Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/OISpnecjcqqqEzALEUNd018bSnU.roa
File: OISpnecjcqqqEzALEUNd018bSnU.roa (raw, json)
Hash identifier: hFZPFv0o9OQwEV+jj6Xt0BEoxfFpYy5vRyRcxy0PmwU=
Subject key identifier: 38:84:A9:9D:E7:23:72:AA:AA:13:30:0B:11:43:5D:D3:5F:1B:4A:75
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 018C1E6716BEABAF3B6BD7B7AB5124C6F879
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/OISpnecjcqqqEzALEUNd018bSnU.roa
Signing time: Thu 30 Nov 2023 04:05:21 +0000
ROA not before: Thu 30 Nov 2023 04:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 104.129.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:67:16:be:ab:af:3b:6b:d7:b7:ab:51:24:c6:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Nov 30 04:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3884a99de72372aaaa13300b11435dd35f1b4a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:44:da:b7:ad:97:8f:cc:44:b8:38:4d:a5:
76:16:63:f2:12:73:a2:d0:dc:5d:5b:d5:de:be:42:
ae:45:1b:73:22:64:39:62:c3:1e:6b:f3:25:62:a4:
f1:60:6f:92:60:59:7a:47:b4:c4:c0:b1:34:0e:89:
a0:86:39:4c:50:b4:ab:63:21:d5:9a:c7:ac:4c:f2:
8e:f8:3c:44:9a:3c:c3:cb:78:33:87:c1:33:79:e0:
6b:2f:7b:68:99:92:b2:a6:34:b5:8f:be:e7:c7:9b:
c2:bf:dd:8e:ae:91:cf:07:12:57:16:6b:7e:80:73:
a9:cf:1f:ac:99:f3:04:33:68:fd:3b:89:78:a4:2a:
57:c5:38:ec:c7:72:d4:5a:47:b4:2d:43:07:b4:2f:
29:81:72:af:fd:77:80:02:19:37:a5:b9:c7:0f:92:
69:03:96:bd:03:72:f7:c3:4a:dc:55:2e:2e:05:8a:
db:ef:f5:1c:15:22:ba:00:2c:52:c1:14:32:3a:83:
0a:7b:4d:67:1e:e4:ea:9d:e5:9a:e7:16:1f:78:09:
8c:d1:89:03:1f:8b:df:82:5e:b5:ee:ea:69:f9:ac:
06:4f:4e:4c:09:8a:9e:25:5f:5a:b2:db:3b:57:c2:
ee:d1:00:f6:a6:14:f4:3b:d2:d5:dc:3e:3d:c0:45:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:A9:9D:E7:23:72:AA:AA:13:30:0B:11:43:5D:D3:5F:1B:4A:75
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/OISpnecjcqqqEzALEUNd018bSnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.129.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f1:c3:f4:e2:4f:6d:c7:c3:53:a7:d0:56:68:46:ff:15:f7:
c9:81:f8:6c:65:73:6e:80:72:ec:5a:d2:9e:10:ec:b3:df:40:
09:29:ea:8c:b1:32:3b:98:51:37:9a:72:7d:cf:6b:ad:0d:79:
db:2f:5f:35:c3:d2:c2:bb:5e:3b:5f:0f:3d:c1:d2:a7:f1:9d:
ac:98:6c:9f:ca:16:12:92:72:4d:93:a8:ac:1b:f6:67:62:13:
7e:51:03:91:86:74:22:57:36:27:d7:16:ec:63:f4:37:ba:a9:
9f:fc:12:3d:fb:6b:12:2f:a4:de:42:34:6c:f1:9b:fe:1c:5c:
80:8f:82:30:60:02:79:56:dd:2f:04:70:6c:59:4f:84:29:51:
2f:7c:c3:b9:e4:1b:71:96:53:e7:bc:b8:42:4f:5a:79:09:bf:
00:5d:69:c3:da:17:f7:06:26:e9:8e:7e:50:77:94:c7:76:c0:
0b:ec:1a:e6:58:3c:94:2c:96:99:21:be:98:87:ce:98:88:87:
3d:e3:20:c6:2e:0d:a4:69:1f:9a:50:32:74:79:87:3b:9d:fc:
c7:64:5f:67:91:5f:ef:00:77:05:a4:00:75:7a:87:01:c2:76:
a3:32:11:08:a9:6f:8e:8a:88:a2:28:f6:72:d4:16:8c:a3:4e:
69:1c:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:22 2024 by rpki-client on console-ams.rpki-client.org