Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/OVmf--TjKCIAU_ILRL-NyoKUYAM.roa
File: OVmf--TjKCIAU_ILRL-NyoKUYAM.roa (raw, json)
Hash identifier: qQLTcwHi3Z796J8bEsJLTiH+2nvh0CtRn26+2plQxQ4=
Subject key identifier: 39:59:9F:FB:E4:E3:28:22:00:53:F2:0B:44:BF:8D:CA:82:94:60:03
Certificate issuer: /CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Certificate serial: 01856F39150F62513242A815B724B3745BD0
Authority key identifier: A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/OVmf--TjKCIAU_ILRL-NyoKUYAM.roa
Signing time: Sun 01 Jan 2023 21:24:49 +0000
ROA not before: Sun 01 Jan 2023 21:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 194.0.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:15:0f:62:51:32:42:a8:15:b7:24:b3:74:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Validity
Not Before: Jan 1 21:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39599ffbe4e328220053f20b44bf8dca82946003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:08:3c:00:81:16:1c:21:09:cb:34:da:2a:
2a:e0:f3:1e:40:60:9c:f9:e5:d7:d4:6d:83:14:80:
45:83:85:58:4e:1b:54:1f:80:bb:3c:43:04:ba:b0:
61:f3:8d:8d:dd:f1:59:44:00:70:38:bf:70:65:da:
fb:30:3b:42:bd:da:3d:d9:fb:47:69:f1:87:c7:1d:
4c:61:48:96:95:ca:df:01:bb:eb:9f:03:06:fb:4e:
cd:31:3a:24:e1:6d:11:56:33:a2:bb:58:f7:15:e5:
47:5a:ff:af:97:9b:6e:84:b6:96:d5:9b:22:55:5b:
b0:8d:e9:5e:cf:99:09:9e:78:47:3c:57:c3:bb:19:
d1:60:31:df:cd:91:2c:04:de:24:b1:ac:e4:da:a6:
64:f8:ae:ca:a0:85:64:38:76:a9:97:cf:46:6e:e2:
20:74:ab:06:4f:47:69:22:1d:28:a9:3f:57:c8:14:
7d:ab:6a:82:22:7c:7a:88:c0:ad:88:9b:56:0c:85:
d8:e9:5e:8b:97:ac:f5:b0:9e:7b:2b:a6:ad:da:73:
c2:cf:a1:64:2d:b5:76:ba:15:10:61:9c:8b:c8:97:
b8:c0:6d:63:56:41:07:29:ea:08:d4:77:4b:c9:5e:
f2:3b:c0:b4:f4:c8:d8:c2:4e:93:ac:9f:14:3e:5b:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:59:9F:FB:E4:E3:28:22:00:53:F2:0B:44:BF:8D:CA:82:94:60:03
X509v3 Authority Key Identifier:
keyid:A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/OVmf--TjKCIAU_ILRL-NyoKUYAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:23:85:83:1c:40:76:72:ab:c1:9d:fc:80:23:bd:a5:3e:5a:
e1:b3:ab:45:3d:19:fb:01:66:1b:bc:09:86:f2:ab:20:85:e7:
98:38:e5:de:64:ee:c1:69:83:f7:bf:b4:1c:10:66:d3:f3:b8:
a7:88:4c:2e:7f:26:36:cf:7a:c6:5f:7a:47:45:bd:68:39:d8:
a8:6f:06:60:83:b5:21:7e:53:cb:ad:11:62:f4:c4:bc:f6:26:
49:da:36:fd:9b:99:7b:e6:1e:17:44:34:cb:1a:fc:8a:33:53:
4e:81:d9:70:8d:7d:f1:13:9e:cb:87:1c:fd:e2:53:0a:75:4a:
0d:a2:3a:93:7a:58:6a:62:f1:02:9d:d5:74:29:9a:47:e7:13:
c3:e6:94:e7:b7:03:24:22:05:46:bd:03:01:47:41:db:fe:82:
a5:27:fe:e3:9e:96:06:b3:81:b0:f9:e6:df:88:4c:d3:cc:08:
10:de:c6:a1:ff:80:01:ae:1a:4e:b4:2b:11:7e:17:56:4c:3f:
ce:39:aa:65:24:55:8a:26:15:de:60:68:40:05:ce:94:cb:f0:
8e:f8:25:16:a3:6d:fa:50:ff:fc:df:55:06:a5:45:43:02:b6:
ec:a4:06:57:f9:26:83:de:c8:45:f2:d6:61:f3:39:b4:df:f1:
49:77:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org