Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/OBW1Ljoo-GYpGpI5uXpbi_N6axc.roa
File: OBW1Ljoo-GYpGpI5uXpbi_N6axc.roa (raw, json)
Hash identifier: GPQaTpTyMyvgSrnVTxv8ThpYT4f3DrGa2ppHgfpOte0=
Subject key identifier: 38:15:B5:2E:3A:28:F8:66:29:1A:92:39:B9:7A:5B:8B:F3:7A:6B:17
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01907CB29C9258931B6A96AAB7987FD0D5F0
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/OBW1Ljoo-GYpGpI5uXpbi_N6axc.roa
Signing time: Thu 04 Jul 2024 07:43:18 +0000
ROA not before: Thu 04 Jul 2024 07:43:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.163.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 03 Aug 2024 07:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:b2:9c:92:58:93:1b:6a:96:aa:b7:98:7f:d0:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 4 07:43:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3815b52e3a28f866291a9239b97a5b8bf37a6b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:0c:67:6c:6f:ca:3a:2a:cb:2a:6c:a2:b8:
62:1a:39:49:bb:18:af:67:b3:13:b5:be:dd:f7:e2:
38:a1:25:1f:67:8d:b3:3e:c8:b9:d6:e0:2d:d5:43:
c7:39:7e:40:db:4e:04:79:96:4c:dd:6c:fd:f7:6f:
07:0e:58:f6:7f:b2:e2:5f:7e:0b:a0:07:85:c0:c2:
fb:88:4d:a6:be:6f:89:b1:92:56:61:47:29:3e:03:
f0:11:6e:2d:95:68:dc:92:bb:d1:e3:f0:1a:00:0c:
66:08:06:71:2b:0a:40:31:86:9f:e2:58:e6:af:be:
a9:1b:49:1c:37:f7:fb:f1:1b:0b:41:ad:b4:c8:f3:
7d:56:7a:d0:e5:c6:94:6e:89:79:37:f2:63:b4:35:
45:b9:29:e1:13:8d:31:7d:f9:3b:91:f4:5a:dc:51:
6d:74:cd:fb:e2:d2:4c:de:a5:40:0f:9c:fa:b9:7b:
f3:5f:a1:ef:24:e2:d5:1a:96:36:ed:84:97:eb:fe:
72:20:93:67:50:fa:48:b5:e5:d2:8d:f9:92:69:87:
ed:d4:a5:34:57:77:03:33:78:93:ac:9f:1f:9b:96:
11:80:a1:72:45:96:8b:3f:31:8f:67:44:6e:73:c0:
02:14:9f:f9:3b:d3:ee:5c:89:a8:e5:8e:6f:84:45:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:B5:2E:3A:28:F8:66:29:1A:92:39:B9:7A:5B:8B:F3:7A:6B:17
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/OBW1Ljoo-GYpGpI5uXpbi_N6axc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.54.0/23
Signature Algorithm: sha256WithRSAEncryption
14:1e:d4:d9:c2:10:5b:58:72:6f:e3:43:c3:c8:d8:d8:7b:96:
6b:76:26:cd:e0:f8:a5:4c:22:c2:02:c0:5c:c3:33:69:9d:84:
2d:82:ee:c2:62:e7:eb:3a:e8:19:04:e0:46:0e:4c:fb:59:60:
e4:e5:d9:50:4a:d1:5d:62:5d:86:dd:4e:00:e0:8b:3c:84:2c:
f5:a4:95:e4:90:bb:d8:c7:f8:d6:24:16:cb:1a:fc:89:59:e0:
ed:38:ab:b8:1b:ec:7d:b8:b6:67:e4:34:5c:5e:e1:25:08:30:
d2:91:24:45:4f:a0:99:94:0a:44:44:10:2c:ac:68:73:0f:4c:
be:0a:e9:21:1b:19:22:49:ee:bc:0e:f2:55:8c:e3:66:b0:74:
c4:8e:a7:6d:71:96:af:a6:53:01:96:02:74:dc:a5:20:16:ff:
d0:2f:26:8d:7f:37:fd:15:0a:06:56:b6:e5:7b:b7:b1:75:58:
fb:83:39:e9:2d:20:5b:47:5d:27:9a:44:80:d8:cd:4a:e2:a0:
1e:1f:3a:0e:52:8d:86:0f:78:c0:4c:88:c0:80:b3:65:af:f0:
16:19:88:d8:b6:b3:b3:f2:3f:8d:36:38:2b:d2:c9:26:bc:3d:
7a:7b:31:cd:5b:b4:2b:63:0c:15:72:79:73:ae:fd:ec:96:d2:
93:5b:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 09:12:38 2024 by rpki-client on console-fra.rpki-client.org