Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/OSLPfh4oBU9qJcoAJcxnfOV7X9o.roa
File: OSLPfh4oBU9qJcoAJcxnfOV7X9o.roa (raw, json)
Hash identifier: sfF9Igl4TgnUYemppW33SF+jqxlu51SRcvwm61jLBXA=
Subject key identifier: 39:22:CF:7E:1E:28:05:4F:6A:25:CA:00:25:CC:67:7C:E5:7B:5F:DA
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 01856DDD597A7EAB9D81FD6F758A2EFB589D
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/OSLPfh4oBU9qJcoAJcxnfOV7X9o.roa
Signing time: Sun 01 Jan 2023 15:05:00 +0000
ROA not before: Sun 01 Jan 2023 15:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12850
IP address blocks: 91.225.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:59:7a:7e:ab:9d:81:fd:6f:75:8a:2e:fb:58:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Jan 1 15:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3922cf7e1e28054f6a25ca0025cc677ce57b5fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:a7:92:ba:44:52:9e:12:2f:1a:fa:e5:89:
f3:61:38:55:2c:62:91:79:e1:65:09:c1:c8:ba:71:
5b:41:c3:51:93:34:23:44:0a:63:5f:e2:20:c4:4d:
f2:93:90:ba:ed:30:b4:27:e3:0f:06:81:c2:74:92:
33:fd:14:da:7d:36:f6:58:17:78:8a:21:71:76:2b:
51:f0:0c:18:2c:51:76:dd:a4:dc:75:42:36:f2:bc:
ee:ce:75:a8:7a:0d:33:c7:03:ee:a5:d1:7e:19:84:
8c:64:0f:aa:4f:27:6d:21:3e:ef:b9:1b:89:57:81:
eb:2f:78:35:b2:01:64:8c:7b:f6:6e:15:a4:ef:aa:
b8:ef:49:99:ba:d3:e2:1a:9c:37:9f:fc:4b:51:41:
82:86:05:41:05:b7:92:0e:9a:54:72:9f:e5:44:77:
db:01:fe:31:38:cc:c9:53:f9:06:32:cd:7e:6b:65:
16:48:11:ab:20:01:a4:fd:6e:98:3b:e5:78:f3:b6:
86:c5:a9:df:25:04:02:c6:e0:59:c9:ef:87:54:b4:
79:30:d9:b3:6a:0b:49:31:29:a6:f7:01:bc:91:c9:
fe:c8:eb:58:88:72:1b:d7:7d:67:b5:3c:43:f9:f0:
d7:31:f5:3e:e9:0d:5f:ce:00:51:07:2e:f8:4f:9a:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:CF:7E:1E:28:05:4F:6A:25:CA:00:25:CC:67:7C:E5:7B:5F:DA
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/OSLPfh4oBU9qJcoAJcxnfOV7X9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d3:45:96:ff:d2:15:7a:21:7b:a5:8d:ac:dd:c4:44:f8:a5:
95:b7:07:bd:70:fd:7f:04:60:31:54:e1:fd:17:d2:4e:b3:2e:
2d:b4:a9:c2:8b:3a:69:44:84:f1:fe:4d:b6:34:2b:9a:28:18:
40:8b:1f:1c:79:0b:25:8b:b3:3f:1d:be:6d:d4:a5:09:e2:b9:
41:dc:9f:95:6a:23:f3:f8:41:1b:1c:23:35:7c:07:99:6c:0e:
83:57:ae:40:5b:f5:bb:05:e7:2a:5c:ca:96:ca:83:ee:7c:ac:
7e:93:dc:7c:f7:4e:24:bc:cb:d9:ab:c9:46:85:82:6b:41:2d:
1b:e2:a9:f4:19:14:53:11:49:56:b2:a3:0d:f6:e8:67:52:77:
ab:07:f8:f0:70:e1:35:69:19:65:4b:1b:06:7b:bd:b5:38:a1:
2d:6a:90:92:71:2d:58:e7:d4:df:1a:1f:9f:a9:c3:dc:d5:1b:
7b:6e:c7:a0:4d:b4:87:4b:41:89:c1:28:be:f1:79:e6:ff:f8:
fb:0d:fd:a9:42:9b:68:3b:32:8b:e0:a3:37:ba:e6:b7:18:a5:
8c:79:5e:85:37:8c:8a:da:85:6d:90:3d:61:27:9a:42:5d:2e:
d8:21:77:c2:ee:c7:0c:03:ce:81:6a:83:4a:02:47:72:9b:6f:
78:9d:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:44 2024 by rpki-client on console-ams.rpki-client.org