Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/OE5pzOK2kdzxLYjFIhD1ewqMSM8.roa
File: OE5pzOK2kdzxLYjFIhD1ewqMSM8.roa (raw, json)
Hash identifier: /UEbcN/tTIbS4BfgAlvJl+grJfpkDtNFuM55idCz/XI=
Subject key identifier: 38:4E:69:CC:E2:B6:91:DC:F1:2D:88:C5:22:10:F5:7B:0A:8C:48:CF
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0185728341FFC6BFA6F34B1B0E341D2957A0
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/OE5pzOK2kdzxLYjFIhD1ewqMSM8.roa
Signing time: Mon 02 Jan 2023 12:44:42 +0000
ROA not before: Mon 02 Jan 2023 12:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 157.84.32.0/23 maxlen: 23
157.84.40.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:41:ff:c6:bf:a6:f3:4b:1b:0e:34:1d:29:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jan 2 12:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=384e69cce2b691dcf12d88c52210f57b0a8c48cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:a2:b3:1c:0d:e2:83:52:ef:98:c9:3c:da:
74:b8:06:97:3e:77:1f:5a:b1:22:8d:1c:c9:8c:d5:
c0:a9:0d:d9:cf:53:da:11:6e:20:23:90:57:dc:35:
1d:b6:12:2e:0c:a4:39:fc:83:32:1b:dd:21:c3:33:
17:46:a2:66:a3:04:42:45:17:d0:b8:59:d1:ba:67:
24:40:b1:6c:7a:83:85:5d:fc:f8:8a:b2:4f:5d:69:
68:a7:1b:29:2f:63:7a:47:22:01:92:98:51:22:9e:
87:40:06:38:a2:cc:06:2c:07:d5:6a:7c:17:22:99:
5f:be:fc:38:81:3c:2e:27:7b:36:fd:73:55:01:4a:
57:ea:2a:84:ed:07:24:e4:f8:d6:fa:cb:f8:ca:c8:
26:e0:e5:9d:c8:7b:4e:84:a8:9c:60:0b:f6:4f:a4:
8a:0e:fc:8c:2e:d2:a4:ce:d7:c0:64:f0:4e:e1:89:
85:70:c1:50:04:0e:f7:e1:18:9b:70:05:a5:7c:3a:
ec:ae:b7:08:98:c6:c5:ac:3b:b7:8f:6e:12:cb:cc:
1c:8e:e4:f8:25:3d:d3:d1:64:f7:62:8e:61:31:d4:
60:ea:14:5d:d8:85:bb:ac:9b:8e:c4:1f:19:c9:d0:
a9:2c:3d:61:c3:89:7a:df:ad:2f:2c:8e:44:d9:bf:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:69:CC:E2:B6:91:DC:F1:2D:88:C5:22:10:F5:7B:0A:8C:48:CF
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/OE5pzOK2kdzxLYjFIhD1ewqMSM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
157.84.40.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:e6:e1:a6:ea:74:ab:f8:09:31:f4:f4:fc:77:e2:9a:b1:48:
54:88:ce:2b:b9:0d:3d:92:25:c9:75:be:0f:9d:85:bb:d5:23:
6c:46:34:74:c4:b2:f5:45:2b:9b:43:6e:b5:69:41:e9:ab:57:
19:a1:60:ac:3e:5c:85:7f:ef:a3:6b:f4:c1:e9:3b:bb:83:14:
ba:d9:c6:36:0e:be:2e:48:91:4c:9a:24:61:49:df:84:ca:c3:
77:9d:98:ef:67:51:4d:47:a3:82:37:bf:20:8c:ee:db:e5:7b:
d4:d3:8a:35:f2:56:fc:23:23:b3:c3:46:0c:24:99:54:e5:74:
a4:8a:0b:2c:45:d3:d6:ad:66:73:64:c2:71:0a:20:b7:ff:20:
2f:43:fb:87:93:1e:43:70:7a:1b:b2:08:b5:58:bc:b5:ff:fa:
b8:03:82:9e:c3:cc:fe:9c:f3:5b:cb:53:af:6a:e2:ab:fb:89:
65:c9:f6:65:00:7c:9a:27:fc:10:77:a7:12:c4:b3:c9:b5:93:
dd:ca:80:ab:4b:19:d1:44:93:2c:9a:a2:a9:cc:ea:b0:5b:4d:
fa:b4:2f:22:b6:06:da:9d:f8:50:51:90:17:0e:a0:6b:ca:d9:
99:64:13:0f:e4:4d:d1:0b:f6:1e:4f:f8:e7:d9:50:a8:41:da:
9f:5c:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:55 2024 by rpki-client on console-ams.rpki-client.org