Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/oiGLbQbNOTUwhGIbXjw_Aq_ZLNE.roa
File: oiGLbQbNOTUwhGIbXjw_Aq_ZLNE.roa (raw, json)
Hash identifier: dSwUOguu4vGttgX1A6yZOaJEmogrPzhNSaIyHz2J01E=
Subject key identifier: A2:21:8B:6D:06:CD:39:35:30:84:62:1B:5E:3C:3F:02:AF:D9:2C:D1
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018824A5AC408C4477A4F49CABC768312464
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/oiGLbQbNOTUwhGIbXjw_Aq_ZLNE.roa
Signing time: Tue 16 May 2023 13:00:17 +0000
ROA not before: Tue 16 May 2023 13:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6658
IP address blocks: 194.1.128.0/24 maxlen: 24
194.1.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 14:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:a5:ac:40:8c:44:77:a4:f4:9c:ab:c7:68:31:24:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: May 16 13:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2218b6d06cd39353084621b5e3c3f02afd92cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:5e:4d:58:75:63:0a:f2:48:a8:a7:36:9f:
5c:d0:51:54:52:97:75:32:d3:68:b2:a7:bb:1f:c0:
96:dd:b4:44:bc:3f:a5:07:c7:d3:c3:4f:27:57:8c:
2d:7f:a4:0d:4b:bb:2c:60:e6:cd:87:78:47:1e:76:
a4:57:37:58:d1:94:39:c8:f9:27:68:a0:eb:80:18:
36:28:88:8d:82:72:77:3d:14:55:9c:e9:68:e1:25:
e6:c6:06:c1:d7:2e:16:74:d5:4f:de:bd:31:81:53:
04:5a:dd:c0:5d:44:0c:77:62:32:cb:82:10:26:ac:
33:94:2f:bc:56:5d:b5:dc:cf:2e:52:9b:ea:49:e2:
f6:79:d0:1b:3e:c8:bd:31:c1:49:19:28:8d:02:c4:
5a:09:be:49:8c:ea:80:03:08:9c:96:e9:ba:57:d1:
f1:d3:f4:f4:12:bb:79:3a:81:b3:86:02:2b:b8:4a:
b9:2c:55:48:ac:07:85:f3:2d:88:9a:98:b0:3e:ce:
d7:5d:83:f7:9f:f2:41:68:74:20:77:a5:89:25:e5:
ab:0f:11:44:57:27:0e:45:18:d0:c2:db:eb:3a:33:
eb:ca:4c:ac:b7:a8:00:3f:ba:e5:97:ce:15:d0:74:
17:69:37:46:09:ef:fe:19:0f:82:d9:ea:98:d7:44:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:8B:6D:06:CD:39:35:30:84:62:1B:5E:3C:3F:02:AF:D9:2C:D1
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/oiGLbQbNOTUwhGIbXjw_Aq_ZLNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.128.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f5:f8:2b:45:aa:2c:69:ce:b0:49:5c:88:ee:95:5c:5a:06:
81:38:d8:8c:23:b9:75:14:92:14:18:03:e9:89:98:60:0e:5b:
10:6a:f6:0e:de:7b:eb:a9:9b:a0:f9:b2:e9:d7:a1:3c:c5:89:
cf:10:82:da:73:96:f1:18:ee:39:fd:81:6b:3c:11:98:84:b1:
b6:f5:f2:9b:60:3b:3e:14:18:c7:07:25:f8:51:d8:b4:3f:4b:
11:2e:a5:9f:5e:6e:ef:01:fc:cf:73:a6:21:1d:21:76:3a:c3:
28:60:88:19:9f:d1:aa:26:5d:69:96:dd:ab:40:9b:51:3d:c6:
01:b6:82:3d:fb:34:00:ac:8c:7b:cc:c1:8d:f1:5d:cc:b6:f1:
da:3e:cd:e5:56:17:50:32:a3:ab:14:a6:f3:08:a8:fc:8f:31:
fd:02:95:b2:aa:85:38:f7:e8:50:44:62:af:49:90:48:18:09:
c1:b9:ae:18:cd:d9:f2:95:bd:06:44:76:2e:4d:bb:6e:12:d6:
5a:54:d3:f9:8a:66:76:c9:f6:e5:d0:5d:5e:39:bd:d3:53:bd:
d5:f4:5f:df:0f:2e:5c:db:1b:0d:4d:90:b1:83:38:fc:50:f3:
ce:d1:31:ad:58:53:74:32:b3:17:1e:a3:ee:41:c3:87:e7:e0:
ac:e3:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org