Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oUXZGQ5rGr5TpXCj7d4OzgqR8rU.roa
File: oUXZGQ5rGr5TpXCj7d4OzgqR8rU.roa (raw, json)
Hash identifier: h2OP7ooMB547blqfCdinm4/EytJk4djG8DoIoAcCQhU=
Subject key identifier: A1:45:D9:19:0E:6B:1A:BE:53:A5:70:A3:ED:DE:0E:CE:0A:91:F2:B5
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE73D8B5AFBF191F1C23744E9837E0
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oUXZGQ5rGr5TpXCj7d4OzgqR8rU.roa
Signing time: Mon 02 Jan 2023 09:44:42 +0000
ROA not before: Mon 02 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14315
IP address blocks: 85.92.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 10:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:73:d8:b5:af:bf:19:1f:1c:23:74:4e:98:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a145d9190e6b1abe53a570a3edde0ece0a91f2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:37:b7:e0:27:7c:70:6c:b2:73:b6:41:d4:
34:59:67:21:3a:d9:e9:66:76:aa:48:bb:c4:0b:c2:
1a:41:e2:aa:be:db:fa:0b:01:72:85:60:f9:2a:f9:
92:3b:6b:a5:0a:b0:98:28:ed:8f:c6:2f:fc:8d:f0:
b3:65:1c:54:11:f0:7a:31:fa:80:19:73:c5:07:33:
27:9e:89:5c:57:41:3e:2b:5c:f8:65:64:ee:93:c4:
da:0f:6c:0c:27:e1:95:8c:28:85:c5:64:01:1e:79:
cc:34:e6:1b:e1:c8:4a:6b:cc:3f:70:17:6a:a2:27:
8b:56:74:38:8e:82:f0:d5:b3:b8:5d:bf:db:47:6e:
9e:32:ab:0a:e4:bb:a6:55:2f:ad:03:65:38:5e:c1:
5e:59:23:1a:e1:54:dc:59:1d:0a:9c:29:7f:17:ab:
bc:f4:b5:b0:92:ad:d8:25:58:aa:70:1f:1f:dc:d1:
00:64:b1:44:ee:e5:5b:70:a6:10:64:86:fb:e9:46:
46:bd:5d:3a:c9:77:e7:6c:58:94:e9:7f:28:86:6f:
ba:ce:e7:17:df:05:73:12:c6:37:78:e7:68:0e:ca:
80:ff:11:c2:d1:52:f9:7f:98:5d:3d:66:a4:e8:1e:
28:87:58:91:fa:af:7f:ce:6b:85:60:3e:fe:d3:21:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:D9:19:0E:6B:1A:BE:53:A5:70:A3:ED:DE:0E:CE:0A:91:F2:B5
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oUXZGQ5rGr5TpXCj7d4OzgqR8rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.112.0/24
Signature Algorithm: sha256WithRSAEncryption
84:38:d8:23:ef:14:81:9a:90:94:d3:ba:44:06:30:f3:37:4f:
13:50:7a:75:87:a1:08:f9:70:c6:2e:80:2b:1f:03:11:c3:05:
aa:b9:c3:f4:a9:52:9d:34:45:ce:58:6e:60:22:19:59:e2:80:
88:ab:70:41:e7:8e:64:b1:1e:26:88:96:c7:2c:87:9b:cb:27:
6d:18:f8:6f:8e:6a:f5:c4:8a:9f:8d:27:9c:10:86:72:97:c0:
b7:4c:dc:2b:a2:af:80:bc:1b:80:02:5d:3d:39:12:1a:1c:48:
fc:bb:e2:74:55:7d:ce:32:e2:03:ae:1f:68:4e:a4:e3:47:49:
2e:f1:18:1b:2d:88:52:bc:3f:28:11:47:ce:1f:1e:d9:fa:86:
9e:37:11:c6:01:6c:cb:4d:6b:09:bf:a7:e2:83:35:52:4a:e6:
10:59:cb:97:c3:f4:34:08:03:a4:ad:01:24:33:66:3b:37:d8:
64:32:ae:8f:99:f6:1a:57:ef:fc:9d:32:ef:d2:2e:ef:b2:42:
8c:b6:d6:6a:52:aa:f1:d7:2a:22:a6:8a:59:dc:13:be:c1:32:
bf:01:cf:0a:73:b1:31:d8:a1:c8:74:80:f3:06:d4:f5:47:9a:
90:1e:2e:b9:20:82:cf:fd:32:8f:05:2c:e0:9a:0a:6b:2d:46:
ad:a4:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org