Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/Oeh0YBCLE8AU9kkNAZ_PeWuG5D4.roa
File: Oeh0YBCLE8AU9kkNAZ_PeWuG5D4.roa (raw, json)
Hash identifier: xG0iGefhSpUTJ/R0gknCGWAGARV3yWm+fFidfaiY+3g=
Subject key identifier: 39:E8:74:60:10:8B:13:C0:14:F6:49:0D:01:9F:CF:79:6B:86:E4:3E
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 01856EB901A10AB95D3A5FB3E90157DD53D2
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/Oeh0YBCLE8AU9kkNAZ_PeWuG5D4.roa
Signing time: Sun 01 Jan 2023 19:04:56 +0000
ROA not before: Sun 01 Jan 2023 19:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202269
IP address blocks: 195.248.240.0/24 maxlen: 24
195.248.243.0/24 maxlen: 24
195.248.242.0/24 maxlen: 24
195.248.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:01:a1:0a:b9:5d:3a:5f:b3:e9:01:57:dd:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jan 1 19:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39e87460108b13c014f6490d019fcf796b86e43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:10:02:00:b7:66:ef:f5:6e:7b:0c:51:d0:
51:93:37:db:e9:8d:f1:a8:2f:e8:8b:45:61:91:e8:
f5:57:14:b4:ed:0c:00:c9:ab:53:ff:1d:73:bc:9c:
d4:11:0f:5f:6f:cc:80:c5:87:b1:6b:91:a0:07:8e:
42:6a:a1:da:a0:ea:98:80:7d:34:c3:69:77:f1:85:
7c:9b:77:ab:29:1a:a5:f6:18:26:e3:7e:79:50:95:
12:25:23:a6:48:a1:f1:a3:5e:4b:93:9b:f2:ee:fe:
1c:69:35:74:2a:5d:a2:fe:2c:3e:3e:96:f5:25:ca:
0a:1c:e0:d0:20:dc:4b:30:11:64:ce:e6:15:af:54:
7f:b2:3b:7b:14:bf:a0:26:0b:79:f1:ad:0b:f1:d4:
8b:33:22:5d:8d:43:ec:ae:57:ad:b8:c5:08:cd:e7:
e8:5d:3a:70:2f:c2:f6:76:a4:e4:f2:f6:96:fa:33:
fd:a2:db:56:34:23:f5:02:f0:0c:27:ce:19:0e:ab:
ee:17:9e:cc:7c:da:c6:22:4a:b4:9d:18:74:40:aa:
de:bb:49:56:a9:2f:57:eb:8d:cc:e3:7a:7d:12:81:
7b:88:79:b0:84:d0:97:b7:a1:85:0e:bf:9f:0a:bb:
bc:ba:83:aa:7b:b4:35:c0:18:97:81:07:92:90:97:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:74:60:10:8B:13:C0:14:F6:49:0D:01:9F:CF:79:6B:86:E4:3E
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/Oeh0YBCLE8AU9kkNAZ_PeWuG5D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:3d:07:1b:41:b7:c5:7a:0d:c4:9f:a0:b2:e1:a5:d1:1b:f3:
6f:bd:82:ff:c6:d6:e9:e9:ff:6a:75:35:1c:e7:7e:1d:ff:4f:
98:f9:c6:c4:9a:eb:f8:49:3f:04:0d:cc:f2:b1:7c:be:d7:fc:
f6:0d:a4:b1:95:b2:05:e2:6d:d5:0a:0b:cf:4c:7b:52:65:05:
c3:91:28:99:18:1e:7d:97:14:09:28:df:b5:77:df:9f:80:b9:
ff:21:03:77:21:55:9e:0d:ec:72:bd:87:6f:66:f8:69:08:d8:
d6:9f:a2:3e:f7:6c:9e:5a:0b:32:35:81:5d:5d:07:6b:6f:ea:
37:0d:2d:74:83:3a:8c:96:9b:d1:0f:08:85:c0:52:4f:00:11:
59:76:a3:c9:58:4e:30:de:da:c3:ee:e9:2e:65:14:10:01:74:
7b:a0:ad:f2:65:de:98:3f:85:04:71:ad:6e:0e:11:c4:13:ca:
88:8e:08:15:32:d7:60:c1:4c:77:45:d1:4c:44:0c:ae:4c:35:
32:31:fd:a1:68:b5:14:0c:34:9e:42:89:5b:2e:7f:8b:88:0c:
29:15:3f:17:3a:03:0e:17:39:28:73:67:bf:32:33:a5:15:48:
4d:cb:c5:52:13:44:1b:cc:3c:3d:ee:ca:6e:f5:42:ae:a4:56:
92:8b:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:33 2024 by rpki-client on console-fra.rpki-client.org