Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/oEYJPpM-_fssmRemQGEe9z4DYeU.roa
File: oEYJPpM-_fssmRemQGEe9z4DYeU.roa (raw, json)
Hash identifier: 28AEqd9ZVibGtVDHDkZXFjDHcUrdn7/prpBTm4jNgE4=
Subject key identifier: A0:46:09:3E:93:3E:FD:FB:2C:99:17:A6:40:61:1E:F7:3E:03:61:E5
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 01856F39275D95CC375F3B8FD484B695C940
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/oEYJPpM-_fssmRemQGEe9z4DYeU.roa
Signing time: Sun 01 Jan 2023 21:24:54 +0000
ROA not before: Sun 01 Jan 2023 21:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 134.176.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:27:5d:95:cc:37:5f:3b:8f:d4:84:b6:95:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Jan 1 21:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a046093e933efdfb2c9917a640611ef73e0361e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:d8:ba:0a:1c:93:7c:ff:ce:4c:09:69:9d:
73:3d:49:29:bb:e3:1f:ad:8d:71:96:42:00:49:90:
95:56:4d:c8:86:8f:b6:cd:c3:87:bc:b1:9d:fd:1e:
c9:e6:61:0e:df:ad:f9:81:45:6e:75:c5:ec:96:e2:
b5:ce:44:0e:59:67:b7:42:e7:8c:1f:f7:87:61:48:
81:0a:1b:f7:41:4b:43:80:c4:37:72:4b:cb:b0:58:
d2:85:73:0a:08:f4:db:f9:ef:88:4f:a9:f0:b7:bc:
9c:d8:8f:28:f0:ad:b6:84:fb:e9:13:5a:ae:56:ae:
ef:fb:0b:df:2e:a0:f9:de:c2:90:54:6c:fc:d7:63:
e3:7c:46:87:c7:0c:a2:05:0c:b8:ab:7c:f4:a6:71:
92:18:f6:b6:d9:ac:d5:70:9b:9d:a9:07:f9:d9:85:
0c:66:cd:72:0a:12:f6:17:ce:d1:ef:06:11:83:17:
17:57:7d:3a:32:98:53:98:a1:91:de:de:81:07:71:
1d:e0:a3:4f:02:90:10:ba:d3:05:f8:a8:3f:3b:e9:
3e:1d:65:10:70:19:c4:6d:48:8f:0b:1a:0e:38:0d:
d7:e3:90:71:26:36:3e:1b:3a:90:1e:76:84:0e:23:
6f:46:34:21:bb:5b:b5:50:39:15:71:b0:6e:25:3a:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:09:3E:93:3E:FD:FB:2C:99:17:A6:40:61:1E:F7:3E:03:61:E5
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/oEYJPpM-_fssmRemQGEe9z4DYeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:36:ed:0e:6c:9a:90:77:64:67:f4:d2:93:fd:3e:46:13:88:
60:f4:c2:d3:86:b5:52:48:59:03:b6:58:fe:77:d3:6a:94:e0:
21:49:c0:86:45:5e:ea:b8:c9:5e:08:b2:13:8a:c2:fc:bc:06:
9d:95:ee:9f:e5:6c:a4:ad:1e:dd:5b:c8:87:91:fc:3d:97:02:
39:e6:d0:54:20:47:6f:f1:c1:82:03:61:8b:67:78:09:49:1a:
4d:b6:4b:42:dc:b7:0a:78:df:83:3c:f1:b3:99:51:73:d3:b7:
d7:18:0b:b8:d7:8c:54:af:09:f8:f1:7a:6f:da:01:7d:6a:a9:
59:6b:57:d3:49:d3:b8:69:49:0e:eb:a1:e4:f7:78:1c:92:85:
05:b2:a9:27:9b:4c:3a:f4:0e:b3:d2:4b:16:5d:0d:46:6d:de:
bf:6a:1a:d6:8f:ae:e6:cb:ee:58:9c:2b:7f:42:7c:0a:7b:84:
0c:c7:87:4a:a5:78:7b:0b:cb:78:fe:3b:2f:85:d9:af:2c:e3:
b7:55:c9:27:bd:04:75:4b:1e:fa:df:e9:da:34:23:c6:2c:ed:
2f:4c:7a:d5:b9:e4:9d:22:4d:71:aa:a4:49:50:fc:1d:a5:4a:
4a:c4:8a:dc:99:91:6e:a7:f2:3d:d8:b2:b3:a3:74:9f:92:b3:
b4:28:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:02 2024 by rpki-client on console-fra.rpki-client.org