Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/OanHF7gTjoJU8QPtuuh90SqLMko.roa
File: OanHF7gTjoJU8QPtuuh90SqLMko.roa (raw, json)
Hash identifier: cvRU++QScWS69e6uA619uzPAA7Hb1HlOFWKz8WDfGfI=
Subject key identifier: 39:A9:C7:17:B8:13:8E:82:54:F1:03:ED:BA:E8:7D:D1:2A:8B:32:4A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01867D31BE994C4F87184456D7F5C841DA95
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/OanHF7gTjoJU8QPtuuh90SqLMko.roa
Signing time: Thu 23 Feb 2023 07:34:17 +0000
ROA not before: Thu 23 Feb 2023 07:34:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 86.104.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 07:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:31:be:99:4c:4f:87:18:44:56:d7:f5:c8:41:da:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Feb 23 07:34:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39a9c717b8138e8254f103edbae87dd12a8b324a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:11:da:87:5c:1e:43:8d:84:96:7e:7b:b2:
93:8c:c9:a9:d2:29:94:02:be:e5:37:0c:b4:1c:6b:
3b:53:fb:65:5a:a7:cd:59:b4:a0:84:41:ad:0d:a5:
60:04:0e:5d:95:dc:f0:b4:c1:d9:57:0a:63:37:43:
9e:de:99:d0:57:a0:32:2e:8c:bd:1d:70:d0:d2:ed:
1b:4d:13:9f:a6:f3:33:98:72:91:1d:ce:ae:3c:18:
bf:11:87:28:63:68:90:2e:c0:00:25:a6:5d:c6:17:
71:9a:d1:a1:b7:b3:de:12:0b:a0:00:3f:60:84:a9:
5e:27:be:7c:76:1b:99:1a:bc:2b:37:b0:fc:52:e4:
6e:b1:c7:c1:2d:2e:e2:50:ec:32:fe:0e:96:af:82:
48:a3:77:87:45:36:ec:d4:49:5d:cd:09:a8:a6:48:
ee:00:d8:99:3b:95:6a:98:98:ed:d5:7f:be:a7:67:
14:34:eb:52:f3:9c:da:b4:30:b3:60:4d:77:68:dc:
3d:7e:39:c2:de:13:73:0d:19:1c:3b:f5:28:2a:9a:
23:2a:e7:83:6f:d3:31:69:3d:71:e7:0e:9f:f3:f2:
22:06:fc:40:ac:e3:b7:54:3e:ea:29:f6:8f:48:20:
ac:6b:a6:42:5f:78:c4:72:55:70:17:b6:32:d3:bf:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:C7:17:B8:13:8E:82:54:F1:03:ED:BA:E8:7D:D1:2A:8B:32:4A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/OanHF7gTjoJU8QPtuuh90SqLMko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.164.0/22
Signature Algorithm: sha256WithRSAEncryption
49:57:ff:e5:25:4e:40:a9:22:c2:3c:45:f0:ab:f9:d0:2a:b5:
9c:a7:c4:e3:14:84:85:5d:39:c4:53:4e:13:e0:62:05:4f:6d:
f0:de:7c:4f:17:c2:95:a8:7f:db:ef:0b:03:81:99:bd:da:a3:
5b:50:b8:9a:f7:12:12:b0:88:47:7b:8c:c0:68:f6:9c:2a:55:
95:65:18:6a:2f:2b:8f:45:f6:9d:35:a5:50:6a:fb:4a:6f:50:
b6:d9:a2:4b:d6:60:5b:11:30:8b:40:f1:43:b9:79:1f:3a:78:
07:12:87:9e:2f:53:0e:a3:8a:6a:9b:52:be:f0:79:ea:ea:17:
83:5b:b3:3a:df:b0:b9:72:43:f9:9f:cc:06:cb:8d:62:29:52:
58:45:2e:09:12:55:24:73:c0:17:66:40:f9:1b:03:e0:06:e6:
29:f5:fc:65:92:e2:c7:41:00:37:80:dc:4e:1f:c6:55:86:67:
5d:c7:4a:91:f7:a3:bd:fc:c9:97:39:e0:3d:f8:cd:48:00:ee:
f8:96:7c:71:e4:47:f3:a5:b5:5c:fd:6d:08:37:7d:ef:e8:18:
f6:55:38:fb:f1:b0:ed:c8:30:1a:e7:4d:03:7f:38:f8:70:97:
60:59:1f:6c:2c:28:bb:68:e7:4c:0b:d4:1c:0e:2a:83:54:73:
13:cb:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org