Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/okxT9UaxZpUsyZSHtSlV8Z-cYN0.roa
File: okxT9UaxZpUsyZSHtSlV8Z-cYN0.roa (raw, json)
Hash identifier: 1Wr3eYjihg0WvANIn6fVhD2iex1oYqXZdXEIKdImbwo=
Subject key identifier: A2:4C:53:F5:46:B1:66:95:2C:C9:94:87:B5:29:55:F1:9F:9C:60:DD
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 01856BB7D20FA7B9A0D18E43ECE54E4F08E8
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/okxT9UaxZpUsyZSHtSlV8Z-cYN0.roa
Signing time: Sun 01 Jan 2023 05:04:47 +0000
ROA not before: Sun 01 Jan 2023 05:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.28.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:d2:0f:a7:b9:a0:d1:8e:43:ec:e5:4e:4f:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 05:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a24c53f546b166952cc99487b52955f19f9c60dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:91:50:ef:8c:33:8c:30:72:87:2c:e5:6b:
42:e5:5b:f5:eb:ce:a3:3b:1e:d3:b1:2d:cd:71:7b:
55:4a:61:7e:61:d6:4a:b5:0e:48:03:da:ff:0f:40:
22:37:5c:37:b5:91:d9:11:97:03:af:af:58:e5:4f:
ee:69:09:03:95:52:5c:5d:11:19:d7:f3:57:47:e7:
92:f5:96:14:52:a8:f6:f6:1d:89:18:4a:c8:4b:9a:
81:8a:30:5a:a8:bb:83:54:ac:71:68:c4:65:26:92:
ca:16:73:b4:6c:c1:49:26:cd:74:95:20:e8:66:42:
99:fb:e3:91:b6:65:1e:2c:d1:36:15:69:86:1d:50:
e3:aa:06:50:32:8c:ab:95:40:91:63:cf:f4:ae:54:
fa:cd:20:c2:8f:1b:72:93:91:7e:b8:a3:2f:52:ac:
46:ec:7a:be:a3:07:1a:f4:cf:17:e6:63:e6:c5:b3:
53:5d:aa:a4:b8:96:11:ac:bc:89:3b:ae:85:d7:fa:
8f:58:ab:c7:9a:e6:4a:73:73:28:01:08:a8:5d:6e:
fe:a3:fa:f3:fc:75:2d:db:b0:42:87:db:fc:44:65:
76:77:8d:f4:52:ba:a5:6c:63:4f:22:c5:89:8a:f7:
c3:99:c1:57:e4:53:28:55:c3:94:66:29:f8:b9:67:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:53:F5:46:B1:66:95:2C:C9:94:87:B5:29:55:F1:9F:9C:60:DD
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/okxT9UaxZpUsyZSHtSlV8Z-cYN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:dd:c7:5f:35:ff:c9:22:86:38:83:ae:de:84:cf:a0:15:e8:
bd:a7:7c:d3:22:3a:7a:ee:a5:09:3e:56:33:3d:fa:3c:da:de:
6e:d6:67:2a:77:58:1f:6d:ff:4b:7d:df:19:08:9c:31:c6:0e:
73:93:ad:51:e6:cf:a5:fe:50:b1:8c:25:2a:6f:bb:98:11:dd:
00:15:c4:08:8e:68:84:1f:75:c8:34:13:7b:32:ac:e8:9f:79:
78:5f:a7:53:0f:92:32:ff:10:1a:ff:ad:58:ee:eb:db:d6:d7:
5d:9a:d8:b6:44:98:83:06:04:ed:ec:3b:8c:83:56:cd:69:71:
29:d0:15:95:cc:f5:b2:1e:b0:d7:44:78:51:ec:65:75:c5:fa:
fa:22:2f:12:f8:d5:e8:5f:a1:1b:08:9f:7a:af:11:22:6c:e9:
bb:fc:92:23:3a:c3:a9:76:be:4b:78:31:38:d4:98:cc:c1:f0:
7c:a5:51:1e:5a:07:f5:d6:2e:7b:fa:06:fa:07:6f:d7:9b:a4:
9a:c5:8f:8b:38:88:78:3d:82:4e:2e:ef:47:f2:fc:06:03:3f:
22:f0:e3:de:1c:f0:3a:4c:bc:b2:dc:3e:a3:82:a3:c4:f4:9d:
9d:4a:26:6e:38:b5:bb:41:01:52:51:91:70:80:1d:3a:af:2f:
74:92:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:13 2024 by rpki-client on console-ams.rpki-client.org