Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/oMZmOVLoP_7HyEM_DAED6meWXDI.roa
File: oMZmOVLoP_7HyEM_DAED6meWXDI.roa (raw, json)
Hash identifier: E0soLrtnoxezoFbxZN/+xUQAWD86jHrH3OIDKGZXBXg=
Subject key identifier: A0:C6:66:39:52:E8:3F:FE:C7:C8:43:3F:0C:01:03:EA:67:96:5C:32
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01856DB891D79D1509AEA5787AB31C7CD3AC
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/oMZmOVLoP_7HyEM_DAED6meWXDI.roa
Signing time: Sun 01 Jan 2023 14:24:50 +0000
ROA not before: Sun 01 Jan 2023 14:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42019
IP address blocks: 178.252.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:91:d7:9d:15:09:ae:a5:78:7a:b3:1c:7c:d3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 14:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0c6663952e83ffec7c8433f0c0103ea67965c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:33:ac:c8:97:69:a4:88:df:89:22:f9:c3:
f2:a6:c3:01:c5:7b:8c:b5:cf:92:ba:bf:aa:f6:36:
38:aa:e5:ad:c2:b9:ab:e5:75:90:84:75:5f:e3:ce:
67:4d:eb:5b:65:78:a8:74:a3:ed:df:db:0f:1d:12:
ec:5b:a3:81:d5:d8:62:10:40:64:25:2c:30:47:c6:
8d:06:9f:1e:b0:11:10:58:aa:1c:9a:63:f5:af:8b:
a7:2e:5b:a8:40:79:de:bb:df:a5:25:15:b0:87:c6:
65:cd:d3:06:f0:f1:77:44:16:cf:21:3d:97:68:54:
61:25:64:6a:d8:60:3c:b1:6f:7e:6d:36:32:59:84:
dd:95:7d:6b:ea:11:43:a0:7e:c5:8b:93:d1:80:81:
fe:52:0a:22:3f:14:bc:aa:9b:bb:c2:9e:fd:1f:71:
92:5e:38:a0:ab:0a:5f:0b:d8:54:e6:46:9f:75:ba:
32:a1:67:5a:2a:c3:59:71:ef:fd:80:34:fb:56:6b:
07:ba:5c:18:df:99:a6:4b:1e:58:fd:1f:55:47:dd:
84:68:19:dd:58:d0:79:fe:a8:1e:1c:32:62:49:52:
bc:e4:90:81:74:a9:85:54:4c:a5:70:45:24:5c:4a:
bf:20:f7:3c:38:2c:6f:44:cd:3e:1f:86:e8:45:1d:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:66:39:52:E8:3F:FE:C7:C8:43:3F:0C:01:03:EA:67:96:5C:32
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/oMZmOVLoP_7HyEM_DAED6meWXDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.252.150.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6d:95:57:c4:58:54:39:58:88:df:fa:c2:36:c7:7a:e4:cf:
59:6e:a5:94:8f:fc:45:72:2d:94:55:56:f9:1c:74:5e:4d:0f:
e5:6f:c4:99:94:3a:ad:a1:75:32:91:48:64:fb:be:04:35:b4:
2f:cb:fb:df:ef:0e:86:bd:b4:b9:9b:b4:94:16:37:83:f5:d0:
97:d2:14:94:6a:6f:6c:92:f1:68:56:7e:ff:38:9c:ca:a6:e5:
10:17:42:98:91:0e:9c:dd:12:2c:a1:a1:81:4a:0e:1f:f9:60:
58:51:ef:e4:d3:31:1d:bf:e5:42:8c:f2:ec:3d:8d:7a:3e:a0:
56:a6:55:7f:49:1c:8e:9c:9d:9f:20:0e:6a:9c:7d:0e:88:a8:
6b:63:e8:58:05:bc:a6:1b:90:7d:22:41:a9:09:7f:8b:77:20:
0e:a1:48:55:39:1f:48:fa:39:3d:f6:e7:24:a9:f1:ec:f5:ea:
74:28:df:5d:59:f8:18:80:95:0d:04:4a:0d:7e:af:9a:11:d9:
35:0d:4b:9a:ea:39:66:1c:57:b0:df:92:ca:4d:f2:99:ba:d9:
d5:47:32:d8:68:4c:e2:e9:11:4c:35:7e:74:34:66:87:c5:81:
a2:82:5e:a3:7e:f1:b3:ff:2b:08:3b:53:00:b0:84:4f:ba:53:
55:7a:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:47 2024 by rpki-client on console-ams.rpki-client.org