Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/o_OfHAMml10MuqbJelAn5xliqVs.roa
File: o_OfHAMml10MuqbJelAn5xliqVs.roa (raw, json)
Hash identifier: /MCo8iyAUUtcSPaewuFXhHQ3YbrttfpcUUcq5m4cGD8=
Subject key identifier: A3:F3:9F:1C:03:26:97:5D:0C:BA:A6:C9:7A:50:27:E7:19:62:A9:5B
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA8B52B22B140A5CF14FD0D2F638EF
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/o_OfHAMml10MuqbJelAn5xliqVs.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203756
IP address blocks: 212.91.15.0/24 maxlen: 24
2001:1a68:53::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8b:52:b2:2b:14:0a:5c:f1:4f:d0:d2:f6:38:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f39f1c0326975d0cbaa6c97a5027e71962a95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:fe:61:c4:f9:a1:ea:f7:01:f1:ea:6a:1e:
71:9d:57:7e:55:f7:1d:dc:42:79:b8:ee:1a:7d:9a:
e6:e2:eb:f6:27:d1:e3:fd:c7:c1:68:43:1e:90:bd:
d5:72:01:6a:5a:30:f7:0e:00:9e:17:26:51:bb:be:
34:48:1b:e0:06:88:9d:bd:10:3f:fd:07:6b:aa:56:
d2:de:df:87:3d:c8:43:d4:27:b2:b4:cf:b0:5b:d5:
46:df:e8:ed:5c:71:46:c0:6f:33:cf:0e:39:9d:6d:
23:97:a6:9d:54:25:45:73:1b:a5:33:7d:e9:e3:d1:
f7:dd:ee:32:64:9b:40:79:f6:e4:49:75:31:71:dc:
6e:05:23:45:56:d0:83:1a:1c:d6:22:b1:d9:ac:e6:
2f:00:94:45:79:8a:b1:75:fb:cc:19:d9:79:b9:39:
22:7d:c2:3b:f8:d3:ce:f6:8b:79:00:e5:c6:80:f2:
31:e6:97:e3:75:7c:aa:8d:52:49:59:32:f7:ff:3e:
0f:9b:6e:a3:76:32:c1:3e:8d:be:88:39:51:bf:57:
7c:a3:9f:21:6d:0c:3a:7e:61:ee:0a:10:70:cc:ee:
fd:e6:02:2a:ac:19:0a:35:27:30:e3:ae:5d:7d:4a:
d9:db:38:ff:19:9a:34:a3:b8:61:e2:e6:5c:2c:ff:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F3:9F:1C:03:26:97:5D:0C:BA:A6:C9:7A:50:27:E7:19:62:A9:5B
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/o_OfHAMml10MuqbJelAn5xliqVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.15.0/24
IPv6:
2001:1a68:53::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a8:1c:80:4e:e2:36:5b:5c:62:eb:98:88:91:ae:c7:2e:95:
cf:29:46:a1:24:cd:f8:93:a7:c8:1d:d8:f3:3c:23:97:d6:bd:
cc:97:ff:8b:7a:46:6e:bb:61:0f:df:b2:a3:20:2c:43:b7:aa:
5f:0e:11:d5:e1:7a:94:e4:46:7a:3b:67:75:76:fc:b3:a5:7b:
37:ef:de:ca:70:91:cb:0f:0b:c6:f5:8f:96:87:f5:c5:de:ac:
2a:8c:e2:4e:b7:55:d0:44:78:71:42:6a:9b:bf:2b:1c:fa:c7:
36:a2:19:1a:42:49:3a:88:99:87:3c:b9:97:13:fb:c7:b8:d2:
64:fa:cc:c1:1a:49:8d:22:04:81:c0:66:b7:a5:90:1f:00:75:
47:f0:73:b1:c5:12:d8:01:c9:5b:55:73:62:76:f5:ca:e5:df:
71:ad:a9:99:1c:79:73:92:22:77:e5:c7:70:ab:27:2d:9d:03:
bc:45:27:02:32:8f:7c:3f:79:1e:01:c5:e8:00:5a:b1:45:f2:
d3:02:e9:a4:38:05:93:27:30:82:f0:52:dc:42:2f:65:0a:1b:
90:b7:9f:ff:67:c8:89:05:60:dd:6d:b8:c4:8f:69:0a:28:e7:
2f:79:4f:24:25:a1:52:4b:a6:06:b2:7f:20:ce:cc:cf:4d:0c:
cd:53:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org