Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/OHDvkg0HRhARgPyi3BSYohHZybk.roa
File: OHDvkg0HRhARgPyi3BSYohHZybk.roa (raw, json)
Hash identifier: n8oqPLCZAYauP6gQufrKZuM6p0U0kauBErnaaabCPmk=
Subject key identifier: 38:70:EF:92:0D:07:46:10:11:80:FC:A2:DC:14:98:A2:11:D9:C9:B9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0185CEC5689265A47288F96647A6E959D96C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/OHDvkg0HRhARgPyi3BSYohHZybk.roa
Signing time: Fri 20 Jan 2023 10:42:01 +0000
ROA not before: Fri 20 Jan 2023 10:42:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206941
IP address blocks: 193.235.58.0/24 maxlen: 24
194.14.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:c5:68:92:65:a4:72:88:f9:66:47:a6:e9:59:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 20 10:42:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3870ef920d0746101180fca2dc1498a211d9c9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:4d:5a:2f:c4:ed:88:96:05:87:66:a5:ad:
e9:94:4c:c1:c3:b3:cb:b9:56:40:43:50:04:7a:8b:
44:61:22:71:36:ac:30:d8:1c:f2:97:e5:94:45:63:
19:b6:9e:71:78:d9:08:cb:4d:bf:5f:5c:e4:28:58:
70:a4:05:d1:57:38:70:c4:e5:4c:ba:73:1d:e8:59:
d2:01:fd:5b:f8:2c:9c:76:61:0c:4f:73:6f:0f:b2:
98:6a:01:1a:6c:5a:bb:10:53:4e:82:b7:4e:ef:78:
b6:ba:2c:8e:ed:4f:52:e7:f6:f1:bc:bd:a4:ce:14:
54:5b:b4:1c:20:e4:8b:db:98:a9:5f:a8:d6:de:77:
3a:67:54:1e:48:ea:b9:fb:c0:f9:42:e5:16:bc:09:
1f:26:60:31:f3:03:ab:4b:1d:95:b8:1e:c9:d3:70:
18:14:27:35:1f:68:98:4e:ac:08:b4:39:78:8e:bc:
f1:ec:aa:f3:72:f0:9c:21:3c:d5:62:f7:af:d4:12:
5b:3a:8e:f9:f9:a6:a9:a8:34:20:32:8b:d6:74:d6:
14:8d:c4:81:a7:f0:4a:a6:3b:e4:79:90:7f:78:da:
9e:54:b0:fc:08:55:76:e8:c9:54:c8:52:19:3d:35:
14:75:6d:ab:49:e5:a1:6c:b5:da:5e:c1:ed:a7:3f:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:EF:92:0D:07:46:10:11:80:FC:A2:DC:14:98:A2:11:D9:C9:B9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/OHDvkg0HRhARgPyi3BSYohHZybk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.58.0/24
194.14.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:05:40:ed:da:e4:07:de:bf:ef:9e:d4:49:b9:44:51:81:c1:
84:40:b2:f7:b6:3f:24:b7:7b:f3:b9:b6:e2:30:86:8b:50:9e:
fa:a6:36:8c:25:c7:9e:b2:dc:f8:81:e9:95:63:1d:d8:58:2a:
2e:76:0e:00:43:47:11:c9:05:bc:b5:46:08:0f:de:af:fc:23:
22:d5:a4:f3:94:e5:a3:bc:04:2d:f1:de:61:07:36:dd:42:12:
71:8e:9d:1b:38:52:b5:84:a1:b8:cb:94:48:a5:07:f2:b8:99:
d4:ab:ea:3d:0c:0a:83:30:01:c0:fa:48:24:37:91:21:04:03:
ce:38:8f:14:04:02:5e:20:df:04:d1:f6:57:48:5d:b3:21:5f:
78:05:df:7a:e4:ff:92:e1:55:c4:26:33:c7:4f:b7:0f:e3:f5:
f7:ab:cd:5e:30:62:9e:87:25:65:25:24:65:9f:49:a2:0f:41:
fb:63:5f:f9:d7:38:c0:6b:8e:95:a8:0c:da:65:87:18:78:b6:
76:30:59:cd:e1:ad:b2:1d:40:1f:d3:ba:74:38:85:6f:9f:bc:
1c:f2:03:b4:41:f6:33:e9:55:1f:fc:c7:eb:d6:f7:60:43:ff:
01:5f:64:37:45:d1:bb:f7:2f:53:9b:48:8e:31:5c:44:e6:a3:
b8:2c:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org