Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/oaMjW5ErAify5Eu-gytgj_xpe30.roa
File: oaMjW5ErAify5Eu-gytgj_xpe30.roa (raw, json)
Hash identifier: 0WPnavTJuUM1h8csccyhK0dvPErxsO49vizzv2ILttM=
Subject key identifier: A1:A3:23:5B:91:2B:02:27:F2:E4:4B:BE:83:2B:60:8F:FC:69:7B:7D
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 018F013A9973702D5DD6F313C3299FD9B65E
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/oaMjW5ErAify5Eu-gytgj_xpe30.roa
Signing time: Sun 21 Apr 2024 15:16:08 +0000
ROA not before: Sun 21 Apr 2024 15:16:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16322
IP address blocks: 46.167.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 07 May 2024 07:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:01:3a:99:73:70:2d:5d:d6:f3:13:c3:29:9f:d9:b6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Apr 21 15:16:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a3235b912b0227f2e44bbe832b608ffc697b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:5a:26:42:64:89:df:00:ad:37:c0:45:df:
20:a6:f5:ad:b1:64:45:24:b9:dc:b6:e2:0e:a8:38:
0b:ab:a6:21:2a:81:48:27:c3:fd:f4:0c:54:c9:c6:
59:57:32:9f:72:7e:41:32:0f:ac:55:04:be:90:77:
4f:3c:b9:e4:ff:ed:aa:cf:a6:c2:0f:46:06:d2:30:
fa:42:cd:8c:2d:34:bd:9b:a0:c5:2e:b9:2b:e0:5f:
b1:34:f8:b9:a9:8f:4d:12:a9:7c:95:96:98:d0:02:
56:03:33:f0:4f:3e:11:9a:12:05:df:41:57:20:bb:
3e:3b:7a:9f:25:10:a6:7f:4c:6d:17:fb:8d:12:a2:
74:d8:ee:3c:08:bb:fc:d3:c9:d2:69:63:3b:92:e9:
be:4c:22:33:82:a5:46:6b:48:ac:91:de:c6:93:22:
8b:85:aa:7f:4e:c1:f0:bf:88:c4:83:9f:c7:6f:91:
f8:e4:b5:fa:85:79:fa:c7:1a:b7:26:54:dd:64:35:
a0:c1:0b:d7:77:6b:ec:d3:45:f1:7c:99:90:92:19:
33:d9:a4:3d:c4:2c:4c:16:22:31:5d:5d:23:a4:7b:
c4:f6:ca:ce:f9:ff:a6:70:c5:98:ce:84:e2:20:98:
cd:7d:af:c4:ee:0b:e7:e0:bf:12:a0:d8:28:ca:10:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:23:5B:91:2B:02:27:F2:E4:4B:BE:83:2B:60:8F:FC:69:7B:7D
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/oaMjW5ErAify5Eu-gytgj_xpe30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:5f:35:a9:1e:68:47:38:b3:37:23:cf:17:ca:be:7c:85:72:
65:e8:29:9f:42:a6:1b:1e:42:ca:1a:f2:02:1c:11:dd:85:2e:
90:ed:d3:cb:66:e4:5b:23:6b:6c:4c:78:56:99:18:86:5f:3c:
95:f8:0d:f0:21:9d:11:7f:d8:d2:67:2a:a1:16:40:b0:69:ac:
37:b1:3d:11:54:2b:00:12:bf:b6:d5:54:82:05:f3:73:9c:fd:
1f:0e:3c:e5:ac:78:6b:ea:08:0d:00:10:e2:6a:ed:06:bd:e5:
33:76:93:47:9f:ff:05:fd:07:02:7f:75:98:ce:fa:c6:f4:39:
ac:9d:4f:a6:f2:1d:51:1e:10:f3:d8:80:94:b0:34:e5:00:ab:
0f:84:68:12:b7:cf:38:ab:46:8c:26:0f:9b:ab:56:fb:fd:f3:
f9:35:5d:6d:d4:bb:a7:4c:e7:61:a7:fd:0c:42:07:f8:9a:e4:
2b:33:c9:19:58:91:0f:11:df:72:26:ac:b4:25:90:f7:17:51:
e3:08:b8:d8:e4:ba:05:b6:b6:8d:11:50:1e:c7:29:91:42:d2:
3d:5a:59:2e:25:85:9b:44:dc:b0:91:43:ab:15:bc:b7:c1:2e:
ef:9c:f2:19:7a:3f:9b:99:aa:0b:39:1f:81:ca:f6:83:d7:4d:
65:c1:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:42:58 2024 by rpki-client on console-fra.rpki-client.org