Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/OVUS_bAhM4HF37LWtoy9LhgwGC8.roa
File: OVUS_bAhM4HF37LWtoy9LhgwGC8.roa (raw, json)
Hash identifier: bdFntpcijBceyLyllLTTP4JHdLc5JjaL7jJwUZ5aqUs=
Subject key identifier: 39:55:12:FD:B0:21:33:81:C5:DF:B2:D6:B6:8C:BD:2E:18:30:18:2F
Certificate issuer: /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial: 01856D787FDC836F568CF79987F662BA3518
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/OVUS_bAhM4HF37LWtoy9LhgwGC8.roa
Signing time: Sun 01 Jan 2023 13:14:51 +0000
ROA not before: Sun 01 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212981
IP address blocks: 193.200.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:7f:dc:83:6f:56:8c:f7:99:87:f6:62:ba:35:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Validity
Not Before: Jan 1 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395512fdb0213381c5dfb2d6b68cbd2e1830182f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:8f:e9:4b:42:cf:24:a6:db:be:c6:74:a5:
9c:2b:74:3d:f4:04:69:6f:2b:93:45:a3:6c:50:f9:
72:4f:f0:9d:0c:83:5b:c0:46:74:ea:64:f6:4f:11:
fc:e6:67:a3:99:4c:9b:65:4a:9e:cc:98:48:19:58:
da:cb:d1:e3:67:05:d1:e4:58:fb:c5:0b:04:c9:0f:
be:fb:41:f9:64:03:c5:0a:f9:f7:44:10:59:bb:86:
79:88:79:3d:74:93:2c:75:51:71:b4:64:43:2f:c5:
e5:7b:fb:20:19:d0:56:a8:8b:bf:29:94:51:94:19:
a8:eb:76:f0:a2:3d:c8:f9:50:3a:82:4b:e0:24:ea:
e4:dc:5b:97:e9:c6:10:d7:4e:b0:09:7e:5e:ed:15:
6c:30:50:69:57:59:30:bf:96:c2:c7:a9:a5:c5:1b:
ef:47:65:3e:e6:bf:28:3b:b2:54:14:cc:2f:c5:52:
eb:92:ec:dd:ce:a6:8e:fb:28:f0:87:8c:d5:ff:08:
49:25:40:35:20:26:64:f1:01:a7:6e:f8:70:db:2f:
64:4b:1d:c7:b8:0c:47:89:99:31:8d:2f:a7:0b:23:
42:4f:48:62:08:3e:d0:1d:00:ed:38:65:63:a5:51:
bd:ca:6a:48:35:7b:18:03:ae:44:39:ae:d4:46:ff:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:12:FD:B0:21:33:81:C5:DF:B2:D6:B6:8C:BD:2E:18:30:18:2F
X509v3 Authority Key Identifier:
keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/OVUS_bAhM4HF37LWtoy9LhgwGC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.186.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0d:4c:1c:6b:2a:5b:df:8b:c9:f5:f4:9e:3c:c2:c2:b3:c9:
57:3b:9f:42:f3:d9:2a:43:a7:d3:2b:96:34:39:ca:d5:ac:3a:
7b:63:af:44:1b:d1:4c:d3:8d:0e:80:ae:51:20:c8:c8:32:e3:
60:3d:e0:52:6d:8b:1a:f7:01:42:8e:2c:1b:32:eb:a0:e6:2b:
f7:86:fa:51:77:4f:24:5f:d6:09:eb:9c:e7:fa:e2:2d:58:7b:
d3:d5:74:4d:c6:d0:d4:af:02:d0:35:ac:34:f8:0b:47:5c:a9:
8f:8b:e8:ac:d9:18:3e:5e:b4:ab:06:ac:0a:06:93:8e:c8:6c:
00:66:e2:23:06:11:d9:09:79:4c:ed:35:04:f2:d7:7c:94:48:
27:0b:53:97:79:0b:5a:b8:b9:4e:db:ef:0a:5c:8a:c7:e2:94:
e7:56:6a:f8:48:08:a4:75:55:56:38:32:eb:55:23:c1:48:9f:
4e:78:f2:df:6d:bf:20:4d:43:fa:d7:bc:2c:32:3a:49:04:6c:
3e:22:24:9d:5a:68:0c:94:09:97:1c:84:89:7e:a8:7d:45:55:
26:17:9a:ba:ee:91:6b:aa:9d:fa:8a:82:bb:0d:a5:3b:a5:da:
bc:10:fe:f9:90:cd:af:9a:68:80:0e:4f:b9:12:17:15:cc:f8:
c0:2b:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:30 2024 by rpki-client on console-ams.rpki-client.org