Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/Ol79h-aKnOsX51JbN81Qgd3aRAU.roa
File: Ol79h-aKnOsX51JbN81Qgd3aRAU.roa (raw, json)
Hash identifier: bVDEBKh5QiXClevjv57fvGaqW4GKedvaywl5OVW//rg=
Subject key identifier: 3A:5E:FD:87:E6:8A:9C:EB:17:E7:52:5B:37:CD:50:81:DD:DA:44:05
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 01856F0B4BA0641AEF4EF4E15E54819AE07C
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/Ol79h-aKnOsX51JbN81Qgd3aRAU.roa
Signing time: Sun 01 Jan 2023 20:34:49 +0000
ROA not before: Sun 01 Jan 2023 20:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39645
IP address blocks: 195.246.252.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:4b:a0:64:1a:ef:4e:f4:e1:5e:54:81:9a:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Jan 1 20:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a5efd87e68a9ceb17e7525b37cd5081ddda4405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:dd:e4:9d:6a:49:e7:ce:ce:53:34:9f:fe:
1e:c8:13:2c:39:64:c2:c7:77:72:19:18:db:68:64:
3d:f3:23:58:c9:90:1a:3d:89:ca:2f:10:b9:ac:a0:
94:83:61:d8:c2:e8:22:d5:12:6d:19:de:31:39:a4:
fb:47:5e:65:e2:ec:13:d1:5b:ba:53:0d:5b:6e:f8:
84:9e:ae:e3:a1:d9:4f:56:52:da:94:56:73:2e:b9:
e1:98:43:0b:b7:4b:90:81:4e:01:7d:a3:1a:b1:3e:
b7:52:ca:f4:00:a7:d0:d0:e9:81:df:1f:08:f8:5d:
57:56:6b:ac:f7:2c:19:0b:4a:37:2e:3b:42:d3:41:
cf:79:45:e0:ae:0e:80:74:f4:a3:67:a3:c1:fb:b3:
a7:f8:78:b2:d3:2b:f6:18:29:f9:38:27:2f:ea:0b:
20:3d:e0:36:f5:26:aa:e1:88:9d:ac:ed:8a:70:71:
47:10:be:80:6b:40:4f:4a:52:33:34:6a:a7:f4:d9:
bf:b9:94:b5:79:25:56:9a:cb:3f:38:3b:c2:a9:0a:
21:f7:7b:ff:b6:dc:33:0b:cd:fb:fe:34:a5:f2:a6:
d3:10:8e:5f:64:42:2c:dd:00:ae:d5:ab:06:06:14:
1d:71:5a:f0:f1:a2:d8:1a:ff:c4:fc:fc:2e:9b:d8:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:FD:87:E6:8A:9C:EB:17:E7:52:5B:37:CD:50:81:DD:DA:44:05
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/Ol79h-aKnOsX51JbN81Qgd3aRAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.252.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:5d:12:e7:9b:e7:24:23:bb:d4:66:af:a3:9f:68:61:c0:f1:
bb:e7:a9:3d:92:35:27:fd:e6:ce:09:5b:6f:a8:6a:ee:9a:cf:
e7:ca:f0:3b:0b:cc:3d:4b:68:b3:ef:d0:7f:2c:28:f8:60:f2:
26:5e:50:59:e8:34:3a:37:1e:eb:a6:c9:fb:28:2b:40:b3:16:
ff:0c:b1:d4:45:07:98:1a:f4:bb:b8:4a:23:a4:43:fc:54:d1:
46:ab:1b:26:9e:85:15:f2:8f:d7:bb:0d:d6:7f:bf:54:24:e5:
71:e9:9c:e3:b7:c5:9a:b1:8a:8f:6c:e9:a0:7f:2a:6a:14:ef:
7a:60:e1:bd:a9:47:d5:29:07:95:8e:1b:ca:38:7d:8d:fe:ff:
61:5e:e5:3b:1d:a1:b3:59:f6:09:a6:e6:ce:dc:26:8b:9a:08:
6a:71:01:6d:75:d4:50:1f:4f:bf:02:f8:8e:57:2a:27:81:dd:
48:33:b3:54:7d:23:e4:09:17:43:47:8e:e9:06:04:1f:ca:57:
78:0c:40:e5:7c:0f:74:d7:1d:5b:2d:00:f0:9c:ae:57:83:27:
4e:68:18:3a:97:a6:80:fe:81:cf:33:e2:8e:1a:9f:da:55:f5:
57:8b:8c:8f:d6:c4:a6:3e:e2:81:1c:d3:4d:98:e6:72:8d:9a:
64:94:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:16 2024 by rpki-client on console-fra.rpki-client.org