Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/oGAQuXizYaAcv70W2_8P75WZfXY.roa
File: oGAQuXizYaAcv70W2_8P75WZfXY.roa (raw, json)
Hash identifier: RuXb1fRF+0bhSd0Xvpl5qs16b34MmAu4bju61ZEn7UI=
Subject key identifier: A0:60:10:B9:78:B3:61:A0:1C:BF:BD:16:DB:FF:0F:EF:95:99:7D:76
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0189820A1A2347A51C35E8E50E4F0BEEC09C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/oGAQuXizYaAcv70W2_8P75WZfXY.roa
Signing time: Sun 23 Jul 2023 09:17:27 +0000
ROA not before: Sun 23 Jul 2023 09:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 83.147.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 26 Jul 2023 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:0a:1a:23:47:a5:1c:35:e8:e5:0e:4f:0b:ee:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 23 09:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a06010b978b361a01cbfbd16dbff0fef95997d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:80:0e:29:6a:34:72:da:ac:6b:d4:8d:cf:
66:b8:4b:99:d3:60:34:ab:b6:cf:0d:d9:c2:4b:08:
26:a3:ef:8b:91:46:47:4f:fc:e9:c8:53:5e:64:e1:
6d:00:69:f3:23:aa:ef:5c:59:41:eb:d0:f1:83:11:
94:4d:96:c1:1c:44:bf:67:92:c3:37:78:3d:6f:3f:
08:cd:a2:f4:9c:79:14:7c:f6:ee:49:59:c5:21:1b:
70:ab:33:e0:d6:1d:ec:78:0a:f1:75:f0:45:69:b8:
b5:51:76:b9:5b:90:6d:dc:4b:7b:96:3c:d3:14:a6:
9a:0a:51:94:ef:74:c4:8f:a4:69:7b:33:d7:2f:e3:
9e:e5:e9:28:65:7d:7b:0d:4e:11:4c:4e:92:92:d7:
8c:c9:c9:1e:19:cf:4b:9e:4b:4d:9d:4f:08:ba:ea:
44:99:3d:c2:7c:02:ff:e6:b2:76:68:2e:93:d5:ae:
47:f5:22:c4:45:cd:a3:6e:df:7e:1b:a7:4f:00:68:
2c:ed:d5:9c:5e:f9:a5:30:db:e9:06:57:8a:8b:c7:
a0:68:93:8f:01:04:be:dc:e7:f5:8a:9f:6b:2a:6d:
b9:33:d6:18:19:a2:e5:a0:19:da:3e:1e:b4:f9:a0:
45:40:6d:54:f8:57:fd:92:c3:bc:86:42:23:dc:50:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:10:B9:78:B3:61:A0:1C:BF:BD:16:DB:FF:0F:EF:95:99:7D:76
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/oGAQuXizYaAcv70W2_8P75WZfXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:28:39:7e:42:d4:19:ff:00:b4:fe:79:e8:c7:12:ea:c3:b0:
37:9e:79:b7:30:c3:ce:74:80:b9:f3:32:d1:27:59:9a:34:d8:
9c:a4:53:c6:3d:14:ea:a7:42:c8:84:0a:75:12:85:51:37:d2:
5d:1f:f7:59:c9:90:07:3a:bc:29:17:be:01:ea:68:2f:50:46:
63:bb:31:8d:e0:57:8c:70:22:ad:7e:b4:a9:a6:81:0c:62:4b:
a9:db:d2:b1:3d:a0:fb:8c:ca:c3:fc:dd:e8:bd:44:ed:77:93:
1a:01:0e:b6:bc:e8:61:64:2d:4a:08:5d:ef:7a:3e:17:f6:cb:
32:81:17:92:19:b3:6f:20:38:26:f2:bd:6d:b2:19:9c:85:4c:
f3:ce:0f:61:73:da:55:56:e0:b8:36:0a:d3:af:b6:f5:c3:37:
84:d6:e4:a6:48:fe:e3:44:c1:f3:26:0e:cb:75:d1:d0:e7:2f:
94:72:14:69:fe:32:97:86:3b:bc:f7:b6:37:58:1f:64:e8:cc:
fc:78:05:e6:e6:74:01:ed:e4:df:92:68:a8:99:bf:c5:8a:9c:
7d:f5:10:6d:db:a7:cb:65:3f:8e:97:e8:66:ad:1d:ba:6c:4a:
b0:cd:e3:16:73:a4:a6:d8:21:8a:b9:f0:ef:66:56:a3:13:b1:
79:9a:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org