Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/oyMdp8NZNqk7yokINWjQRFpYjjM.roa
File: oyMdp8NZNqk7yokINWjQRFpYjjM.roa (raw, json)
Hash identifier: eJpBOfPQJ0UuUsrxhyr4BiB8U1APjgLWiE++VxkbsPI=
Subject key identifier: A3:23:1D:A7:C3:59:36:A9:3B:CA:89:08:35:68:D0:44:5A:58:8E:33
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 018A87DA2EAD942D85F8D3DB2744CF311099
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/oyMdp8NZNqk7yokINWjQRFpYjjM.roa
Signing time: Tue 12 Sep 2023 05:25:37 +0000
ROA not before: Tue 12 Sep 2023 05:25:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8376
IP address blocks: 212.34.0.0/19 maxlen: 24
185.98.224.0/22 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/29 maxlen: 48
2a00:18d8::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:87:da:2e:ad:94:2d:85:f8:d3:db:27:44:cf:31:10:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Sep 12 05:25:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3231da7c35936a93bca89083568d0445a588e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:27:3e:8d:6c:7f:ea:dc:11:0e:46:09:a4:
40:9e:b1:54:3e:0b:81:ec:5c:aa:a3:a9:3f:8e:07:
3e:f4:47:82:48:1f:b8:88:27:69:a8:36:40:f8:03:
5f:5c:ea:85:a7:63:b9:d2:b6:c4:d1:ff:ab:a8:bb:
70:c6:4d:e6:26:10:d6:90:05:af:9e:bb:5d:2c:13:
ff:80:08:59:44:2c:36:67:30:54:df:9e:fa:a6:89:
40:25:21:58:95:bb:73:e2:8a:3d:53:75:9e:98:57:
b0:c6:80:fc:e3:fc:fd:e0:e6:25:15:a9:7f:0f:ec:
56:d5:fb:cd:22:bf:d2:80:4c:ae:11:c6:f1:35:b9:
cd:09:f0:5d:05:8a:ec:aa:f0:d0:fc:54:2f:dc:cc:
4c:51:ac:c3:d6:ae:04:45:24:4f:d4:7d:a6:d6:96:
a9:93:bc:04:76:0d:a9:6e:e7:d3:4d:fe:7d:ef:49:
f8:f9:03:b5:1b:99:b4:47:c7:71:80:67:6a:d3:35:
14:29:b9:e6:d7:2a:bd:72:1e:b9:80:e8:6c:9e:1f:
f3:43:61:b8:7f:59:d8:4f:ea:12:dd:69:f4:7d:e9:
ba:f9:24:b6:ba:94:85:da:32:bc:08:b1:bf:1e:cc:
59:24:8a:8a:8a:1c:89:38:34:cf:3d:a2:6e:b3:7a:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:1D:A7:C3:59:36:A9:3B:CA:89:08:35:68:D0:44:5A:58:8E:33
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/oyMdp8NZNqk7yokINWjQRFpYjjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/29
Signature Algorithm: sha256WithRSAEncryption
7e:9c:93:2f:da:94:7b:51:68:54:3e:52:a1:1e:27:c9:a9:bb:
38:a9:8d:c0:cd:71:dd:f7:02:2a:2b:e2:39:11:32:d5:9a:34:
1a:48:e7:8b:94:b5:8d:22:0b:bf:e7:e0:40:78:a2:da:f2:79:
91:8b:5e:4f:df:b4:2c:14:63:da:f4:e3:b0:ea:7c:73:6a:f5:
c4:29:42:8d:60:34:de:70:66:11:b1:be:04:5c:c1:0b:d1:02:
d2:e5:39:b8:35:07:db:95:0f:26:3d:3f:ab:bb:a4:cf:a9:86:
89:0f:6c:41:33:ae:1c:d0:03:48:0c:6f:39:d9:f4:4b:36:99:
34:64:d2:cc:2a:d8:f0:b1:ae:7c:4e:4e:f5:db:18:be:c4:e6:
e2:c3:d4:be:71:fd:1b:e3:b4:33:ff:36:61:7d:e6:ea:29:c3:
fd:af:01:a3:8d:e9:04:ee:3f:41:2e:07:e6:53:5d:13:11:45:
62:f9:e2:b9:70:5a:46:ce:39:2e:61:48:7c:1a:a3:c4:c9:a6:
47:46:f9:fc:8d:29:81:fc:23:9a:fc:99:dd:36:ed:e7:a1:4c:
04:6c:59:b6:84:84:de:83:41:e7:ac:2b:d1:da:38:69:87:f7:
cb:48:73:bc:fa:10:7c:c4:7e:77:a0:3d:17:a6:b5:64:28:b7:
06:e1:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 11:07:22 2023 by rpki-client on console-ams.rpki-client.org