Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/Oc2gyj9_o5G4md_h6YEJPq7Yp0E.roa
File: Oc2gyj9_o5G4md_h6YEJPq7Yp0E.roa (raw, json)
Hash identifier: Mq9CUlSVf4/Y0bHha75iSxPmkV242f19tNTesobzIFg=
Subject key identifier: 39:CD:A0:CA:3F:7F:A3:91:B8:99:DF:E1:E9:81:09:3E:AE:D8:A7:41
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 019331DBD2159E25D05E32F0227F6E75CDE6
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/Oc2gyj9_o5G4md_h6YEJPq7Yp0E.roa
Signing time: Fri 15 Nov 2024 22:05:09 +0000
ROA not before: Fri 15 Nov 2024 22:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 194.246.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:31:db:d2:15:9e:25:d0:5e:32:f0:22:7f:6e:75:cd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Nov 15 22:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39cda0ca3f7fa391b899dfe1e981093eaed8a741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:be:31:f6:63:f8:4c:83:c3:bd:be:fd:d7:
7e:df:14:f0:ad:d4:5f:c1:03:df:65:a9:46:75:d1:
b7:70:6a:1b:7c:86:dc:19:84:4a:a1:b2:2b:9a:5b:
ab:f5:03:87:d8:9b:3c:6d:5f:c5:7b:c1:0c:ab:4c:
4a:f4:3c:3a:8f:da:32:26:9a:93:d9:3a:81:f3:3e:
8c:87:b0:a9:48:86:6d:00:fb:ea:1c:3c:04:5f:ce:
74:50:2d:b1:63:c0:42:44:9d:b6:3f:68:26:51:bc:
41:43:8d:8a:f8:72:fb:80:ed:84:40:8d:02:c6:ae:
f1:af:e7:9c:8b:30:aa:d6:dc:18:3b:fd:f6:b0:cd:
f6:eb:d4:24:4e:5a:25:c5:62:e7:5f:8c:df:19:e8:
70:04:a7:f5:d3:ca:9c:b2:10:6b:ea:3d:fa:cf:2b:
3e:7c:32:a7:a8:97:d8:7f:1d:f7:d1:5e:65:06:db:
8e:65:bc:67:f2:a0:c7:74:3f:48:a8:cc:ac:f6:a8:
95:55:ba:9b:cb:7a:d9:41:63:9d:57:77:2d:e1:4e:
e9:22:a5:17:b9:61:dd:dc:b4:fc:2b:84:30:48:cd:
9d:1e:b3:91:0b:65:aa:e2:29:8c:ad:4f:d9:00:b0:
47:04:4a:93:5c:48:2c:61:80:6b:68:73:c0:82:0f:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:A0:CA:3F:7F:A3:91:B8:99:DF:E1:E9:81:09:3E:AE:D8:A7:41
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/Oc2gyj9_o5G4md_h6YEJPq7Yp0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3c:b7:54:bd:24:80:93:ef:98:d0:ec:28:5c:65:39:63:6c:
ba:ae:84:57:69:72:aa:67:3d:5e:5d:8b:27:b8:ea:c0:4a:ec:
e9:89:9b:56:68:89:9f:9a:4f:75:68:b5:42:0b:3c:aa:ba:77:
01:ad:d5:8a:c0:e0:1c:d8:f8:b1:29:c5:9d:9a:dc:7d:d7:2c:
b5:55:be:50:cd:c6:e6:82:b8:e4:45:08:22:ce:10:de:73:a9:
d1:87:7d:5a:ac:a5:f4:61:03:5b:e2:20:9b:d1:29:5a:23:13:
ad:e7:9f:42:cb:46:69:b3:3e:18:e1:02:37:a2:8c:42:c3:97:
fa:17:8b:ff:05:c8:77:25:bf:35:33:21:b9:27:30:84:df:16:
bc:c8:73:3b:82:c2:77:fa:73:12:ff:32:07:11:0b:ef:89:f4:
47:4e:51:b7:7e:2f:6d:c8:5b:08:87:4c:64:1b:c5:41:67:89:
86:69:db:92:10:03:6e:c1:f5:55:d7:09:1a:fb:ee:e6:2c:94:
db:d9:00:69:9f:52:a1:32:80:0a:77:72:50:4e:89:05:f3:0a:
2a:79:1d:80:26:6b:5b:fa:fe:53:f6:68:c2:37:0c:8e:07:9f:
9d:ed:b7:a3:28:05:62:bd:2e:37:be:2c:6a:9e:58:57:33:8e:
9d:15:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:10 2025 by rpki-client