Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/osCbQWSyeNdLHMD2k9NIs-wBuSA.roa
File: osCbQWSyeNdLHMD2k9NIs-wBuSA.roa (raw, json)
Hash identifier: nH25HdajLSRu9QLHt/OgXhQcGb1cpv5kjg0b2MQYIlk=
Subject key identifier: A2:C0:9B:41:64:B2:78:D7:4B:1C:C0:F6:93:D3:48:B3:EC:01:B9:20
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 01856C7845436BDDC21382F081D2660761C9
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/osCbQWSyeNdLHMD2k9NIs-wBuSA.roa
Signing time: Sun 01 Jan 2023 08:34:59 +0000
ROA not before: Sun 01 Jan 2023 08:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208346
IP address blocks: 94.154.132.0/24 maxlen: 24
94.154.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:45:43:6b:dd:c2:13:82:f0:81:d2:66:07:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jan 1 08:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c09b4164b278d74b1cc0f693d348b3ec01b920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:46:e2:00:5a:de:f9:30:22:39:66:1e:b9:
0c:51:cf:98:14:43:e8:f8:34:a9:96:05:4b:63:53:
c6:5e:5b:98:9f:2a:9a:a3:24:f7:f6:52:a5:ca:62:
3c:d5:43:9c:b9:53:48:47:21:00:c6:be:12:97:e0:
42:9e:4d:0b:a2:b7:26:a5:26:2a:02:70:61:f7:cc:
db:c1:32:24:85:40:43:8d:1e:0c:cf:58:fb:5d:f0:
f0:75:ee:04:7d:a7:52:f5:82:79:81:d8:04:f3:16:
2e:51:df:60:7b:f1:aa:4e:c5:ca:06:85:38:9c:b0:
85:57:cb:b5:28:92:6c:79:17:e6:81:8d:61:1b:a3:
1e:f1:70:07:6f:f2:e7:3c:0e:18:91:9d:37:c6:ef:
db:65:e2:2e:ac:d4:99:bf:36:f8:6c:b4:62:8b:be:
3f:ce:06:93:7d:ad:f0:09:0e:39:0e:3e:08:f4:e1:
4b:0d:31:1f:b8:17:6d:73:7f:58:17:e0:ae:c8:7f:
59:b8:e8:00:bb:37:83:e8:f6:26:15:67:53:01:78:
18:de:4b:27:cb:7c:ec:a4:48:d5:f4:41:43:1a:15:
d6:80:3a:1d:00:b9:67:3a:4b:1a:d6:78:8c:cb:3f:
b5:e0:8e:ab:ef:ae:83:7b:5b:93:35:60:c2:e7:79:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:9B:41:64:B2:78:D7:4B:1C:C0:F6:93:D3:48:B3:EC:01:B9:20
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/osCbQWSyeNdLHMD2k9NIs-wBuSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.132.0/23
Signature Algorithm: sha256WithRSAEncryption
85:ab:87:1b:31:e5:33:c1:2b:ae:9d:ce:2f:6c:e5:46:f7:b7:
6d:72:3b:c7:f6:05:71:c5:ae:6e:00:a2:3e:03:6c:1a:19:e3:
7e:3c:1a:b8:97:58:1f:2f:18:d0:fe:82:28:f6:8f:07:b4:5d:
ff:96:e7:c8:5b:f0:d9:c7:28:36:87:27:e6:17:ab:91:e4:77:
a4:26:7f:ec:75:02:d1:2b:bc:db:85:29:f3:19:de:86:2b:ac:
42:28:de:fe:3a:f8:f4:ed:bd:f0:6a:03:95:0a:d8:ed:b2:94:
9c:be:8b:3c:68:2f:f3:4a:31:13:df:ac:40:28:8b:f3:56:08:
0e:4c:89:7b:b6:7e:c9:53:0a:92:d9:9a:29:0a:46:ff:10:35:
ec:42:0f:37:e3:02:87:56:f3:da:30:72:38:1b:27:22:27:23:
35:88:99:0c:75:d3:4e:a7:24:dc:43:1a:52:ec:ea:74:7e:44:
7d:37:75:a2:4f:cf:e3:9f:ef:91:d3:87:dd:92:a0:83:3f:af:
d7:03:e9:2c:40:b7:06:c8:ce:98:b0:32:7e:a1:37:7f:5b:a3:
e6:69:f9:7a:b2:c0:cc:84:bc:83:25:8b:4f:18:2d:f7:13:5e:
ab:27:10:a5:77:36:26:6c:3b:1a:d1:f2:e2:b7:26:c1:15:ea:
10:7e:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:30 2024 by rpki-client on console-fra.rpki-client.org