Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/oLJoVe_pUI0WLzKWVm1tiSsZuy4.roa
File: oLJoVe_pUI0WLzKWVm1tiSsZuy4.roa (raw, json)
Hash identifier: eetfxqavLmqRvXVL1NNihIxme7weLBhqWezxegjymMM=
Subject key identifier: A0:B2:68:55:EF:E9:50:8D:16:2F:32:96:56:6D:6D:89:2B:19:BB:2E
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01856EC2352907DC34175B71F6104ABD3B71
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/oLJoVe_pUI0WLzKWVm1tiSsZuy4.roa
Signing time: Sun 01 Jan 2023 19:14:59 +0000
ROA not before: Sun 01 Jan 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56647
IP address blocks: 193.37.232.0/24 maxlen: 24
193.37.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:35:29:07:dc:34:17:5b:71:f6:10:4a:bd:3b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Jan 1 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0b26855efe9508d162f3296566d6d892b19bb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:7d:dc:ff:c0:00:80:ed:a7:6a:d7:b8:5e:
f8:1f:fb:8d:40:67:ce:fe:93:03:9e:1f:03:51:a5:
41:de:14:10:6f:e1:eb:bb:c2:ff:61:2d:78:ab:6d:
f7:1e:a1:d2:66:4c:26:97:12:18:0c:0f:51:c2:f8:
5b:75:04:64:bd:55:3d:e3:de:78:57:a8:04:b1:1d:
b9:f3:75:86:9f:5c:f0:61:0c:4d:13:7b:77:30:2d:
1e:96:43:79:1f:8e:1a:55:96:b5:54:a7:04:d2:1d:
70:c1:83:b4:bb:bd:65:c4:7b:5c:ac:76:ea:73:af:
4d:4d:9a:a8:7b:3a:f1:bd:6a:4d:47:a2:3f:44:94:
6c:2e:20:18:d3:64:6d:8d:1b:36:88:38:07:07:18:
2d:6d:7d:2c:1f:74:a4:57:46:79:78:0f:fa:d0:6c:
48:88:13:df:29:2d:b0:77:cc:88:d3:61:8d:17:cb:
85:d4:24:7c:3c:6b:e5:aa:4e:e5:f1:a4:7c:91:ba:
3e:3d:e5:55:cf:c1:24:ca:6f:3f:5f:7b:cf:c4:85:
d6:9c:85:fa:ce:b4:c6:2c:66:2a:ac:03:26:bc:cf:
59:10:4a:f2:4d:f0:42:e3:1a:3d:6e:bf:d2:14:65:
04:ba:99:48:54:b2:ae:70:e1:17:fa:fb:c4:6f:cf:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:68:55:EF:E9:50:8D:16:2F:32:96:56:6D:6D:89:2B:19:BB:2E
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/oLJoVe_pUI0WLzKWVm1tiSsZuy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.232.0/24
193.37.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ac:f5:59:0d:7b:6c:ec:8e:76:36:4b:1e:54:61:02:09:fa:
09:55:23:ea:c8:2f:ba:5a:24:3a:39:0a:31:1c:45:c9:5f:00:
49:3b:a7:5e:97:ed:7b:69:62:e2:f6:f3:71:50:ee:32:ef:46:
dd:33:75:93:c5:1b:7a:0c:34:e3:a1:b9:65:e4:9b:2d:39:e6:
8c:7a:ff:25:f3:08:d7:bb:0c:24:72:c0:ca:c6:02:e4:86:0f:
af:e4:94:ac:c5:69:5c:c1:7c:04:ec:1e:73:f3:ff:8d:8c:de:
9d:a4:1b:b1:6c:b6:bd:c4:46:89:e9:d1:bd:59:e1:4c:2b:eb:
99:96:aa:9e:da:66:9e:c9:a0:65:4a:26:98:30:29:be:f2:42:
44:87:cd:05:c2:05:8c:1e:be:76:25:db:6d:c1:a6:2e:d9:c9:
aa:e1:6c:c7:9a:db:80:5f:c2:e0:e9:b7:78:29:a3:27:dc:60:
ba:ec:ed:33:e0:97:f7:da:53:1d:6f:c0:1c:57:73:ad:1f:84:
9a:8b:93:38:65:10:1f:3f:dd:56:45:ec:2e:c5:b4:76:d6:c1:
b3:15:b6:5e:53:ac:0d:21:4a:98:24:97:b6:7c:dc:a4:12:4a:
cd:36:f4:7d:14:68:f4:c7:30:6a:d5:47:04:c8:7d:92:b2:64:
83:3a:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:44 2024 by rpki-client on console-ams.rpki-client.org