Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/oAgoK_t8rAjqbITAaZzBeGPrLi8.roa
File: oAgoK_t8rAjqbITAaZzBeGPrLi8.roa (raw, json)
Hash identifier: y3Ni0jwlytD97VWtx62w4OoVZhJfM5QPYjyTc66Doc0=
Subject key identifier: A0:08:28:2B:FB:7C:AC:08:EA:6C:84:C0:69:9C:C1:78:63:EB:2E:2F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A211703CB76954C18A5C9A35DF03B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/oAgoK_t8rAjqbITAaZzBeGPrLi8.roa
Signing time: Sun 01 Jan 2023 03:04:58 +0000
ROA not before: Sun 01 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 141.101.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jan 2023 15:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:21:17:03:cb:76:95:4c:18:a5:c9:a3:5d:f0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a008282bfb7cac08ea6c84c0699cc17863eb2e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:69:7e:a4:55:e1:66:2f:f3:41:3c:df:a6:
10:59:0e:c3:43:28:bb:6a:76:63:9c:1f:75:7f:45:
00:22:7f:5d:08:cf:fe:34:01:da:3e:65:bc:a2:81:
03:34:01:64:97:76:fb:ba:3c:5e:68:2f:ef:18:ba:
08:31:f5:4e:a2:11:38:d5:7d:0a:8c:3f:59:4f:d9:
a4:a2:e3:e9:5a:a3:80:0a:58:24:7a:19:f6:1a:9c:
fa:d1:fb:4d:26:d7:74:cb:bd:fd:96:65:92:15:b3:
ba:29:c8:43:e8:34:d6:83:0d:fb:0a:fe:93:aa:db:
19:d5:c3:8c:b0:1c:78:b8:18:bc:9a:90:b1:ca:11:
e7:94:fe:bf:31:64:1f:1f:53:b7:22:cd:92:5c:c4:
00:63:3f:74:d1:6d:16:7b:81:cd:5f:cc:8f:fd:00:
cf:b0:a3:56:ba:a1:a7:3a:ee:5b:c9:74:9a:08:69:
7e:63:94:f9:e2:ff:c0:b1:48:a6:a7:8e:9f:0f:ee:
36:59:7c:d4:47:1c:0e:b5:b2:c5:8d:11:55:e1:48:
90:31:06:d9:51:c0:9c:7d:29:6e:73:19:8c:d6:ef:
c3:a2:a7:11:57:3f:a9:9f:f3:31:50:fd:cc:c1:49:
e8:19:f0:ba:69:25:79:85:71:68:1f:64:16:4f:2a:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:28:2B:FB:7C:AC:08:EA:6C:84:C0:69:9C:C1:78:63:EB:2E:2F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/oAgoK_t8rAjqbITAaZzBeGPrLi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.144.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0b:a4:ad:89:35:46:3c:f7:a2:e3:fe:0b:87:03:ea:7f:e1:
17:93:93:51:2c:f0:bd:55:21:23:5d:1b:b0:b9:30:08:3d:1b:
20:0c:55:21:f0:b6:06:51:d0:d0:85:73:61:32:1a:2c:64:c9:
52:42:ef:30:6e:c6:a6:d9:db:f7:fa:35:53:c7:fb:f8:af:8b:
68:f0:07:13:7e:b5:2e:8b:eb:29:e8:f9:22:51:ac:c6:c6:93:
14:2b:c3:68:ef:37:a6:38:9f:18:8f:4f:40:de:46:1f:40:ec:
04:6d:f2:e0:16:9e:b4:91:ae:de:52:17:e4:d8:2d:4f:c2:d2:
fc:ed:d4:b3:9a:ae:d9:f1:15:27:f6:3d:2e:e2:4c:5a:96:a7:
bd:7a:cd:2e:27:4e:41:ae:cc:c4:b9:3a:86:43:5c:75:15:8b:
ce:21:97:5c:9e:85:61:16:f9:75:51:f0:67:35:40:23:81:5f:
2a:96:f8:11:d8:80:97:e2:e6:10:51:a7:2a:f0:9f:bc:b7:22:
a6:c9:25:70:3a:5b:fc:47:93:87:fb:ed:0d:71:ca:5b:e2:2f:
24:d7:77:cb:7e:53:69:62:d9:00:82:22:76:a8:1d:b4:13:12:
01:b6:7d:03:b2:68:ee:ac:e0:aa:cc:51:da:5a:93:e7:0d:91:
01:d0:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org