Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/oeObRF2AkUnvar55DCZEDiaO724.roa
File: oeObRF2AkUnvar55DCZEDiaO724.roa (raw, json)
Hash identifier: f7nWC2BVv2rI+Qif6osRu5aEiBj5U5jo6Kcl9wq9b34=
Subject key identifier: A1:E3:9B:44:5D:80:91:49:EF:6A:BE:79:0C:26:44:0E:26:8E:EF:6E
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 018CC649FBB6C4BE63F7CA12BD47F9730C43
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/oeObRF2AkUnvar55DCZEDiaO724.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21239
IP address blocks: 194.0.6.0/24 maxlen: 24
193.109.126.0/24 maxlen: 24
2a02:6e0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Mar 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fb:b6:c4:be:63:f7:ca:12:bd:47:f9:73:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1e39b445d809149ef6abe790c26440e268eef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:96:86:52:ee:28:de:97:71:d4:6a:1d:82:
af:6a:20:45:bd:ed:15:74:d4:32:36:06:6b:09:93:
83:ea:28:54:45:50:1a:65:6d:20:50:1d:51:46:d9:
47:08:1d:00:97:39:6d:27:13:77:10:a0:3f:72:9a:
a3:73:8d:67:5c:ac:87:05:e7:81:a5:3b:bf:b5:e9:
ad:0d:71:83:33:d0:5d:5d:0a:0e:6a:79:73:83:78:
5a:b3:7f:fb:61:60:03:86:62:bf:04:3b:34:a7:c9:
63:d1:f0:c7:ac:89:20:25:75:37:3b:36:16:30:b3:
56:95:a8:c5:62:6e:71:45:01:f1:c6:73:95:6d:b4:
42:11:9e:82:28:ab:4d:9d:38:d6:bc:83:5f:c7:03:
4b:53:0c:ba:96:50:8c:c3:4f:27:4b:6d:fc:da:0d:
8c:cd:63:d4:10:20:68:b8:56:aa:e3:62:01:7f:08:
4f:f0:31:38:4f:5c:e1:02:fd:e9:02:73:f1:6f:cb:
8d:d7:35:34:34:a7:15:ed:2e:6a:0e:fd:2b:66:50:
65:1b:58:94:3a:1b:6e:d8:2f:81:c7:0b:01:6a:14:
18:f8:95:a0:30:38:34:d1:a3:0b:ff:a9:97:fc:dc:
bd:7c:0b:0f:59:be:81:c9:00:8b:5d:41:8b:29:eb:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:9B:44:5D:80:91:49:EF:6A:BE:79:0C:26:44:0E:26:8E:EF:6E
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/oeObRF2AkUnvar55DCZEDiaO724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.126.0/24
194.0.6.0/24
IPv6:
2a02:6e0::/32
Signature Algorithm: sha256WithRSAEncryption
98:03:9c:16:04:fd:81:5a:81:68:21:8a:6e:82:28:a3:ab:39:
db:80:71:5b:9d:e8:e6:56:5f:dd:a7:a3:d8:66:c0:f2:9f:53:
78:08:75:42:b1:13:e6:07:d1:ec:15:7b:96:4d:07:45:5a:1e:
55:df:cb:8f:c6:4e:83:68:c2:84:cd:34:ce:79:36:90:be:a4:
95:85:e5:ea:21:1b:10:39:9a:ed:91:c2:6f:32:9f:e9:4a:70:
0b:0d:63:81:3b:45:de:13:27:84:fc:80:e8:ee:6f:96:6d:bb:
06:08:28:f8:20:f0:32:24:27:a5:84:98:d6:3d:c1:c2:b9:23:
dd:a4:75:66:dd:31:81:5b:1d:6c:27:e9:f6:38:4c:6c:e2:c7:
57:39:32:10:48:76:18:ac:8e:7c:6a:25:c3:04:79:e3:6e:3a:
5a:f2:9a:b1:95:d2:8e:52:cb:02:4e:64:d3:06:7f:eb:2a:fa:
d4:c0:e5:90:aa:14:37:8a:e7:29:97:a5:b0:ac:13:df:9f:b2:
c1:d2:dd:b8:e4:c4:ee:4c:a3:be:81:85:31:4a:74:c6:e5:3d:
33:40:cf:2f:7d:68:ff:c6:3a:4c:da:76:b7:60:c4:04:25:f5:
5e:cf:af:22:1d:56:65:96:52:06:be:3c:71:20:e1:cb:49:82:
e6:6c:bb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 14:21:18 2024 by rpki-client on console-fra.rpki-client.org