Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/ouqnT3UzQiO7a8Ao7gfkrOn4GTc.roa
File: ouqnT3UzQiO7a8Ao7gfkrOn4GTc.roa (raw, json)
Hash identifier: mvdHx16lkpt3hqAjNufQbnmp7d3XGzdTAEetAprUVlg=
Subject key identifier: A2:EA:A7:4F:75:33:42:23:BB:6B:C0:28:EE:07:E4:AC:E9:F8:19:37
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 01856C013456D59BE9CD6265C17E5C6EAD34
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/ouqnT3UzQiO7a8Ao7gfkrOn4GTc.roa
Signing time: Sun 01 Jan 2023 06:24:56 +0000
ROA not before: Sun 01 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207975
IP address blocks: 194.32.166.0/23 maxlen: 23
194.32.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:34:56:d5:9b:e9:cd:62:65:c1:7e:5c:6e:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Jan 1 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2eaa74f75334223bb6bc028ee07e4ace9f81937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:20:56:64:50:b7:01:b2:fe:39:e0:5a:42:
f8:9c:ad:d7:41:49:d5:23:80:99:4c:90:c2:7f:df:
06:d8:10:e9:09:9c:91:d7:61:82:9b:a0:4a:1c:85:
62:55:00:95:35:c1:c8:5d:b2:0b:a2:e1:1f:e0:1b:
19:0a:5d:b5:34:cf:66:84:8d:2c:90:26:0f:fe:49:
9a:cc:93:85:0e:33:3a:e0:c1:18:8c:81:13:c2:52:
2f:ce:39:2c:dc:b4:83:1d:92:af:06:37:a4:64:63:
01:8e:56:1f:a7:59:8b:be:c2:f4:99:ab:d6:75:d3:
e8:87:17:63:ef:52:ed:6c:d1:fd:70:ad:b7:bb:0f:
6e:56:ce:a4:33:c2:48:23:21:aa:98:0a:a2:01:1c:
ee:db:85:02:32:ac:9e:93:d7:f6:1d:94:00:6a:a4:
dd:f7:a8:5e:16:c3:67:2f:9d:c0:97:5c:dc:c0:d1:
81:23:87:c1:41:99:8f:b2:03:73:b3:43:96:89:ec:
d9:72:09:b5:40:87:1c:c6:1b:09:5d:08:3f:89:67:
ac:51:cd:ae:79:7a:6a:82:df:f3:67:ee:d9:64:59:
32:3c:c1:58:96:00:d3:24:4e:1c:e1:22:23:2f:cc:
b6:1d:b1:19:b7:45:67:0b:69:9a:c6:a5:1e:52:5d:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:A7:4F:75:33:42:23:BB:6B:C0:28:EE:07:E4:AC:E9:F8:19:37
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/ouqnT3UzQiO7a8Ao7gfkrOn4GTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.166.0/23
194.32.204.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:1f:7b:ab:1a:2b:56:af:d6:75:bc:14:8f:e3:8c:c8:43:51:
00:87:93:1e:6d:bf:fe:35:28:40:34:ef:fc:7c:84:5a:61:a4:
6d:ca:19:77:28:2a:01:a8:cb:0d:52:82:33:84:9d:76:d2:36:
56:d9:bd:a3:2f:a4:97:2a:6c:dc:42:21:a9:62:7a:40:95:b2:
80:60:76:f0:6b:1f:b2:1e:9b:ba:4f:27:b0:04:37:a0:ca:27:
42:14:76:fa:e7:e3:0b:b4:0e:d8:7f:bf:6d:89:fc:f6:47:c1:
13:20:54:e8:ea:a1:96:c0:d2:e0:aa:62:f5:36:d4:46:bf:99:
36:60:ad:52:3d:f3:e6:d6:b9:75:c2:93:cf:e0:9a:ce:c0:4b:
35:19:99:9a:42:60:90:dd:ba:81:3f:4d:8a:d2:0b:f9:31:a6:
c1:95:45:02:e5:18:32:60:a2:69:35:7b:d3:ca:a5:34:c0:42:
b2:40:eb:ec:fd:45:3f:5a:00:80:3e:ea:06:57:2a:44:c3:71:
81:e4:f2:da:7d:62:2f:ff:14:fa:b4:a5:75:37:df:f7:b0:c9:
e4:f4:23:9b:c1:91:07:22:62:4c:3b:46:e9:17:46:c9:78:51:
da:12:4f:40:82:ef:92:3c:05:27:55:6a:ef:78:5b:44:ef:28:
c5:c1:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:15 2024 by rpki-client on console-fra.rpki-client.org