Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/OLWqtzff3BT6K_ccZhzXER-jJNw.roa
File: OLWqtzff3BT6K_ccZhzXER-jJNw.roa (raw, json)
Hash identifier: jS6Qw6StNkApKGS5WXtMbvXO5VoKQjbJoCasp+4nSC0=
Subject key identifier: 38:B5:AA:B7:37:DF:DC:14:FA:2B:F7:1C:66:1C:D7:11:1F:A3:24:DC
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0192BA4CEEEB9423387482AA729E631F6594
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/OLWqtzff3BT6K_ccZhzXER-jJNw.roa
Signing time: Wed 23 Oct 2024 16:54:16 +0000
ROA not before: Wed 23 Oct 2024 16:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8070
IP address blocks: 62.10.0.0/15 maxlen: 15
194.41.16.0/24 maxlen: 24
194.41.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 15:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:4c:ee:eb:94:23:38:74:82:aa:72:9e:63:1f:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 23 16:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38b5aab737dfdc14fa2bf71c661cd7111fa324dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ec:a1:cf:6b:ad:36:11:60:fb:8b:b6:41:7f:
7e:99:02:53:74:b2:01:95:a7:4d:fa:6d:95:2a:c8:
e8:0b:e6:d6:27:47:90:40:2b:60:eb:d8:20:52:45:
bf:54:3a:b1:10:81:09:aa:28:4e:45:d9:54:1c:17:
04:3f:4d:db:3f:4c:82:27:60:cb:ad:7c:53:c1:62:
45:53:e1:67:d5:81:9e:b7:de:e1:ff:6e:bd:42:9f:
8c:9e:07:eb:0f:53:ce:c7:20:89:0e:e8:72:c5:6b:
cd:53:e9:09:da:88:64:90:ac:f1:e9:99:b7:9f:3f:
9e:9b:0a:9e:67:8f:ee:fd:43:44:c4:17:43:a5:56:
45:f4:05:b3:95:8a:60:d4:cd:68:a8:a6:6d:78:53:
6c:0a:9d:0c:cf:46:58:6a:be:66:8c:a3:70:01:d6:
b3:eb:89:16:4b:68:2a:88:bf:f4:95:89:a4:77:18:
1a:03:80:41:b0:d0:57:39:42:80:73:16:7c:2b:20:
86:1c:c9:3b:81:69:c0:43:74:5d:82:0a:1e:e6:b1:
8e:80:ac:79:a6:87:28:fe:db:74:b5:ad:1e:ec:b6:
e4:71:e1:d4:02:cc:e6:43:c7:bd:d2:6e:b3:5d:d6:
17:2f:ae:f6:03:54:89:5e:39:e0:29:51:40:ff:47:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:AA:B7:37:DF:DC:14:FA:2B:F7:1C:66:1C:D7:11:1F:A3:24:DC
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/OLWqtzff3BT6K_ccZhzXER-jJNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.10.0.0/15
194.41.16.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:00:4b:03:a1:78:0f:2e:ab:d6:cc:dd:f1:3a:19:ec:9a:58:
a4:1b:6c:78:5e:19:aa:54:3f:77:ed:2b:48:bd:e0:04:80:50:
55:bb:1e:01:f2:28:fc:c0:46:ee:13:05:59:d4:7e:16:2d:dc:
02:c0:e0:60:3e:44:bd:b7:4e:e3:85:90:3f:a0:d7:1d:7a:78:
5d:a9:fb:68:ad:ed:e4:0b:d9:2c:6d:b0:16:19:a9:72:a4:1b:
9b:59:4e:1c:4d:7e:49:15:c3:aa:52:0d:58:47:15:d6:95:02:
b6:75:1a:ce:b2:8f:14:de:ba:36:58:38:24:89:c1:e9:3d:dd:
c4:5d:b6:c3:9f:57:14:51:c3:94:30:2e:eb:99:fb:5b:47:57:
9c:3e:23:07:13:43:48:ca:d1:3f:5e:93:90:de:db:56:7a:a2:
1a:88:82:4a:2f:03:9c:b3:67:9f:90:56:a0:bc:0b:c8:b1:86:
1f:4c:11:72:6f:e1:0f:5b:8e:6d:23:75:61:29:f9:77:74:95:
a3:bb:98:65:60:79:2c:7c:bc:4a:e8:a4:4e:bb:4e:3f:bf:8f:
f1:07:1c:12:bb:a5:d3:05:8b:3d:19:bc:8b:29:00:da:b4:bd:
e1:5d:7c:97:fd:52:ad:8d:6d:23:e6:78:7b:d2:04:96:cb:df:
6f:82:a9:76
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 3 20:02:30 2024 by rpki-client on console-ams.rpki-client.org