Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/oCXwRcmNfqCSCokahOn9IwB9p2Y.roa
File: oCXwRcmNfqCSCokahOn9IwB9p2Y.roa (raw, json)
Hash identifier: N7PxbIr2z7dp4leGqO48vTvDWinY4Gud3jRnPgnLQn8=
Subject key identifier: A0:25:F0:45:C9:8D:7E:A0:92:0A:89:1A:84:E9:FD:23:00:7D:A7:66
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 01858B331FEF8FA0B950E5FD4E938BD670B0
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/oCXwRcmNfqCSCokahOn9IwB9p2Y.roa
Signing time: Sat 07 Jan 2023 07:47:41 +0000
ROA not before: Sat 07 Jan 2023 07:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 92.118.16.0/24 maxlen: 24
92.118.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 23:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:33:1f:ef:8f:a0:b9:50:e5:fd:4e:93:8b:d6:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jan 7 07:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a025f045c98d7ea0920a891a84e9fd23007da766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:bb:af:cf:16:03:17:83:76:62:b1:67:1c:
93:31:85:7d:ce:58:dc:51:ae:a1:64:6f:c6:d5:80:
a2:86:76:08:62:94:5a:a3:ca:8c:ef:5c:0b:2f:4c:
6d:bf:38:2f:61:c3:d6:ba:4b:9c:9a:de:80:5b:86:
38:83:23:c2:03:2b:dc:b4:33:6b:7e:cd:96:e7:78:
94:c1:7b:ca:2d:a5:12:1e:1f:a3:b4:15:11:1c:6b:
c4:d0:31:0e:ae:34:c3:a6:ce:29:7b:a6:92:1e:c8:
2f:5f:77:fc:80:9c:99:a2:44:9a:53:ec:56:97:a4:
79:15:99:67:a5:0c:9f:f0:4b:6f:f6:9d:68:75:7b:
da:37:24:18:ef:77:8e:7e:3f:a2:1e:09:84:60:38:
7e:57:74:58:5a:b3:27:40:c5:0c:cf:b4:98:3d:e6:
cf:02:db:e5:76:fd:a4:6d:a4:22:8c:2d:45:bb:24:
2e:4f:d3:63:33:f9:9b:fe:ec:cd:7c:b5:95:3e:e5:
66:8b:e9:e5:a3:ff:c5:4e:32:f5:ec:a3:da:27:bc:
28:fb:0c:d3:b5:e4:42:0f:45:db:d2:3c:67:30:4e:
96:ad:b6:ab:0e:58:a7:7d:e6:81:97:2c:9d:b6:19:
b8:55:2b:37:5d:4e:78:ef:03:52:c7:83:66:d1:da:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:25:F0:45:C9:8D:7E:A0:92:0A:89:1A:84:E9:FD:23:00:7D:A7:66
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/oCXwRcmNfqCSCokahOn9IwB9p2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.16.0/24
92.118.19.0/24
Signature Algorithm: sha256WithRSAEncryption
64:57:10:c2:99:a9:9f:35:7c:1b:17:3d:29:5b:e7:d8:84:3b:
af:a1:8a:96:39:50:89:1a:9e:01:ae:8b:3a:8d:84:34:ea:02:
00:ff:28:f2:30:e8:3f:92:3a:db:08:1d:7f:54:36:a5:33:95:
41:31:13:e5:2d:c7:cc:08:1c:3e:d1:87:66:2a:fd:34:dd:84:
50:9f:3c:69:46:17:f2:38:e9:7d:69:d5:7f:fa:1e:67:61:9a:
12:e7:5d:14:39:9c:02:ef:f4:f4:f1:ef:2f:5a:63:d1:c8:11:
05:ab:b2:b1:26:48:8b:7c:df:de:2d:96:ee:72:88:ca:0e:43:
de:d3:af:b0:ad:1b:01:d7:ee:ff:b0:38:83:e2:5e:6a:11:ef:
b6:13:ed:e4:b0:9c:e4:c3:12:28:73:f0:68:9a:51:3a:e2:78:
9a:39:63:16:63:3f:5c:eb:d1:9e:0b:90:6b:43:7e:0a:3d:41:
a9:96:41:79:d7:6b:48:4c:c7:7b:7c:9b:97:61:71:20:2a:f5:
c8:cb:ab:56:9d:f0:6a:cc:50:9d:86:db:a7:5f:ec:3d:0b:cb:
84:a6:9a:8a:67:d4:8b:c9:1c:51:20:90:3b:8b:a5:28:ec:b1:
fe:01:67:62:09:13:a3:e8:94:4c:f5:dd:8d:7b:78:db:b5:12:
91:b6:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:20 2024 by rpki-client on console-ams.rpki-client.org