Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/o8MW8riiB_JlYX71QfpZzfRExkg.roa
File: o8MW8riiB_JlYX71QfpZzfRExkg.roa (raw, json)
Hash identifier: P8C9j8tfy8b+ZeUxAmi+lkPTs8jvQZmfiSgo1mkT9L0=
Subject key identifier: A3:C3:16:F2:B8:A2:07:F2:65:61:7E:F5:41:FA:59:CD:F4:44:C6:48
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFC5A077DD060CB2209464EC1A9EC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/o8MW8riiB_JlYX71QfpZzfRExkg.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62020
IP address blocks: 194.132.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fc:5a:07:7d:d0:60:cb:22:09:46:4e:c1:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c316f2b8a207f265617ef541fa59cdf444c648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:81:fd:59:df:48:c6:b1:4f:59:e3:1f:33:
80:37:2a:ea:6f:af:c8:5a:7f:57:6e:ee:7e:ea:39:
6b:7d:2d:dd:46:7d:d1:37:f2:cb:aa:b0:bb:09:b4:
74:9a:c5:8f:50:f8:38:2a:44:0c:83:4b:71:15:5a:
6c:e4:d3:82:b4:a6:7a:ba:49:f1:be:c8:86:be:e5:
fb:dd:76:2f:2f:2f:27:05:e0:40:89:d9:91:80:e6:
88:db:8c:ee:7e:d3:c8:9a:3b:39:98:dd:b3:bc:79:
ba:9f:37:d7:92:f4:2a:57:60:76:f9:a4:60:46:74:
cf:66:36:3f:42:e6:27:43:f4:5c:90:64:3a:2d:38:
59:5f:95:15:7d:ce:28:1b:e9:0b:b2:fe:ee:95:8a:
17:ad:a3:71:67:df:05:87:76:05:f6:68:38:d1:5f:
c3:04:ae:0f:ee:f9:b7:a1:b0:00:1c:a2:a1:aa:5c:
88:93:81:8a:58:00:ab:ff:95:e7:d0:9f:08:29:9e:
c5:66:bc:47:ea:c3:5c:0a:e3:a4:c4:75:3e:42:19:
a8:af:cc:d1:e2:7b:3d:b4:d8:bf:5a:c8:8c:16:4b:
2a:1c:bb:7c:9d:d7:b1:c2:b4:5c:f2:b4:40:66:dd:
c0:35:3d:bf:c5:59:29:a6:c8:c2:8c:c6:fc:14:1a:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:16:F2:B8:A2:07:F2:65:61:7E:F5:41:FA:59:CD:F4:44:C6:48
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/o8MW8riiB_JlYX71QfpZzfRExkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:de:e2:bb:5c:94:d2:71:9f:98:b5:ca:cc:4d:6c:51:bf:b5:
21:75:9a:83:17:a3:fd:90:4b:fb:c9:bd:23:12:a6:92:fd:9b:
ba:44:55:e1:d2:d1:d4:94:3d:b6:50:95:a8:4a:e8:e1:41:a9:
a8:03:4d:f6:b8:32:3b:24:98:e0:b5:31:cf:a7:fa:c1:bd:5c:
f7:99:e4:fa:15:81:c3:65:cf:5d:8e:51:c6:7f:93:4f:04:4c:
ee:4a:fe:ba:97:6e:04:53:bb:fb:ed:22:6f:f9:e0:1b:aa:1b:
27:2c:f4:c1:52:3d:ce:43:f7:ec:96:83:77:dc:10:62:60:f3:
f9:78:66:5b:47:e6:93:8f:04:80:c7:1d:c4:79:63:4f:66:2b:
4c:c1:7d:0b:9e:2c:e2:a0:5a:72:d4:58:85:da:0b:06:fd:a1:
c4:72:2f:0a:ab:5c:3e:14:26:5c:d6:2c:a4:e8:7b:f3:75:99:
92:78:9b:97:e4:16:7a:7e:82:30:a1:2a:58:63:c5:f5:66:fa:
9d:66:88:7c:cd:3a:6a:f7:2f:d2:39:f1:e7:02:ae:a6:f2:71:
66:53:b7:c4:34:2b:9a:2f:8a:2a:6f:b7:fd:25:ba:e4:de:e9:
c1:b0:2b:2b:1d:01:be:b0:47:09:f6:af:9e:d3:a3:b8:05:d4:
3e:3c:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 14:47:56 2023 by rpki-client on console-ams.rpki-client.org