Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/OV_KuX7e59gLFQicDx3jBTk5Xdw.roa
File: OV_KuX7e59gLFQicDx3jBTk5Xdw.roa (raw, json)
Hash identifier: c9vdFow8tqOfpc2U+FLk2+/yIEsgEIVC35YCkSYY6CQ=
Subject key identifier: 39:5F:CA:B9:7E:DE:E7:D8:0B:15:08:9C:0F:1D:E3:05:39:39:5D:DC
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0185F36A9B1BE4772580173F2D451A55A735
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/OV_KuX7e59gLFQicDx3jBTk5Xdw.roa
Signing time: Fri 27 Jan 2023 13:28:48 +0000
ROA not before: Fri 27 Jan 2023 13:28:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30879
IP address blocks: 195.34.200.0/22 maxlen: 24
83.97.8.0/21 maxlen: 24
2a11:d940::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:6a:9b:1b:e4:77:25:80:17:3f:2d:45:1a:55:a7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Jan 27 13:28:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395fcab97edee7d80b15089c0f1de30539395ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:da:eb:da:79:61:b1:3d:97:ba:51:f9:fe:
a4:7e:b0:3e:b6:80:7a:f6:4b:61:e1:0f:9a:13:a9:
e1:f2:1a:05:05:c5:10:0e:8e:1a:f5:22:9a:64:14:
7b:53:70:75:fd:c3:64:b1:b6:24:e6:3f:3c:d2:c9:
eb:af:77:8a:97:d5:2d:65:56:6f:5a:36:15:7a:e1:
7f:dd:cd:49:6e:08:b2:fd:54:57:8b:de:b7:0e:b3:
e5:a6:c4:2d:8b:2d:33:70:ee:15:5a:87:5e:fc:6e:
be:2a:78:7a:46:7e:d3:75:01:d4:76:63:a2:29:95:
ac:cb:8f:16:dc:ab:11:a7:5f:0d:00:18:dd:4b:26:
97:d9:bb:26:e3:03:2e:7b:f8:ea:ad:8b:ed:d5:cc:
28:dc:33:c3:34:26:f7:82:1c:9b:5a:73:16:cc:f7:
68:3c:d5:92:fc:6b:b4:88:13:60:ea:c1:1b:a7:b7:
a0:f4:80:54:68:53:35:1c:4f:00:92:8b:27:3e:45:
ab:32:7b:26:2a:90:9a:fc:79:0b:20:bb:c0:8e:de:
10:8e:6f:35:3e:f2:11:a3:5e:1d:27:18:fa:93:9a:
31:a9:a0:bc:65:17:42:df:50:72:8c:65:d0:e0:d3:
d2:30:32:b1:b0:a4:8d:4f:50:8d:43:ef:ba:cb:c0:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:CA:B9:7E:DE:E7:D8:0B:15:08:9C:0F:1D:E3:05:39:39:5D:DC
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/OV_KuX7e59gLFQicDx3jBTk5Xdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.8.0/21
195.34.200.0/22
IPv6:
2a11:d940::/29
Signature Algorithm: sha256WithRSAEncryption
85:d6:da:4b:6d:30:f3:f7:e5:ca:02:b0:a4:48:18:f5:58:99:
df:05:30:f4:86:91:43:b6:7d:5a:f4:5d:ad:d0:30:89:44:28:
ff:fd:2e:d5:fd:b7:43:b0:5a:06:32:68:d9:ef:e5:6d:a6:41:
7d:f2:c5:84:ed:ba:1d:d1:c3:ee:5d:2e:9c:3c:84:61:62:5e:
63:dd:22:a9:cd:93:d0:ce:41:6e:f9:d3:31:e5:3c:6b:09:d9:
c8:72:56:fd:11:6e:dc:a0:9a:67:2f:88:c2:08:07:2c:2e:fc:
2f:c6:a8:67:a5:8a:44:d6:59:13:95:e3:1c:b3:97:75:53:44:
29:1d:3f:33:84:6d:96:25:3b:c7:d0:98:30:83:72:48:8e:71:
04:a7:c8:59:3d:df:c0:95:c8:1b:1c:27:5c:04:49:bb:64:a6:
00:89:da:61:cd:2c:cd:f2:87:25:fd:78:3a:2b:1d:21:50:01:
0a:3c:bd:7c:b9:91:28:90:6f:1c:51:32:32:0e:57:30:01:47:
18:da:4a:f6:cd:03:74:8c:e4:da:d9:d9:2b:1c:af:c6:fd:fc:
6e:80:0c:af:97:41:bc:f4:eb:b0:e9:a0:2a:4b:24:b9:18:5f:
2f:72:d1:d2:03:88:da:1e:98:3d:19:35:6d:ff:6c:e6:d9:9b:
c8:45:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:50 2024 by rpki-client on console-ams.rpki-client.org