Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OaHq_6dEo0ORY45SNCWbW7Fusdk.roa
File: OaHq_6dEo0ORY45SNCWbW7Fusdk.roa (raw, json)
Hash identifier: Eo6rzHVZjKSKXCNh+EgbcItylINWOok4GMSFkh9g1Ok=
Subject key identifier: 39:A1:EA:FF:A7:44:A3:43:91:63:8E:52:34:25:9B:5B:B1:6E:B1:D9
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A66E2E0CF857E86F5A5917B3237C
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OaHq_6dEo0ORY45SNCWbW7Fusdk.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61157
IP address blocks: 46.23.208.0/21 maxlen: 24
212.1.32.0/19 maxlen: 19
188.64.192.0/21 maxlen: 21
62.75.174.0/24 maxlen: 24
185.209.64.0/22 maxlen: 22
195.244.96.0/19 maxlen: 19
2a02:ad0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a6:6e:2e:0c:f8:57:e8:6f:5a:59:17:b3:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39a1eaffa744a34391638e5234259b5bb16eb1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:ee:bb:43:7b:82:9e:4e:10:42:5b:63:1d:
0f:31:ce:42:56:dd:04:a8:9b:ea:be:cf:c9:01:c1:
e5:3f:3f:97:be:c5:75:b2:e7:34:ea:38:43:95:34:
4c:1c:da:ca:40:40:8e:d7:05:d8:b4:dd:95:4c:d0:
e4:7a:9d:43:9e:c3:c8:e5:89:60:e5:03:bf:06:3f:
bc:c4:76:40:a2:03:2e:6e:d6:e3:8d:8c:22:d0:4e:
6b:7d:be:ef:b8:b3:82:d9:57:36:a9:4e:5d:a8:9f:
84:46:22:fe:aa:13:9c:9a:f1:e8:0c:cb:5a:a5:ac:
be:99:fd:41:10:69:7e:fc:2e:ac:fe:f3:6f:56:d1:
f6:63:41:e2:2c:a6:87:e1:ca:e1:3a:d2:80:f3:c0:
df:09:a4:44:c3:b2:6d:df:04:af:de:40:63:7c:4b:
51:4d:8c:f1:76:70:b8:f1:4e:12:32:ef:3a:8e:dd:
af:a6:9a:36:58:ce:c3:42:2b:b8:51:c8:a9:13:8a:
8a:a0:86:05:f7:7c:4d:85:fb:5a:03:31:30:1f:13:
17:78:a1:ba:66:7f:a3:b1:21:52:15:6d:0d:7d:9e:
28:f9:b4:a9:5e:5e:65:21:2b:b9:58:f2:81:48:5d:
e7:4b:9d:bc:20:03:7a:df:8a:5d:b0:2f:ed:70:af:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:EA:FF:A7:44:A3:43:91:63:8E:52:34:25:9B:5B:B1:6E:B1:D9
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/OaHq_6dEo0ORY45SNCWbW7Fusdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.208.0/21
62.75.174.0/24
185.209.64.0/22
188.64.192.0/21
195.244.96.0/19
212.1.32.0/19
IPv6:
2a02:ad0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:93:ca:bc:77:11:b7:c6:0d:bb:a5:12:1d:e9:ba:44:66:78:
52:d4:10:ca:43:11:37:76:52:b7:ef:fa:77:3c:21:65:7d:1d:
74:5f:33:db:7d:50:8c:ae:24:a5:3c:c4:37:1d:b4:82:50:ef:
0e:dc:ad:d8:58:6f:92:ee:b5:cc:cf:2e:71:4f:38:58:10:c3:
f6:f9:49:85:0a:82:43:0c:16:28:3a:9d:57:3a:31:f1:8e:e6:
a1:fa:29:bc:0e:9d:86:96:15:e2:94:44:9b:15:f1:60:d4:09:
17:fe:eb:2b:97:b9:0e:56:b2:62:2b:f5:d1:a6:86:35:57:11:
02:0e:dc:24:74:f0:a4:7c:59:11:4d:c5:90:2e:4f:61:5a:30:
67:b1:71:72:de:71:62:30:d3:49:00:53:b5:7b:5b:7b:8d:27:
29:d3:dc:86:0c:e6:3d:91:91:7b:9f:f5:2f:f0:0e:5e:2a:63:
fe:37:56:a3:84:f9:60:9d:07:a1:42:13:d0:f5:11:11:4b:91:
a8:a9:73:97:af:83:28:64:ba:32:12:aa:a6:b6:58:0f:72:f4:
95:9e:46:af:87:bc:b7:21:5c:bf:52:21:05:92:ab:6a:60:af:
78:98:f1:72:59:1f:9a:ac:96:7c:f7:22:ed:35:01:a0:e2:93:
ee:c7:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 12:19:30 2023 by rpki-client on console-ams.rpki-client.org