Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa
File: 7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa (raw, json)
Hash identifier: Xsk/XHY3IZgYEW+qvXJRv3oCqbBJ0Ddi9kZ3cb8n5Sc=
Subject key identifier: EC:EB:D5:6D:8D:7A:FC:73:FF:02:C3:95:47:A2:A3:AB:17:42:F1:3C
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 018EF0113FDA4C80C46DF5D7E7872054075D
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa
Signing time: Thu 18 Apr 2024 07:17:26 +0000
ROA not before: Thu 18 Apr 2024 07:17:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.93.64.0/22 maxlen: 22
2001:678:890::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 May 2024 08:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:11:3f:da:4c:80:c4:6d:f5:d7:e7:87:20:54:07:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Apr 18 07:17:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecebd56d8d7afc73ff02c39547a2a3ab1742f13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:f1:9f:e0:1c:21:8d:bf:78:97:6a:22:c6:
2a:53:aa:d7:57:54:a7:5f:f4:3e:63:ac:12:fb:eb:
fa:05:df:da:69:f5:12:9a:9a:28:4e:76:9f:76:52:
d3:87:f0:4f:4f:37:71:7d:33:87:72:bb:c4:c7:d0:
4b:78:f9:65:66:bb:c7:27:a3:da:0b:fb:81:90:f3:
ad:fa:15:8c:4b:e6:b1:c9:34:7a:57:95:6f:86:7c:
08:ce:04:f3:c0:ba:10:0f:b8:c2:49:80:d0:90:86:
86:0c:26:36:9d:db:e0:fb:cd:43:5f:44:83:66:40:
ed:e9:88:05:50:8f:5b:d7:42:89:c6:c7:a8:e2:5f:
60:19:b2:20:a7:95:72:be:13:80:75:13:d7:f0:f9:
32:1b:46:b6:4e:b9:57:3a:0c:cd:24:68:35:d6:53:
1e:98:c5:79:d0:13:6e:58:35:52:0f:e9:bb:8b:55:
23:c6:32:be:40:c6:6e:96:86:36:63:65:31:0e:db:
2d:b5:77:33:5e:92:7c:c6:1b:4b:fb:73:bf:58:71:
d7:d7:c9:f1:86:b3:38:13:6b:35:5b:4b:f9:fc:ac:
a2:13:bc:a2:5e:a8:96:5e:42:cf:50:39:c7:70:2f:
07:12:49:a4:17:34:31:2d:71:db:f0:4b:db:17:d0:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:D5:6D:8D:7A:FC:73:FF:02:C3:95:47:A2:A3:AB:17:42:F1:3C
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
IPv6:
2001:678:890::/48
Signature Algorithm: sha256WithRSAEncryption
0e:a4:44:cf:0d:c1:9f:84:6d:4a:99:6a:b2:fd:d6:af:b1:92:
9c:bf:47:db:dc:c0:dc:f5:01:b2:1b:05:28:8a:6e:65:18:90:
50:6b:63:d8:46:e6:a7:f0:f4:0a:6d:09:4e:1a:10:05:35:bb:
5a:44:ce:d3:18:bd:72:ce:c9:fe:55:26:38:cb:f3:ec:4a:bd:
db:b0:d0:ad:12:2e:ed:24:8b:23:4b:b2:27:60:e9:f8:17:46:
ef:cb:fd:16:3c:6f:d1:61:0f:09:e1:69:c4:0b:a9:4a:e8:b0:
15:69:28:a1:df:30:62:43:f3:1e:77:53:a2:50:a4:57:e4:c3:
60:20:74:45:6d:5e:82:85:3f:e3:95:1f:4b:39:ae:b1:d4:cb:
7d:4f:0c:ad:a5:d4:3e:bc:04:fe:16:f3:b1:92:e0:cf:a6:30:
53:01:22:f0:f2:38:74:02:df:f7:3a:1b:2c:ff:34:66:16:db:
ad:88:ab:7f:a8:9f:4d:94:57:fa:f3:f0:65:0f:91:42:df:cb:
cd:ca:71:d6:4a:47:5d:25:f8:47:3c:fa:23:1b:02:ff:75:1c:
cc:9f:49:ce:e3:f7:b3:e9:e7:83:d7:70:64:be:89:82:27:0e:
80:2d:8e:3d:86:8b:af:61:b3:83:7e:28:7d:9f:e9:2c:2f:ef:
43:ec:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:00 2024 by rpki-client on console-ams.rpki-client.org