Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OfnEFVnpbvMuEgNhB_F9MgRdE9U.roa
File: OfnEFVnpbvMuEgNhB_F9MgRdE9U.roa (raw, json)
Hash identifier: L6M6qRitWiW7dZ4xQ6LrsvxRX2fUER8JE5pumY7f/Hc=
Subject key identifier: 39:F9:C4:15:59:E9:6E:F3:2E:12:03:61:07:F1:7D:32:04:5D:13:D5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F09F2A191059529DE7FACD62FA6F9A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OfnEFVnpbvMuEgNhB_F9MgRdE9U.roa
Signing time: Mon 02 Jan 2023 05:24:55 +0000
ROA not before: Mon 02 Jan 2023 05:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35115
IP address blocks: 195.136.68.0/23 maxlen: 23
195.136.74.0/23 maxlen: 23
195.136.80.0/23 maxlen: 23
195.136.80.0/22 maxlen: 24
195.136.188.0/23 maxlen: 23
195.136.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9f:2a:19:10:59:52:9d:e7:fa:cd:62:fa:6f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f9c41559e96ef32e12036107f17d32045d13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:2c:d3:56:9c:fe:c7:81:21:34:73:46:c3:
7d:86:09:71:82:25:52:52:8c:7c:36:40:a7:92:48:
5a:44:58:73:1c:84:d8:84:c8:29:e5:5f:fc:17:8d:
71:3a:51:aa:bf:a2:68:73:13:c2:7b:d2:ab:0c:b5:
59:95:df:d8:bf:0f:4f:cb:55:f9:12:15:16:72:83:
0d:2b:68:b2:e8:ca:1e:c8:e6:b8:d7:0b:6b:9f:04:
0f:f0:c2:4d:37:f9:d1:03:80:0f:cd:1d:9c:e5:68:
3f:ba:e2:3e:86:3d:ee:2b:39:77:a5:a2:c9:22:61:
28:9f:07:73:1e:f0:56:7e:7f:65:c1:90:4f:50:e6:
1b:e1:ec:c5:5a:00:13:07:9f:54:51:1c:5c:ac:5c:
1d:c7:77:13:e9:da:62:d8:02:ea:fa:dd:8a:43:f8:
d2:3d:ec:eb:38:d1:fe:90:63:f0:97:00:fa:fc:5c:
b1:8c:5e:0b:31:38:16:a1:56:cd:a0:1b:42:c7:92:
5e:df:43:ad:6c:85:4b:00:37:6b:78:3f:47:d8:24:
88:94:2c:96:05:8c:70:68:0d:b0:f0:09:43:35:0a:
9a:c4:22:1e:53:76:df:cd:7a:b8:a7:c2:6b:bd:47:
1d:84:d8:51:0a:67:00:5f:14:34:a6:28:06:4d:7c:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F9:C4:15:59:E9:6E:F3:2E:12:03:61:07:F1:7D:32:04:5D:13:D5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OfnEFVnpbvMuEgNhB_F9MgRdE9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.68.0/23
195.136.74.0/23
195.136.80.0/22
195.136.96.0/22
195.136.188.0/23
Signature Algorithm: sha256WithRSAEncryption
71:5a:ec:e4:17:c6:3c:3f:6d:5b:4f:53:1a:d9:3d:63:40:a2:
da:aa:42:0f:e1:cc:08:d4:a6:64:2c:57:26:1b:0e:47:7d:8f:
28:40:c1:de:18:92:e8:cd:56:5e:75:50:75:8e:49:62:18:2e:
c5:38:f3:76:5e:66:57:8c:46:ba:69:c7:a9:71:75:da:aa:88:
13:b1:96:0f:ea:9d:6a:50:d6:4d:8a:34:0d:ec:9c:2c:68:7d:
c9:0e:66:40:ae:90:fd:b2:27:7f:0c:64:51:c5:d0:9d:6c:88:
9b:0e:a6:89:e1:c2:05:7f:77:ea:f3:de:6f:2d:ca:3f:af:a3:
91:9a:32:04:56:a1:40:ca:79:c4:5c:42:99:4b:3b:e7:2c:fb:
0e:ce:cc:09:35:57:70:f7:6a:bb:4c:69:a0:4f:08:29:47:89:
fe:ca:0f:ea:d1:56:69:f7:20:6a:c1:dd:ff:e4:e0:47:38:60:
d0:96:df:1e:8b:06:72:5c:5c:4e:89:c8:a5:30:ee:35:a8:c1:
5d:34:a1:0d:f2:97:17:bd:0d:8f:f0:bc:6f:22:4c:b3:28:cd:
fc:06:a6:df:5c:44:1a:52:71:34:f0:dc:86:ff:97:d3:d3:2e:
a1:f4:ea:64:ef:c6:32:b0:cd:e6:56:0b:11:75:cc:f0:58:eb:
08:62:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org