Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/Oxam8YLSz2mSnYthYe_cEpffX_w.roa
File: Oxam8YLSz2mSnYthYe_cEpffX_w.roa (raw, json)
Hash identifier: c6Tw/c1vi3BdjJfdF89Hcut+2lbnlN/+YmOBMv/cmhI=
Subject key identifier: 3B:16:A6:F1:82:D2:CF:69:92:9D:8B:61:61:EF:DC:12:97:DF:5F:FC
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 01864FAB48DB3F43E717DD58D07BAA1140D6
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/Oxam8YLSz2mSnYthYe_cEpffX_w.roa
Signing time: Tue 14 Feb 2023 11:24:30 +0000
ROA not before: Tue 14 Feb 2023 11:24:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25111
IP address blocks: 193.0.57.0/24 maxlen: 24
193.0.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:ab:48:db:3f:43:e7:17:dd:58:d0:7b:aa:11:40:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Feb 14 11:24:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b16a6f182d2cf69929d8b6161efdc1297df5ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:ae:6c:a6:68:6a:73:27:0f:20:fd:f8:65:
3f:31:35:00:14:b4:67:b2:e0:81:05:bc:83:44:18:
a4:0e:f7:02:b0:3d:76:c0:7a:c8:86:4f:d4:ad:68:
73:9f:8c:bb:1b:31:3b:08:94:ec:93:0b:7a:25:15:
6e:d1:81:60:e2:58:69:07:b8:e8:97:9d:b6:a0:4f:
c3:ca:ea:8d:e7:f5:71:31:00:9e:c0:8e:ac:f5:43:
44:bd:7c:6e:a6:3f:66:09:8f:03:ab:3a:ce:fd:71:
07:de:ac:6e:ed:51:ad:22:1d:97:9a:58:70:bf:ab:
60:c4:15:08:68:49:d1:b0:2f:8b:12:36:a5:de:e4:
a6:46:48:34:f1:7e:53:24:46:0c:f9:44:af:3b:0f:
dd:6b:17:48:d0:34:2b:bf:da:95:61:9e:ce:1c:a8:
d0:db:a9:1d:41:1d:6c:39:55:25:c4:f0:87:a3:0e:
22:6d:6e:46:11:02:2f:93:71:e9:a6:cd:e6:7a:dc:
73:bf:de:bc:84:da:1a:64:80:72:b6:6c:3e:cb:c8:
cb:32:f9:dd:6d:33:3b:19:7e:cf:da:2f:5c:ae:eb:
38:2d:20:8c:5a:38:47:50:0b:49:5e:da:63:6d:97:
15:79:18:99:9b:bb:d3:9b:32:61:be:c5:61:25:79:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:A6:F1:82:D2:CF:69:92:9D:8B:61:61:EF:DC:12:97:DF:5F:FC
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/Oxam8YLSz2mSnYthYe_cEpffX_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.56.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:71:98:e3:96:14:b5:55:d2:c9:f2:45:96:06:bd:72:32:57:
60:a9:7c:93:39:5e:1c:78:15:78:81:2f:a9:fb:cf:62:b4:dd:
31:0e:4f:fe:c8:09:42:60:3b:37:7f:62:7e:9e:6d:72:d5:47:
0a:97:b8:8a:d1:48:89:77:b0:c4:41:cb:18:25:08:9c:ee:03:
34:8b:42:48:e6:db:1d:ff:a6:1b:64:0c:fa:28:e8:66:de:21:
aa:c1:b1:19:db:89:8e:4e:7a:f8:39:23:69:2e:00:3f:81:da:
34:f1:20:b7:e5:fd:86:42:cc:cd:01:94:fd:94:99:ff:68:76:
d6:37:1b:7b:6d:2d:a3:ac:6e:8b:07:aa:09:9a:77:e4:70:3d:
88:61:f7:34:0b:b6:fb:36:22:1c:ae:6d:15:21:35:9b:e1:91:
ce:2f:f3:66:09:e3:42:e1:68:f1:53:75:8f:97:57:41:a6:ac:
ba:02:3e:d3:6b:27:c1:b3:17:81:98:e2:c3:5c:77:ab:2a:19:
bf:73:86:eb:fc:3c:69:26:6c:1b:8b:21:bf:28:6d:6d:9a:5f:
07:66:f4:a6:9c:dc:03:bb:30:e9:bc:35:96:8d:84:45:fc:77:
29:a6:b0:a3:3f:23:42:bd:30:1c:e0:89:d5:bf:0b:fd:91:7d:
a3:75:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-fra.rpki-client.org