Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OHHzMHuohiRkjLvGhsXHf3b7WZ8.roa
File: OHHzMHuohiRkjLvGhsXHf3b7WZ8.roa (raw, json)
Hash identifier: 0h90X/X87RWWCU4D4dYZPf4Mliv4YFFJcncEmirsHSE=
Subject key identifier: 38:71:F3:30:7B:A8:86:24:64:8C:BB:C6:86:C5:C7:7F:76:FB:59:9F
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CC348F3B92FE94176797CA94A1F34F70B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OHHzMHuohiRkjLvGhsXHf3b7WZ8.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209411
IP address blocks: 209.16.142.0/23 maxlen: 23
2a0e:ce40::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 08:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f3:b9:2f:e9:41:76:79:7c:a9:4a:1f:34:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3871f3307ba88624648cbbc686c5c77f76fb599f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:8d:5b:ae:dd:a3:27:99:ce:2b:a7:3b:1c:
bd:ab:ad:1a:09:39:a5:04:a2:0e:5d:67:e4:01:8f:
2c:1f:36:7c:19:ca:1f:f5:19:b9:4e:40:b5:d1:b1:
aa:04:ef:dd:1e:20:ea:b1:fe:06:66:cd:fb:ff:15:
19:68:a8:20:2e:48:0e:23:16:90:f8:c7:aa:fc:ae:
cf:1b:29:28:6c:fe:3e:62:d6:47:3e:c1:70:f9:e3:
57:ef:4a:7b:0d:0a:2d:77:a0:12:ca:aa:71:98:6c:
b2:2a:06:0c:e3:16:c7:bb:bc:c8:f4:90:ce:af:29:
be:2a:e6:75:db:11:70:a7:f4:05:71:98:cd:42:5f:
20:d5:02:57:52:eb:cb:7e:4d:d7:23:0d:0a:84:db:
82:da:85:be:8e:93:39:68:cf:26:5c:91:3b:b5:96:
b6:77:7c:46:89:69:90:3a:5c:fa:18:70:04:8b:53:
51:fc:1f:71:ef:2f:32:9c:6c:3f:3e:c2:c4:e5:03:
e1:06:91:0c:93:ce:50:00:39:65:82:66:ec:64:bf:
84:55:e2:7a:26:a2:b3:23:85:26:28:2e:e9:66:3b:
bd:ac:58:08:fa:d3:81:87:2c:6e:f0:71:4a:da:88:
f2:4e:5e:24:4a:d4:67:01:a9:78:da:ad:84:42:8e:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:F3:30:7B:A8:86:24:64:8C:BB:C6:86:C5:C7:7F:76:FB:59:9F
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OHHzMHuohiRkjLvGhsXHf3b7WZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.16.142.0/23
IPv6:
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
00:a5:1f:08:c5:cc:a5:cc:a7:0c:66:c7:a8:fb:40:5d:ca:35:
16:fb:a9:aa:30:20:bf:57:b9:88:92:6e:35:0d:bb:18:44:13:
31:fd:d5:fe:90:7e:2f:ee:8f:22:b0:66:ad:e0:f5:d4:70:14:
72:25:d5:bb:f3:cd:f6:cf:87:c4:55:9d:b5:72:db:1f:9e:5c:
b5:ed:e1:e8:36:46:db:28:0f:50:ae:96:c2:79:d7:83:54:3d:
b0:b1:ae:a3:61:e3:d4:95:9b:9a:93:cd:c2:a2:ca:d6:5f:d0:
0f:23:c1:33:1a:4a:59:81:bb:8f:c9:2e:5f:d7:9f:11:11:ca:
0b:0c:00:3b:09:db:71:49:fd:5e:67:ef:b4:25:25:be:92:f9:
bc:9d:e8:3d:e3:66:00:ae:b2:80:f1:03:21:d4:97:f4:06:3c:
d4:06:f3:26:55:ae:32:8a:db:4d:fd:e7:2d:43:4a:b1:d3:20:
56:4c:5e:32:8e:e8:67:af:c9:b2:f1:47:62:eb:28:2c:13:04:
0a:bb:c8:38:7f:ec:29:20:59:2d:d7:6a:4f:f3:86:32:2d:52:
d9:f4:9c:a8:eb:33:bb:c4:e9:5a:59:1e:57:29:f9:bf:a7:3f:
22:42:a1:00:8e:79:49:b9:77:3b:3d:b6:09:f0:8a:7a:69:57:
5c:5d:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:46 2024 by rpki-client on console-ams.rpki-client.org