Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Ot9JfUz5gwUxGBxq9EUFjAeRfqA.roa
File: Ot9JfUz5gwUxGBxq9EUFjAeRfqA.roa (raw, json)
Hash identifier: UXQlXEH9Zm4i8JPbNHnBKzxWOON3SEyF45RmwDsAk6c=
Subject key identifier: 3A:DF:49:7D:4C:F9:83:05:31:18:1C:6A:F4:45:05:8C:07:91:7E:A0
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018A8EDECFC4A1C8F431DE8FB91770E7A080
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Ot9JfUz5gwUxGBxq9EUFjAeRfqA.roa
Signing time: Wed 13 Sep 2023 14:08:01 +0000
ROA not before: Wed 13 Sep 2023 14:08:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42403
IP address blocks: 195.209.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:de:cf:c4:a1:c8:f4:31:de:8f:b9:17:70:e7:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Sep 13 14:08:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3adf497d4cf9830531181c6af445058c07917ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:5b:d4:ab:91:4e:24:c2:89:a0:65:2a:00:
1e:59:08:5a:34:f4:59:08:9e:e4:90:ff:98:c0:fb:
ab:a6:28:46:fa:54:b7:bc:ca:1e:44:2a:c7:81:db:
63:dd:7f:0c:8b:a5:70:6e:cf:b5:4e:dc:5f:08:8e:
bd:0c:6a:b2:8d:b5:2d:8f:46:4a:65:3b:9a:bb:dc:
d3:f3:e9:ec:09:b6:93:a5:ee:d5:c5:6f:f7:06:4b:
31:58:f2:5c:fe:ba:e2:eb:59:36:26:96:16:48:dd:
33:6a:ac:a1:6b:0d:a3:c2:b1:34:08:9b:42:ab:66:
40:d2:d5:27:d3:b1:ad:91:61:f8:b3:59:f4:9b:dc:
2a:b0:3a:cc:45:ab:21:6b:82:55:1f:34:eb:0c:1e:
d9:f3:13:cd:2c:ab:2c:5e:c8:35:60:a7:c3:3d:78:
20:18:bf:f7:3a:de:88:27:86:ec:dc:5d:03:f0:3d:
8e:fe:60:19:99:7f:59:6d:b1:22:91:e3:9d:61:5a:
49:87:5f:19:35:98:33:d3:fc:ce:b7:ae:11:01:41:
2c:4d:3f:7e:d8:be:a6:e7:3f:17:6c:a2:38:90:7d:
eb:08:18:fd:07:d4:3d:17:9c:53:5d:fe:19:49:14:
bc:94:1d:f1:cb:53:06:0e:83:24:e6:2e:0d:55:8b:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:49:7D:4C:F9:83:05:31:18:1C:6A:F4:45:05:8C:07:91:7E:A0
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Ot9JfUz5gwUxGBxq9EUFjAeRfqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.209.16.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4a:90:61:c3:73:72:a4:05:e8:1a:78:f4:2e:39:be:80:2b:
a6:13:e5:f1:ea:10:af:0c:f0:a1:e6:dc:99:86:29:64:54:a2:
68:2c:7f:61:66:44:8f:35:cd:b3:f6:2b:6a:03:73:84:69:92:
fe:f3:17:b3:ec:a5:ad:1a:6d:46:8f:f4:c2:8a:af:6b:14:97:
74:4a:86:40:44:be:dc:0d:6c:70:a5:8b:c6:c3:cc:99:6b:02:
5e:61:6a:31:dc:33:af:22:71:69:ee:ae:f6:83:55:7b:6f:72:
3b:00:ff:91:d4:f2:b4:a2:6a:ce:b3:55:ab:31:aa:bb:47:d8:
20:d8:7d:02:a0:b4:c2:72:22:71:c4:99:12:6b:92:0b:a3:b6:
c3:f4:37:d0:d3:b7:b4:2f:da:f6:e8:ef:a2:71:bd:c2:43:2f:
8d:99:44:be:db:54:4b:b8:b5:38:60:6a:1d:51:ef:69:84:5a:
f1:4e:b6:1c:1f:e8:f5:35:5b:e8:ce:b0:65:d5:d9:a1:3c:94:
b2:40:21:a0:65:09:e4:8e:fb:3c:14:7e:0a:cc:b8:8c:81:88:
72:c1:ac:1d:a0:cf:5e:f2:12:28:f3:62:69:5f:ab:24:ef:c8:
9a:70:35:40:a1:1e:fa:2f:51:d4:58:f4:c8:9f:22:d5:76:08:
65:57:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:05 2024 by rpki-client on console-ams.rpki-client.org