Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/OEHAVvqn3Zljj8yDKEwQc7zvX-U.roa
File: OEHAVvqn3Zljj8yDKEwQc7zvX-U.roa (raw, json)
Hash identifier: AtJTxJUZ5YUxRXSklXtNTtYuYh6Oq3xRZEGBIYcohmw=
Subject key identifier: 38:41:C0:56:FA:A7:DD:99:63:8F:CC:83:28:4C:10:73:BC:EF:5F:E5
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 018CCA29B4307EA6EC26A9960F87A9BB3410
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/OEHAVvqn3Zljj8yDKEwQc7zvX-U.roa
Signing time: Tue 02 Jan 2024 12:32:59 +0000
ROA not before: Tue 02 Jan 2024 12:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200497
IP address blocks: 194.9.18.0/23 maxlen: 24
194.4.144.0/22 maxlen: 24
194.9.8.0/23 maxlen: 24
2a0c:e440::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b4:30:7e:a6:ec:26:a9:96:0f:87:a9:bb:34:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Jan 2 12:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3841c056faa7dd99638fcc83284c1073bcef5fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:83:c5:c5:3b:6b:9e:b8:28:99:c4:6e:54:16:
dd:b2:21:ba:de:4e:43:28:e0:68:13:8b:12:3f:04:
48:cf:e4:66:d8:e8:ec:91:2d:de:86:b4:c0:62:79:
4e:f5:8e:7b:e7:ce:37:21:e6:77:23:d9:ba:e8:5d:
3f:94:88:cd:ef:c2:5e:b9:6a:27:62:8b:b1:f2:9e:
1a:be:10:23:68:62:ec:e4:fe:bc:af:3b:3e:e9:18:
95:c3:45:b3:2a:4b:67:cc:15:1d:84:f0:fb:68:55:
19:d2:e9:ee:92:cd:3a:3e:53:bd:e6:6b:11:b6:6f:
2a:5c:ef:7c:75:9c:5f:21:2f:18:86:41:97:e8:af:
07:89:99:68:32:dc:1e:14:b0:ff:a7:f3:1c:0c:6c:
57:12:77:44:e0:d9:06:d8:f0:2f:87:49:0b:cd:9e:
25:4b:80:ea:6e:01:85:72:b1:fc:57:c1:c5:f9:3d:
00:61:bd:0b:f6:a7:ad:58:74:24:b6:19:99:4d:01:
6c:61:36:3e:4e:8d:94:10:83:20:ea:46:ee:c8:bd:
5c:17:00:27:7d:17:46:32:80:17:10:c9:e4:be:73:
74:c1:1c:44:02:64:c7:3b:63:1f:47:50:16:48:40:
20:49:8d:11:eb:0f:36:d0:b0:c9:ce:8c:97:40:81:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:C0:56:FA:A7:DD:99:63:8F:CC:83:28:4C:10:73:BC:EF:5F:E5
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/OEHAVvqn3Zljj8yDKEwQc7zvX-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.144.0/22
194.9.8.0/23
194.9.18.0/23
IPv6:
2a0c:e440::/29
Signature Algorithm: sha256WithRSAEncryption
90:5a:24:c3:01:d9:e7:3a:b3:d8:5b:d3:fc:b7:05:5b:d6:51:
a5:8a:f3:84:14:92:b5:10:a8:53:5b:bc:bd:70:2e:ca:61:9c:
2c:4e:29:60:c0:80:62:4c:6e:4e:4a:69:d3:8d:b5:26:90:0c:
11:56:b1:a3:1f:30:f4:21:06:2b:c0:09:cc:90:ab:80:2c:2d:
3b:0c:ff:e6:96:38:8d:bf:de:d8:9d:1b:69:ec:e2:55:3f:da:
d7:a6:ab:d1:1b:d0:e1:c7:e1:b7:41:50:9a:a9:4c:ed:a6:6f:
14:ab:1b:3c:86:95:7c:b0:d1:5b:13:6a:16:1c:c0:7d:04:81:
d4:f0:ca:73:8b:0c:f3:2c:1d:a9:c1:9f:5f:22:89:df:21:96:
a7:9a:f4:f1:98:43:9a:84:2f:cd:0c:c1:06:30:db:fe:45:14:
aa:e3:ba:b0:cc:ef:64:66:fd:6a:77:1e:25:c8:dc:36:69:1e:
70:65:a5:be:87:cf:da:fd:98:44:4d:3a:e6:8f:46:1f:af:49:
93:21:33:12:75:fe:e3:65:f9:73:3f:57:36:cc:f8:a3:65:ac:
b1:bc:ed:b6:ca:41:ec:9d:49:46:50:ae:f5:f4:8c:6c:0d:7b:
21:da:fa:89:4a:b6:94:c9:b7:4c:60:9d:ea:69:06:36:1c:b2:
38:75:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:23 2024 by rpki-client on console-fra.rpki-client.org