Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/OEQrJp-7GNo9xzUlu1JfCXR8Cj4.roa
File: OEQrJp-7GNo9xzUlu1JfCXR8Cj4.roa (raw, json)
Hash identifier: Wz51huLnCeNPNBPfDJFd+7FlmJVZ6Uhnww+yXKCSF24=
Subject key identifier: 38:44:2B:26:9F:BB:18:DA:3D:C7:35:25:BB:52:5F:09:74:7C:0A:3E
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 0188F6C9A350CDF615103B6E46F6CEF545BA
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/OEQrJp-7GNo9xzUlu1JfCXR8Cj4.roa
Signing time: Mon 26 Jun 2023 08:19:49 +0000
ROA not before: Mon 26 Jun 2023 08:19:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60294
IP address blocks: 80.74.48.0/22 maxlen: 22
80.74.48.0/20 maxlen: 20
80.74.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:c9:a3:50:cd:f6:15:10:3b:6e:46:f6:ce:f5:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jun 26 08:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38442b269fbb18da3dc73525bb525f09747c0a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:5f:75:8a:d5:87:ae:83:e0:5f:24:b8:7e:
0d:93:1e:e0:b5:d5:be:83:fe:18:6a:89:67:72:cf:
fd:c4:0b:8f:8c:81:85:1e:b5:ca:af:29:7c:d7:8a:
1d:7e:ef:b3:7e:ac:60:51:d2:82:d2:99:e5:34:26:
b7:56:93:b6:45:c3:a4:81:cc:9f:57:80:46:32:32:
4d:c7:e6:5c:f1:b2:c9:af:28:64:68:35:0a:2f:6e:
67:b1:92:e8:7f:74:3f:ef:59:52:16:d4:b1:41:34:
e3:3b:8b:09:ea:1c:3b:6f:a8:28:fa:30:e4:55:27:
af:6e:e6:d5:c6:cd:4e:64:d2:95:e1:da:e7:fc:04:
4c:a8:9e:80:f3:49:08:9b:10:19:62:48:41:2d:70:
27:9f:6b:43:50:f8:0f:05:c4:82:02:1d:27:43:12:
b0:ea:68:c8:57:1d:12:9d:ef:a4:93:c6:f6:ae:c0:
16:57:2b:96:77:19:42:76:58:7b:78:26:0f:3d:55:
db:e3:48:19:aa:76:9f:63:aa:13:6f:e1:5d:a4:b1:
2e:7c:50:81:60:3d:e7:bc:70:f0:ab:31:62:80:5a:
34:e7:88:08:2f:6b:b1:9d:0f:1f:8a:44:99:cc:5e:
80:36:d9:1c:a4:2b:24:96:1c:e2:7f:72:a8:33:8e:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:2B:26:9F:BB:18:DA:3D:C7:35:25:BB:52:5F:09:74:7C:0A:3E
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/OEQrJp-7GNo9xzUlu1JfCXR8Cj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:1d:ef:07:8f:fe:8c:63:e8:eb:58:c3:44:66:a1:5d:4b:08:
80:18:cb:ce:e0:e0:ab:a7:53:4e:78:52:5e:71:98:71:84:57:
43:3c:0d:5f:2e:3d:1b:13:a0:3e:c9:ff:9c:44:c2:74:aa:02:
85:dd:5a:4d:4c:c9:88:24:6d:cf:ab:9c:8e:8b:e5:98:aa:c0:
0d:5e:8d:39:b5:7c:ce:5c:a6:ea:2e:70:9e:d9:67:e9:3f:8f:
08:c9:23:1a:3b:57:96:51:7b:db:b1:d1:5d:90:9b:82:99:99:
d4:06:19:f3:76:8a:b3:f3:fe:cf:89:df:a9:70:0f:84:8d:22:
fb:1b:13:a7:11:f0:52:15:4b:ff:8a:9c:f3:48:b8:d1:9b:a0:
24:a4:96:39:9a:e9:d5:75:11:59:c4:26:c0:b7:b3:dd:5d:f1:
a7:4e:7f:76:51:0f:09:9c:83:9a:3e:d5:76:46:8f:c9:87:22:
d2:47:07:72:74:98:9c:12:41:a7:5c:4e:4d:fd:57:6a:3c:eb:
d3:cf:e1:9a:9f:bb:ee:96:a9:f8:a5:c5:41:a9:0d:53:b4:29:
ac:55:00:71:95:bb:2d:00:95:f3:6c:52:47:27:c6:08:70:dc:
5d:4c:62:81:50:37:94:68:66:ee:68:41:87:d1:5f:57:fe:00:
d2:4f:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:58 2024 by rpki-client on console-ams.rpki-client.org