Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/oshOXYI-td5LgWbus3Ie1ES-sC4.roa
File: oshOXYI-td5LgWbus3Ie1ES-sC4.roa (raw, json)
Hash identifier: b8tA9vxRrw8h1QcJxRhx/a0Gar8FZCmCvrWAVHRS2EY=
Subject key identifier: A2:C8:4E:5D:82:3E:B5:DE:4B:81:66:EE:B3:72:1E:D4:44:BE:B0:2E
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 01856F0B5F38CF9061941D185E77F6BD42C5
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/oshOXYI-td5LgWbus3Ie1ES-sC4.roa
Signing time: Sun 01 Jan 2023 20:34:54 +0000
ROA not before: Sun 01 Jan 2023 20:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42293
IP address blocks: 185.253.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5f:38:cf:90:61:94:1d:18:5e:77:f6:bd:42:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 20:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c84e5d823eb5de4b8166eeb3721ed444beb02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:73:c8:11:a2:bb:03:0d:aa:25:6c:9b:3d:
96:93:0c:05:74:ce:fc:2c:c4:fc:36:c2:15:7f:a2:
ab:f4:42:0b:ec:31:f4:f9:b5:a8:22:e3:3d:13:34:
50:23:b6:e9:16:d1:02:bb:db:78:cc:07:37:01:8d:
6e:1a:cc:6b:1b:9f:b7:cd:30:82:74:a5:51:ee:f1:
77:c3:77:23:10:9a:ff:55:61:29:94:e9:be:81:41:
6f:25:3f:e3:52:8d:33:90:cb:05:d9:ee:5a:5a:b0:
51:00:bc:c2:af:d3:95:ac:95:44:35:f6:f1:cd:58:
da:b1:a2:eb:f1:aa:79:5c:49:e1:2e:f6:ba:39:c2:
77:c6:9d:34:f6:46:ad:6a:ba:b9:4b:34:79:ba:bb:
3c:50:26:ff:41:7f:1b:04:30:ed:9d:cf:2f:33:84:
60:d3:fe:da:89:d2:3c:43:a9:0c:52:19:01:cd:6e:
9a:db:22:e9:8d:be:2d:e4:1a:9c:10:0e:14:ab:0c:
e7:77:1b:c8:2e:ca:18:08:ae:e9:dd:35:76:d8:df:
6e:98:6f:9b:44:8a:0f:77:dd:50:bc:27:4a:ac:f4:
5a:c3:22:fb:8a:94:5f:b6:a1:d0:7b:de:42:d9:8f:
0f:56:53:ad:51:73:01:c2:a2:30:4c:01:08:4b:9c:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:4E:5D:82:3E:B5:DE:4B:81:66:EE:B3:72:1E:D4:44:BE:B0:2E
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/oshOXYI-td5LgWbus3Ie1ES-sC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:0a:05:fd:d0:98:24:08:7d:7b:95:4d:30:c4:9f:8e:38:cb:
ae:6c:ba:89:cc:17:98:6f:d5:44:da:0d:7b:e8:61:eb:7d:50:
1f:5d:6d:f6:ac:0e:3e:96:ad:ad:a9:25:fa:56:33:63:53:ad:
ab:d4:0c:d3:ab:84:1c:73:c3:6a:03:c7:24:22:b1:74:56:d5:
36:24:ab:8f:33:6c:25:16:0d:e2:87:c3:38:5a:07:4a:cd:1d:
38:f1:a1:4d:ad:e2:5f:9e:95:4c:03:96:b3:87:aa:e2:c3:50:
bf:92:11:0e:56:9b:e6:1c:44:a0:b1:eb:40:bc:0a:0e:e7:f4:
a1:e2:e7:30:41:59:10:a5:96:2b:ba:d8:c9:b6:0a:a9:bf:db:
0b:5d:06:7b:6f:71:b7:33:7a:f3:30:40:4c:72:30:32:b6:f9:
60:49:ec:ec:c0:25:db:43:e9:b5:83:f1:ce:75:82:c6:f9:53:
0a:1a:7c:22:b0:f6:63:ca:f7:8e:d3:00:2c:30:18:04:85:ff:
a3:67:e5:3e:d1:4e:92:35:92:fd:61:ad:d8:41:27:d1:5a:92:
2a:6d:d1:7b:46:29:26:d0:4b:a3:63:73:63:8b:82:22:7b:ed:
39:3f:b5:b7:b0:10:46:20:2f:d3:23:c6:8b:87:f5:3f:a7:1e:
e0:4b:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:14 2024 by rpki-client on console-fra.rpki-client.org