Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ovyirJFMS5ZObFISmFHV2Zre89M.roa
File: ovyirJFMS5ZObFISmFHV2Zre89M.roa (raw, json)
Hash identifier: eZwp7iKa/s3yYfdWOYC3Ujsf5i1PVi3+9xbtIk5NoAM=
Subject key identifier: A2:FC:A2:AC:91:4C:4B:96:4E:6C:52:12:98:51:D5:D9:9A:DE:F3:D3
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 018AA8F3957A660BDA0E23B438CA2FE4D987
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ovyirJFMS5ZObFISmFHV2Zre89M.roa
Signing time: Mon 18 Sep 2023 15:40:50 +0000
ROA not before: Mon 18 Sep 2023 15:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204004
IP address blocks: 92.246.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:f3:95:7a:66:0b:da:0e:23:b4:38:ca:2f:e4:d9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Sep 18 15:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2fca2ac914c4b964e6c52129851d5d99adef3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:40:35:eb:59:6b:f9:13:40:65:cb:47:f4:
61:ac:ee:c2:63:f5:39:a6:cb:ab:e9:26:8e:6a:08:
57:c9:a9:71:c2:66:a5:9b:8e:35:89:8f:dd:93:03:
da:17:34:e7:74:0e:40:d5:d1:c0:33:cd:df:db:3e:
83:32:d5:fa:7f:19:72:f8:3a:95:ad:20:5e:8e:8c:
e8:c2:df:06:93:82:86:70:bb:bf:d4:cd:7d:0a:79:
e0:8b:22:38:e2:0a:1e:e7:70:53:ee:01:a2:31:9c:
05:7e:ca:5f:a3:05:14:99:6f:f4:f6:f1:86:6d:4f:
ac:fd:3b:e6:6e:14:32:d8:58:c2:42:89:d9:0e:c1:
90:8d:43:3d:dc:22:1f:3d:c7:41:80:ad:a5:b5:89:
40:41:ec:39:0c:63:9a:b8:20:f9:64:ff:67:49:5c:
ad:a8:e4:ba:7e:37:53:c9:f0:80:11:db:a3:47:da:
ec:c2:f4:49:bb:50:be:ba:2c:d9:13:09:71:7c:23:
7a:d9:63:56:08:36:69:18:e2:59:25:b8:0e:1b:34:
c8:94:9e:41:75:28:f8:c0:c4:47:8d:70:d1:2f:84:
7e:e7:7d:14:f5:8a:88:85:39:9e:4a:06:fc:87:35:
8b:60:49:49:52:cb:d3:48:1a:8c:2c:12:89:d0:58:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:A2:AC:91:4C:4B:96:4E:6C:52:12:98:51:D5:D9:9A:DE:F3:D3
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/ovyirJFMS5ZObFISmFHV2Zre89M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b7:81:59:71:fa:88:3f:0b:8e:9e:f7:4d:a5:26:43:25:53:
98:8d:77:d2:fa:14:86:02:b7:97:6f:cc:58:87:bd:ba:15:7d:
48:6b:03:96:24:a8:ea:43:f2:f1:61:42:d4:83:17:dc:90:8a:
d5:6b:e1:67:10:64:27:33:b7:4b:98:ab:23:f3:d5:3c:16:4e:
ac:46:c6:b2:66:f3:3c:18:61:97:0f:3d:9a:15:f5:b1:ab:c0:
41:1e:1e:8c:c0:c7:6e:23:ee:db:93:a2:0c:de:2f:17:5a:28:
66:c9:29:75:f8:b8:8c:dc:da:c1:cb:0d:9d:4f:a3:77:bb:3b:
fa:de:44:fc:52:1d:60:fa:5b:a9:d0:b8:47:86:f9:4f:08:71:
72:92:d9:d5:f7:cd:32:04:22:a3:36:9c:b5:2d:9a:81:cc:bd:
f6:67:05:92:1c:80:09:ee:72:38:6e:17:81:7f:43:01:0b:55:
0b:89:72:f7:a1:6d:6b:d4:8f:ce:7b:00:7c:29:9e:76:c2:26:
e8:44:7c:be:03:9a:ca:c8:56:d7:3f:01:2a:bb:f6:50:f3:27:
fa:ae:4c:ef:5b:18:e0:f3:42:f1:e7:91:ad:d3:23:1c:a1:21:
00:12:0f:96:82:b6:e0:46:b0:ca:ca:ad:2e:2c:83:ed:60:b8:
c3:96:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 13:31:35 2023 by rpki-client on console-ams.rpki-client.org