Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/oOgyYFg85_J64Q4SyZapVU7nB6I.roa
File: oOgyYFg85_J64Q4SyZapVU7nB6I.roa (raw, json)
Hash identifier: 9LDsZmgwRyiUv2WfiznwCKOx89wkEimMNHTq7YAW/OA=
Subject key identifier: A0:E8:32:60:58:3C:E7:F2:7A:E1:0E:12:C9:96:A9:55:4E:E7:07:A2
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018E8697E40E1ED1C3ECE8261EC74DB54DAB
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/oOgyYFg85_J64Q4SyZapVU7nB6I.roa
Signing time: Thu 28 Mar 2024 19:44:45 +0000
ROA not before: Thu 28 Mar 2024 19:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201949
IP address blocks: 212.16.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 12:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:97:e4:0e:1e:d1:c3:ec:e8:26:1e:c7:4d:b5:4d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 28 19:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0e83260583ce7f27ae10e12c996a9554ee707a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:8b:82:03:6a:9c:ba:fb:6d:e2:5a:29:4d:
b3:32:6f:7d:3b:24:e3:79:6f:c1:f6:34:1a:4c:d4:
48:32:bf:13:15:dd:25:fe:b6:3f:68:6b:63:59:12:
1b:b9:20:eb:7b:be:8e:ec:af:9b:ae:95:42:2e:ae:
b2:0b:a0:fc:27:92:e4:22:7b:e4:5b:82:b8:96:69:
f5:f4:5e:b6:72:f1:a1:c7:99:d5:00:bc:93:5c:2b:
12:9f:a6:05:89:b4:d4:d0:d7:83:21:c2:49:ed:31:
12:b6:bc:31:55:3c:b3:a1:87:be:79:de:06:27:09:
bd:1a:14:2e:5e:34:0c:29:6c:54:c5:1a:fa:8e:ea:
4f:0c:e9:a1:1c:27:36:a6:23:2f:ad:da:ee:80:b9:
2c:62:72:e9:ee:18:ef:70:a0:58:8b:03:6f:c1:f5:
10:f4:07:4f:ba:3e:59:d5:51:01:f6:68:9b:67:a5:
f7:b6:18:95:0b:da:04:0c:5b:dc:03:49:57:7c:ba:
02:60:a4:be:f4:61:40:3e:c0:6e:10:90:aa:5e:d1:
53:c8:64:ab:2e:5f:3f:98:ce:0b:ff:dc:af:29:60:
2d:40:c2:89:a6:06:e5:e6:f2:96:3e:8c:46:6e:ff:
e7:99:48:16:41:4c:14:f1:0a:c5:3f:5f:5f:bd:38:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:32:60:58:3C:E7:F2:7A:E1:0E:12:C9:96:A9:55:4E:E7:07:A2
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/oOgyYFg85_J64Q4SyZapVU7nB6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6c:91:06:c5:e2:c7:83:79:72:44:77:71:8f:e3:46:11:91:
87:f0:0b:32:32:ae:d9:b5:e0:4b:da:5c:d9:29:ab:3b:ce:21:
d9:e6:2a:74:31:53:ec:3f:29:02:63:bb:cd:81:01:42:c4:2a:
67:ec:9b:5b:db:34:b5:77:5f:8b:81:15:0c:46:a9:7d:96:0a:
b2:4a:f7:af:c5:40:4d:35:0c:bc:2a:46:d6:92:12:da:8d:d2:
6a:5a:c3:7d:96:75:d4:fa:ef:ec:1f:3e:f4:1a:4c:ae:7e:53:
e5:6f:28:c5:38:22:2c:3c:51:6a:b5:87:17:69:80:ff:65:f4:
a2:ff:f1:a1:1c:9e:fb:80:1c:ea:64:32:c7:7e:d2:a2:79:a3:
44:7e:81:81:d6:56:59:6d:cc:8a:41:ad:f2:a3:6b:44:62:6c:
c3:7a:7d:04:0e:35:94:e2:4f:20:d4:9e:7a:b3:72:16:da:7d:
47:25:b8:61:b3:6e:47:a5:bb:4c:ee:8f:ee:67:78:26:73:3d:
86:b4:6f:36:0e:ef:48:1b:8e:b3:e1:22:fc:07:e1:e7:5c:09:
24:16:1f:61:48:32:22:9e:c7:e5:7f:da:12:f2:a2:33:bc:fd:
02:77:1d:1a:3c:b1:14:7e:3f:80:85:86:b4:69:1b:12:c8:06:
06:21:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org