Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/OmhIx07d1tV8Zhcpx_qFZumMJvI.roa
File: OmhIx07d1tV8Zhcpx_qFZumMJvI.roa (raw, json)
Hash identifier: mqIKFNoFa7X9+Tlm3WE8315jEi61H0TSlEZGeYDgdQE=
Subject key identifier: 3A:68:48:C7:4E:DD:D6:D5:7C:66:17:29:C7:FA:85:66:E9:8C:26:F2
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018B8A73A418343979C6668EE246D1049709
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/OmhIx07d1tV8Zhcpx_qFZumMJvI.roa
Signing time: Wed 01 Nov 2023 10:35:16 +0000
ROA not before: Wed 01 Nov 2023 10:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216169
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:73:a4:18:34:39:79:c6:66:8e:e2:46:d1:04:97:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Nov 1 10:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a6848c74eddd6d57c661729c7fa8566e98c26f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:69:3b:65:3b:a4:ff:61:ba:7f:bb:ef:d0:5e:
47:e2:66:9a:94:9b:c3:b5:71:64:d0:bb:0e:e0:c8:
c1:95:db:05:2e:f4:02:69:81:ac:e7:d1:42:b3:40:
e6:44:f8:23:c4:b2:aa:28:d2:aa:62:8a:d9:b9:fe:
ef:92:1b:cf:75:e5:64:71:08:25:f2:f7:36:45:e3:
0e:23:e6:67:7e:79:3a:b7:aa:47:e0:0a:5c:cf:5f:
d7:13:7d:2b:c4:ad:80:49:69:13:1b:b1:1e:d2:a5:
76:10:25:39:30:d1:bb:5b:fc:c5:2e:67:f2:1c:1d:
33:d9:ba:9b:b3:92:98:90:5b:52:52:54:12:3a:43:
c7:bf:ba:40:96:35:d4:de:22:1e:3b:77:68:24:21:
23:4e:0f:57:b6:3e:99:f5:e4:39:cb:14:98:14:d9:
7d:68:7d:70:a9:76:52:e6:ca:f8:21:69:d9:f3:81:
f6:33:0b:88:25:c8:2b:5b:f6:13:b8:5a:9b:3f:7e:
67:f0:36:9e:80:46:77:73:a2:db:34:9e:dc:d4:4f:
1c:2d:be:c1:37:25:10:17:84:10:98:26:05:90:bf:
76:c9:14:56:9b:c0:f7:d5:27:a9:72:35:01:5a:85:
a9:ec:cc:78:2d:3c:7d:94:88:73:1a:29:c6:c5:ce:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:48:C7:4E:DD:D6:D5:7C:66:17:29:C7:FA:85:66:E9:8C:26:F2
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/OmhIx07d1tV8Zhcpx_qFZumMJvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
18:63:78:d6:e5:e4:8b:f9:bc:cf:f2:7c:64:83:af:08:e5:c8:
f7:d3:76:9c:6e:12:e5:91:05:9b:63:bf:e5:0d:fa:27:3b:82:
63:ed:2c:42:27:65:53:e4:f2:6b:59:39:5e:e4:b1:3b:9e:de:
c5:43:c3:38:90:4f:94:0f:bb:e5:e7:ba:64:2f:37:02:7c:d3:
87:cb:10:92:2d:79:81:9d:53:c4:f4:15:a7:db:19:75:7a:ab:
64:ab:48:34:d1:61:51:94:81:13:61:e1:15:0c:a8:ee:c8:a2:
15:3e:00:55:cf:9c:70:92:53:18:c2:36:e6:be:84:4e:4f:28:
7b:71:f9:e5:09:82:b5:09:30:db:3d:a1:3f:f9:c2:62:bc:4a:
fd:c1:2c:b6:cd:09:1f:9f:b6:02:e8:e4:bd:17:88:1d:2c:94:
93:6f:94:d8:0f:e1:2a:86:09:d4:66:51:e9:df:9f:1d:47:66:
67:03:ca:09:72:55:e7:fe:45:35:18:71:eb:a4:1b:6c:3e:a8:
95:78:c6:be:e9:ed:c8:3e:a2:3a:18:d5:10:d3:a2:e8:5a:bc:
8e:ea:30:10:a4:10:03:f6:29:10:51:3c:42:d5:fc:02:20:dc:
04:f5:85:6d:25:ba:f8:74:bd:91:fe:7a:07:6d:06:da:fb:67:
ba:be:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 07:08:35 2023 by rpki-client on console-ams.rpki-client.org