f4:b4:
a2:7c:b8:6a:9d:be:eb:96:7a:1a:cd:cc:0a:43:cf:ab:1f:a9:
83:82:9f:cf:4b:db:b6:63:5c:d3:3c:67:6c:22:bb:c2:cd:b1:
43:aa:9b:63:c4:7d:73:95:ce:ff:db:7e:d0:dd:e9:31:5e:05:
f9:17:f8:22:70:aa:48:ce:26:6b:af:26:2b:ab:18:eb:4c:de:
3f:9d:6e:2b:d0:de:f6:e7:0d:6a:de:a1:a7:1e:e9:e8:cb:05:
1b:5d:58:33:d4:40:be:2d:f4:e9:33:b7:62:f1:ab:c3:5b:a2:
2d:e2:6e:e1:5c:75:a9:d0:f1:09:1f:ad:2d:29:02:a9:17:a7:
66:42:09:2b:21:b4:8b:5d:8e:7a:5b:82:5a:76:bb:62:f9:50:
eb:d4:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org