Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/OYUwBpIHsTO4Yt4ByxvRfGsCt2I.roa
File: OYUwBpIHsTO4Yt4ByxvRfGsCt2I.roa (raw, json)
Hash identifier: ZT47tK7eowTaN/5nfGnPy8ha9TU/LMeSJfu4YrcP73k=
Subject key identifier: 39:85:30:06:92:07:B1:33:B8:62:DE:01:CB:1B:D1:7C:6B:02:B7:62
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 018A079A65F0DB5EEA5DEBD4CBFBBDC91389
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/OYUwBpIHsTO4Yt4ByxvRfGsCt2I.roa
Signing time: Fri 18 Aug 2023 07:44:33 +0000
ROA not before: Fri 18 Aug 2023 07:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42474
IP address blocks: 193.169.228.0/23 maxlen: 24
185.239.48.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:9a:65:f0:db:5e:ea:5d:eb:d4:cb:fb:bd:c9:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Aug 18 07:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=398530069207b133b862de01cb1bd17c6b02b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:1d:4b:06:41:5c:e6:93:62:03:e2:b8:b4:
b1:49:85:1f:59:22:a3:84:a2:2c:ca:bd:62:20:e8:
4d:93:94:3e:86:de:01:56:9c:f8:c7:74:09:d8:8f:
15:a0:74:dc:44:b2:f0:f4:1f:73:83:ad:dd:93:1a:
14:d1:a4:46:8a:34:bc:cc:e2:44:42:e5:f7:c8:33:
d9:69:f9:d9:1d:28:9e:16:f9:b6:7b:f5:f2:38:ef:
84:5a:d2:48:dd:1e:d6:f7:c0:97:0d:15:14:fc:47:
cf:33:b9:88:37:22:0c:0e:b0:8b:1a:71:d6:30:42:
3a:f1:4f:95:16:5a:e8:83:a9:71:49:ab:db:b8:33:
c8:d0:5f:f6:71:e8:ce:4d:d7:c7:40:88:85:a0:13:
f7:0c:6e:c1:41:19:4b:53:11:9c:50:a0:79:b1:10:
ca:af:ef:ee:b4:34:8c:4f:c6:7f:f1:a8:d5:4c:ec:
27:54:1f:0b:5d:9c:05:19:09:1f:d9:98:08:82:33:
f4:69:8b:4d:76:ad:87:f4:b4:15:47:94:36:f2:c4:
06:9c:a7:46:42:be:ec:ef:00:cd:a2:5a:c7:83:ee:
99:ee:6c:8b:45:00:eb:aa:8d:e7:d6:a8:cf:95:57:
cd:8c:d4:6a:86:ef:cf:37:4f:d8:71:de:68:48:f3:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:85:30:06:92:07:B1:33:B8:62:DE:01:CB:1B:D1:7C:6B:02:B7:62
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/OYUwBpIHsTO4Yt4ByxvRfGsCt2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.48.0/23
193.169.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:e2:56:2d:99:51:48:0b:e5:fe:67:90:6d:b5:ad:60:c9:fd:
09:89:b1:0f:02:4e:4c:b1:ab:84:bc:f9:e9:c1:56:49:a9:26:
0f:8c:12:6e:d9:52:91:5c:de:69:41:50:16:e1:19:70:41:d8:
40:34:e7:c7:7f:59:af:dd:14:dd:26:6c:a9:dc:94:0c:2f:37:
cb:3c:04:d5:70:f0:24:d1:78:50:fe:b2:e5:90:77:8e:74:f9:
84:01:4d:bb:7b:e7:f7:f7:a2:a5:1f:61:f0:42:be:75:35:23:
7f:4b:90:e6:3e:3f:c0:8b:68:a3:4c:dc:e0:8a:79:7c:30:fb:
ba:cd:c3:31:8f:03:16:d8:ab:68:f8:9d:ae:6a:0b:b8:90:02:
f4:1a:2a:14:10:cc:2a:e2:0e:dc:4c:f3:3b:61:b2:34:ed:23:
f9:76:5f:fd:0a:46:e4:ba:ef:23:d0:18:59:a8:d0:0e:5f:7e:
9d:8c:eb:38:57:f6:d1:c7:b7:0f:ea:de:42:f3:f1:60:ad:cd:
4a:e0:8f:01:72:37:4f:28:a8:33:42:c5:d9:38:91:41:3c:06:
1b:71:4d:07:46:49:a7:7b:99:60:f3:d0:1a:40:98:93:68:01:
9c:0c:2b:15:db:59:f8:1f:7e:e5:73:89:c5:4e:43:6c:6b:c6:
02:30:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org