Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/OxL1KfkYR6tD04lUbpfnAIKahjU.roa
File: OxL1KfkYR6tD04lUbpfnAIKahjU.roa (raw, json)
Hash identifier: gjmGU0yDPCJRTlfoKpZaBpLWW8oH1yLVpRI/lluZyLk=
Subject key identifier: 3B:12:F5:29:F9:18:47:AB:43:D3:89:54:6E:97:E7:00:82:9A:86:35
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018D0E86A2271D96E8DC717D251461E3E0D7
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/OxL1KfkYR6tD04lUbpfnAIKahjU.roa
Signing time: Mon 15 Jan 2024 19:08:40 +0000
ROA not before: Mon 15 Jan 2024 19:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205800
IP address blocks: 202.164.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 19:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:86:a2:27:1d:96:e8:dc:71:7d:25:14:61:e3:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 15 19:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b12f529f91847ab43d389546e97e700829a8635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:5b:72:be:2a:a1:ca:49:92:7b:91:64:49:
d6:b5:e8:b0:22:7f:7a:dc:9b:63:5d:a4:1c:2e:ea:
fc:33:03:01:21:a5:40:fe:10:26:bf:d8:34:7b:46:
a8:4e:28:03:c6:7d:01:8a:7d:b6:95:31:0b:80:3f:
ce:34:3e:e4:66:3c:ea:c9:5d:1d:9b:62:ff:9c:08:
a7:40:97:54:81:ef:24:c7:ca:dc:03:4d:c5:91:84:
1d:25:10:63:04:44:8e:c4:d0:98:b5:30:8f:fb:0a:
c1:e3:e1:b6:63:ef:f0:51:6e:83:6f:a8:4d:b6:a5:
10:b2:32:9f:97:00:29:78:eb:1c:e2:6f:2f:77:c8:
93:2d:26:8e:0c:17:20:3e:2e:02:45:4f:c7:1f:16:
c4:4a:22:d6:c9:2d:1d:cf:09:03:3f:25:68:e4:16:
13:5b:86:8f:d9:46:d8:3b:29:78:5e:2d:66:63:fe:
0b:7e:e0:0b:63:20:12:a1:84:9f:62:17:cb:ce:cc:
d6:73:74:e2:dd:4b:42:98:b9:64:ab:c7:ad:3e:c0:
65:a7:d2:28:6a:cf:51:6a:53:00:49:25:ca:4f:1f:
7a:38:5d:3e:a2:6e:bf:4d:21:ff:d1:1b:93:74:6a:
c4:9e:62:98:75:26:fe:5a:a6:3e:f9:7e:dd:b6:22:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:F5:29:F9:18:47:AB:43:D3:89:54:6E:97:E7:00:82:9A:86:35
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/OxL1KfkYR6tD04lUbpfnAIKahjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.164.207.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7c:79:c3:f2:35:94:1c:21:62:62:15:b5:8e:13:d5:fb:ff:
c1:6b:b8:ac:17:f0:96:2b:a1:c7:30:a6:98:0f:a2:a9:0e:2e:
cb:98:f8:06:09:0d:4d:e3:a6:57:df:a7:3b:6e:89:b4:74:10:
33:d9:b9:cf:0b:ff:4e:ef:6c:69:e3:b3:1d:5d:9f:21:57:9f:
f7:2c:23:4b:99:89:4f:02:9f:0c:e9:dd:c4:76:ef:d6:08:d1:
27:57:d3:fd:c5:53:18:fa:0d:7b:91:67:23:2e:a4:a9:5a:3a:
70:e0:8b:ce:90:59:c0:11:0c:5d:5f:df:96:8d:af:82:88:01:
94:3f:b6:23:38:46:38:d5:8e:c0:56:37:47:20:9f:52:b3:58:
21:ce:23:ed:06:58:3e:f2:75:3d:2e:07:97:60:17:57:e4:ca:
05:9f:38:d6:73:40:1d:42:ad:ee:6f:5d:41:62:1f:f5:fe:bf:
00:30:96:ef:7f:6e:af:d5:1f:1a:92:45:62:a7:ac:c4:8f:35:
8f:2f:84:23:45:96:63:6d:22:85:38:5b:b7:61:8e:6b:19:30:
a8:42:08:3d:18:3f:81:c3:b4:fd:3a:9d:5d:a9:d4:a8:3b:ad:
66:68:5c:e2:e6:60:14:17:2f:7f:a5:d0:14:41:54:97:f7:b5:
4f:63:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org