Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ocllzki_gbpEC9pjuhBDdVIp8fc.roa
File: Ocllzki_gbpEC9pjuhBDdVIp8fc.roa (raw, json)
Hash identifier: +73SM7j7z0Gl915qJ9Yb72lYw++xzsUbZ7lrjhc+NGQ=
Subject key identifier: 39:C9:65:CE:48:BF:81:BA:44:0B:DA:63:BA:10:43:75:52:29:F1:F7
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0186DFB7C1B4244494F12471C5EB5D65D3EC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ocllzki_gbpEC9pjuhBDdVIp8fc.roa
Signing time: Tue 14 Mar 2023 10:43:27 +0000
ROA not before: Tue 14 Mar 2023 10:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211500
IP address blocks: 193.46.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:b7:c1:b4:24:44:94:f1:24:71:c5:eb:5d:65:d3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 14 10:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39c965ce48bf81ba440bda63ba1043755229f1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:aa:1d:94:ae:31:bc:3b:6d:56:9d:25:6d:
3f:da:c6:1f:6c:00:12:55:f3:f4:ae:c2:9a:a1:eb:
83:91:77:92:04:ca:49:53:ae:50:c0:07:b2:d1:65:
64:2a:4c:30:ee:2f:23:94:5f:cd:85:48:2b:16:77:
14:1d:5b:86:4e:24:e7:3a:f9:15:45:07:e0:88:a5:
9b:eb:34:60:c5:f9:c8:f1:44:91:ac:08:88:46:87:
4e:a6:11:c2:43:c2:cd:35:51:ad:d9:df:ca:f6:1b:
82:c5:6d:8f:d5:08:aa:ce:c4:26:37:84:1d:ea:19:
31:63:3f:b3:5f:69:63:6a:7f:18:76:5f:4f:42:7f:
d5:db:b3:9f:a3:56:b5:15:b1:08:e0:cf:a4:ab:e4:
80:de:8e:26:eb:df:b6:3d:86:33:e3:64:6e:26:83:
6b:1b:20:18:42:22:3b:06:c0:31:51:c9:41:dd:8c:
22:c5:8e:91:27:13:0b:12:cd:96:d4:e5:47:75:00:
e4:42:cd:9d:9c:2a:4e:fc:ca:22:4d:e3:0a:69:09:
8c:db:97:be:13:06:53:6c:c8:1b:35:e3:d5:ce:69:
98:c3:77:7c:a3:92:b6:0b:52:79:e8:81:5b:15:8c:
38:03:69:8c:50:f3:78:ca:27:05:b8:46:00:90:20:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:65:CE:48:BF:81:BA:44:0B:DA:63:BA:10:43:75:52:29:F1:F7
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Ocllzki_gbpEC9pjuhBDdVIp8fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.81.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a0:dc:c4:05:95:6f:5a:2b:96:bd:ae:f7:af:c0:a2:93:82:
77:36:ce:bc:cd:04:30:c5:c1:44:69:16:b7:9e:d3:9d:7f:e4:
ed:10:f3:e5:84:ae:31:bf:8f:a0:97:21:9d:ac:14:8e:11:e4:
56:fc:9a:7f:02:32:3a:36:28:fd:96:65:85:00:69:b7:6d:ab:
1c:46:e5:b2:39:23:12:f7:ac:7c:7a:c3:8c:e8:1a:f2:58:06:
9b:9d:87:7d:82:60:0b:5d:b8:a9:92:fc:70:6e:a3:c8:56:e1:
c2:af:1a:83:d5:d8:94:9a:55:e0:f7:68:c2:16:68:43:f6:fa:
e7:15:83:ac:2e:e1:08:14:92:c0:9a:08:56:ab:c1:c5:d8:c3:
4b:fa:36:da:5e:04:ae:e3:29:fd:fd:2f:04:35:53:0a:2d:b2:
d2:74:86:c9:ec:8f:0e:10:4b:90:94:d8:1b:49:38:5c:3a:00:
61:87:4b:21:eb:94:2e:e9:d8:ac:42:e4:3a:bd:22:fd:54:75:
21:d8:96:85:7b:e2:bb:1e:3e:85:53:fc:7e:6f:a7:5d:ae:f7:
56:94:d2:ec:e2:21:a4:a5:be:7f:1e:b8:1f:12:c9:b7:bb:c1:
ff:42:30:28:12:bd:00:6f:ee:2e:5f:6b:74:71:a4:a6:62:5c:
7e:d1:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:55 2024 by rpki-client on console-ams.rpki-client.org