Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/oUGVdwx1mRD80Q095bWyuFPhWTo.roa
File: oUGVdwx1mRD80Q095bWyuFPhWTo.roa (raw, json)
Hash identifier: HnD/t5tdozMgQr2qikDWnEJCIvm4+08Kx3K9WIJG8J0=
Subject key identifier: A1:41:95:77:0C:75:99:10:FC:D1:0D:3D:E5:B5:B2:B8:53:E1:59:3A
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 018CC649FB3B9BA36240E727FD3A1B15C7C7
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/oUGVdwx1mRD80Q095bWyuFPhWTo.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3304
IP address blocks: 195.22.138.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fb:3b:9b:a3:62:40:e7:27:fd:3a:1b:15:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14195770c759910fcd10d3de5b5b2b853e1593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:2f:b1:3c:0b:ab:8c:ba:18:2e:7d:f9:b1:
35:9d:2a:e6:06:a5:da:ad:8c:2d:7a:1a:a9:07:c2:
d6:bf:ce:04:06:b6:26:23:3c:54:0a:f4:04:90:a7:
8d:ed:d4:2f:a3:e0:93:8e:7c:c7:44:86:b8:cb:3c:
cc:38:80:83:4d:11:fc:fe:02:88:00:2a:9a:ef:e0:
f0:bb:cf:39:42:34:86:6b:ad:92:31:b0:8b:e7:82:
af:3f:5a:15:36:0c:ba:fc:ec:bf:12:9c:b7:03:40:
7a:7f:5d:a6:4b:a0:10:b7:91:b3:59:2d:d8:0b:31:
36:0e:90:b8:05:7e:f5:a2:32:e2:95:e8:6e:78:2d:
5b:22:02:59:44:e9:22:5d:1f:12:2d:a2:44:1e:ac:
37:c8:e3:b3:11:41:87:f9:bb:97:4a:dd:33:ee:bd:
06:f4:10:2c:e8:b1:db:ba:2b:d1:48:65:5d:5a:87:
9c:4a:c6:5c:b5:6c:34:3d:94:6b:3d:5a:36:0c:57:
94:24:8f:64:7a:87:47:33:71:c2:14:ac:d0:1e:0f:
7f:12:36:91:e9:d7:95:d3:48:ea:a7:27:c9:0a:a4:
18:d2:0f:2a:99:1f:f5:a5:11:79:cb:db:54:82:ba:
76:2a:50:09:24:d0:17:03:c4:1f:aa:a9:8d:93:ff:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:41:95:77:0C:75:99:10:FC:D1:0D:3D:E5:B5:B2:B8:53:E1:59:3A
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/oUGVdwx1mRD80Q095bWyuFPhWTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.138.0/23
Signature Algorithm: sha256WithRSAEncryption
34:79:28:32:c8:a7:76:c2:0f:82:3d:35:77:5a:e6:73:d9:b9:
f8:6f:fc:24:96:4d:ce:46:9d:1c:fd:74:5f:18:72:27:03:48:
88:d0:23:cd:9b:30:e3:bd:e9:68:43:f5:9e:4b:3c:c5:12:2a:
62:38:e3:08:2b:1d:32:23:06:68:ca:af:4c:5f:8a:ad:bd:ea:
97:40:26:f9:cc:a6:07:6b:29:a4:b5:6a:bc:70:39:06:38:07:
e9:7a:b8:d3:f8:0c:c8:02:02:64:e6:d7:cc:e2:7d:07:8e:f1:
4e:b0:88:9e:a2:71:27:72:51:9a:ef:5b:87:ac:f1:7a:d8:bb:
bb:07:47:d9:71:22:3a:e1:b0:b0:1c:5a:74:84:f3:25:9f:05:
9f:30:10:ed:8a:34:8d:33:bb:9c:06:18:29:34:7e:e4:4c:df:
f7:a5:aa:a1:57:cd:4f:e9:59:be:a5:d4:4a:78:b0:1b:ec:d9:
e4:86:64:a6:dd:51:f7:0f:3d:ea:6f:3f:08:ab:e3:5e:fd:0b:
a6:f9:3b:c0:6d:cf:46:73:2d:03:a5:ec:d9:2b:a3:91:59:35:
af:f8:89:bd:bd:a3:4e:54:5d:e8:e3:81:98:64:fa:b5:fd:66:
fe:c1:b4:2a:81:e0:31:b7:f9:ac:62:c4:91:8c:dd:1d:89:b6:
b5:2b:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 14:21:18 2024 by rpki-client on console-fra.rpki-client.org