Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/oZSsZn8qSniPfJntBTfiV7SthLs.roa
File: oZSsZn8qSniPfJntBTfiV7SthLs.roa (raw, json)
Hash identifier: Z8C6WLVw8ExuETHdLozHxdAysDR7cqeUI/MYD529XLw=
Subject key identifier: A1:94:AC:66:7F:2A:4A:78:8F:7C:99:ED:05:37:E2:57:B4:AD:84:BB
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 01899C324317BE9DD8336B80F6CF1E5261CF
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/oZSsZn8qSniPfJntBTfiV7SthLs.roa
Signing time: Fri 28 Jul 2023 11:11:26 +0000
ROA not before: Fri 28 Jul 2023 11:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12815
IP address blocks: 193.17.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:32:43:17:be:9d:d8:33:6b:80:f6:cf:1e:52:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Jul 28 11:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a194ac667f2a4a788f7c99ed0537e257b4ad84bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:31:05:65:6e:7f:d5:49:31:a3:2d:a0:ab:
2d:58:1c:a6:91:fd:4c:84:8b:45:dc:69:bf:38:71:
ca:1f:d2:22:29:6b:f2:ae:b6:48:83:92:06:cc:07:
96:09:b3:9d:b9:15:f8:a7:42:03:37:9f:13:c0:9c:
08:3d:58:fe:4a:20:a1:7a:04:71:9f:10:60:59:37:
92:d0:8c:58:9d:7a:cc:be:ba:ef:be:86:89:1a:11:
54:ae:54:c2:3d:da:29:30:bf:1e:0a:a3:e0:e0:78:
1f:65:36:f7:0f:28:60:ab:e9:7a:9e:57:37:f7:7c:
8d:ac:3b:be:d8:ce:85:44:9a:da:f0:a6:4a:6c:ae:
5d:37:46:91:f6:f5:cc:34:7c:b4:c1:d1:ad:cd:46:
17:5d:82:44:a9:88:01:71:1f:ef:0d:f3:ed:57:09:
bd:50:80:4f:86:d5:33:71:e8:b8:b3:c6:11:e5:eb:
0a:6b:1c:8d:87:36:08:dc:3f:2e:b4:13:f8:d9:a1:
87:a4:9d:db:f7:b8:74:a1:82:bb:d0:0b:f9:4c:86:
e2:ec:61:7f:5e:d8:0c:22:93:22:8b:2c:c5:5e:35:
90:37:4f:c4:d6:42:9b:3d:09:6c:fb:8d:25:a7:a5:
df:49:38:7f:a1:cd:c5:3f:d2:8b:57:45:f0:5e:86:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:AC:66:7F:2A:4A:78:8F:7C:99:ED:05:37:E2:57:B4:AD:84:BB
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/oZSsZn8qSniPfJntBTfiV7SthLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.229.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9e:c1:a5:ab:86:be:e8:ba:53:a1:2e:21:ea:b4:fa:2b:79:
b7:7a:12:f8:1c:22:bb:cf:5a:c7:34:01:64:e4:d6:92:89:49:
76:38:44:a4:b1:32:d4:79:67:62:60:2f:3b:36:46:07:fd:04:
51:28:98:75:3a:65:a4:05:fe:d2:c3:f4:48:52:0c:8a:3f:da:
3f:d5:42:22:4b:7e:52:06:95:19:77:01:66:33:ac:c1:a7:15:
1e:77:1f:b9:56:52:fe:a5:ec:cb:7b:4e:e4:b6:15:52:2e:59:
90:dd:bc:a4:31:7d:e0:55:e1:e4:c9:bf:1b:86:47:80:41:c4:
29:27:c2:87:bb:8e:41:c3:2f:d6:4a:09:ce:ab:86:dd:36:e4:
ca:bb:dd:22:ca:89:74:68:3f:a2:62:68:80:7d:47:3b:1e:ce:
fb:13:9d:3c:23:1f:9d:c7:ec:a2:03:1b:fd:7b:1d:fa:3d:6e:
7b:7d:b8:c7:21:25:ae:da:ae:05:63:8b:cb:ac:ff:31:cb:71:
f5:aa:d8:5d:bd:56:6e:c8:fc:7e:6d:d1:73:15:9e:c0:8d:dc:
85:f8:7c:82:28:cb:1c:ef:52:eb:6d:0a:2f:1a:3a:0d:8f:7d:
88:56:e3:65:02:1a:7a:e9:fd:33:b3:3d:9a:15:86:ee:c2:6a:
91:5f:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:07 2024 by rpki-client on console-ams.rpki-client.org