Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/OskVVWkud1BGLIhxrZq6KPofIA8.roa
File: OskVVWkud1BGLIhxrZq6KPofIA8.roa (raw, json)
Hash identifier: S+lkVr1U82/AmMfumX9IVEi+g2esYYPpkYo/AU03ic4=
Subject key identifier: 3A:C9:15:55:69:2E:77:50:46:2C:88:71:AD:9A:BA:28:FA:1F:20:0F
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0187BEC398B787B6389D9B92880A8C7E02A9
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/OskVVWkud1BGLIhxrZq6KPofIA8.roa
Signing time: Wed 26 Apr 2023 18:11:42 +0000
ROA not before: Wed 26 Apr 2023 18:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199329
IP address blocks: 212.49.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:c3:98:b7:87:b6:38:9d:9b:92:88:0a:8c:7e:02:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Apr 26 18:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac91555692e7750462c8871ad9aba28fa1f200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:82:4d:8d:87:c2:7a:a1:a8:f7:96:cf:47:
0e:66:19:1e:2a:1e:3e:15:60:bb:c7:84:9b:2a:79:
b5:71:9d:70:26:04:a9:d9:de:e4:e9:c5:8d:19:b8:
33:a0:07:68:69:5f:85:37:f4:86:f2:9a:ec:94:29:
ef:63:84:57:90:a9:85:4d:8f:9f:c0:44:2b:e4:8d:
88:cb:30:ba:1a:a6:4d:de:34:27:79:94:fd:6d:22:
8a:22:e0:07:25:6d:ae:c7:70:5e:e1:58:a4:e6:bb:
cc:f5:d6:64:d9:2b:8d:0d:cc:7c:d3:99:0c:28:20:
cf:ce:78:d6:f8:cc:72:ae:7a:c9:38:f2:30:c4:07:
2c:51:b9:a7:9d:37:a1:14:b5:b2:1c:9c:d3:13:11:
9f:d2:a1:f7:7e:c0:29:ea:b6:be:5d:9b:68:a1:f4:
d3:07:bb:20:8d:bb:79:9e:a4:ba:92:b2:e2:59:27:
b7:bd:87:5f:f8:02:00:91:54:98:35:e0:1f:91:35:
d9:67:3c:2b:d7:0c:f2:12:18:45:4b:cc:87:a4:b0:
92:22:00:ea:d2:75:92:84:3c:f0:a1:db:88:c0:db:
19:f4:15:43:b2:23:f0:de:b1:44:6b:cc:7a:33:c4:
c6:ee:f1:08:b6:54:5b:4a:02:a6:9b:eb:4c:5a:78:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:15:55:69:2E:77:50:46:2C:88:71:AD:9A:BA:28:FA:1F:20:0F
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/OskVVWkud1BGLIhxrZq6KPofIA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.180.0/24
Signature Algorithm: sha256WithRSAEncryption
09:39:16:dd:e6:42:1d:7b:c8:45:03:c9:aa:2b:f5:cd:c9:2c:
c4:de:aa:05:56:82:93:80:e8:bc:d8:06:2d:6d:5a:74:b4:1b:
56:f4:8f:c0:ba:f8:a4:20:53:24:f7:d1:71:dd:bb:5f:85:79:
22:0d:b6:17:66:28:46:4d:4f:32:37:10:43:0c:67:bf:02:52:
a8:5b:a6:72:3f:0a:42:ec:32:da:85:15:b4:e5:5b:5a:d0:f4:
30:c4:dd:89:10:7a:54:d2:e2:e2:ce:37:cd:56:d8:d8:06:be:
93:bd:c4:ad:61:b8:88:d3:cf:8f:ab:0e:84:2e:66:fa:64:c7:
1c:83:4f:8a:4f:4f:5b:e8:7b:ed:32:3e:19:04:bb:e1:6b:46:
d9:57:6a:a1:b9:01:10:51:ae:c3:99:26:a4:4b:35:bf:df:02:
76:63:9f:2e:11:85:4f:2d:a2:7c:13:89:28:f6:76:54:70:50:
a8:f8:76:1d:fd:11:2e:31:ea:46:4c:63:80:94:a5:a3:ad:e8:
d1:04:52:a7:dc:f4:e6:0b:f4:dc:78:f5:03:4d:a8:45:f2:c5:
e9:09:dd:8b:69:82:bf:aa:9f:09:d7:28:fc:3f:52:d4:e2:2a:
f7:e0:1d:c5:fb:ff:2a:5d:fb:38:44:90:48:ce:82:ed:91:b5:
9c:97:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:08 2024 by rpki-client on console-ams.rpki-client.org