Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/OEKvejs_4beGkJoqtAwZl2iPhms.roa
File: OEKvejs_4beGkJoqtAwZl2iPhms.roa (raw, json)
Hash identifier: 1aC+rA/o9jyzm+zUcVxoGiBBV8/GLsGQ59oyzFFHRhg=
Subject key identifier: 38:42:AF:7A:3B:3F:E1:B7:86:90:9A:2A:B4:0C:19:97:68:8F:86:6B
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 01856FA7021D8662D579216CBAE10FCAA723
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/OEKvejs_4beGkJoqtAwZl2iPhms.roa
Signing time: Sun 01 Jan 2023 23:24:54 +0000
ROA not before: Sun 01 Jan 2023 23:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48347
IP address blocks: 176.58.60.0/24 maxlen: 24
176.58.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:02:1d:86:62:d5:79:21:6c:ba:e1:0f:ca:a7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jan 1 23:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3842af7a3b3fe1b786909a2ab40c1997688f866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:e1:49:d6:b5:d0:dc:dd:89:c2:6a:c2:ca:
38:41:23:26:ff:6d:0a:55:cb:0a:d0:a8:3a:ab:5f:
ee:d5:24:e1:28:f2:65:ef:77:f5:c3:f9:7b:26:06:
e0:21:34:dd:07:7e:ed:35:3f:0e:fd:7c:14:76:c2:
df:5b:36:ea:48:18:b7:9f:1a:75:ad:11:71:9c:d9:
28:4c:88:70:6f:b7:9e:71:22:a7:e1:58:3e:82:2f:
b7:e6:0e:d4:cc:14:89:a3:e0:99:58:cd:a4:9a:91:
12:cd:91:11:19:b3:e9:37:91:22:cb:fc:c3:93:a3:
c6:7f:4e:20:ea:b7:6f:07:a1:eb:43:95:c9:49:f9:
ce:e0:a7:91:14:31:f3:e4:f4:fa:c8:95:f5:ee:95:
0b:04:88:81:1f:3d:f9:1f:21:5a:b2:fe:87:bc:37:
2c:4e:ef:ec:69:f7:41:95:05:d4:17:1b:4b:d2:e8:
5d:65:d0:c0:54:f7:f0:2e:15:13:03:22:65:7e:5b:
36:52:cf:fc:ef:13:08:46:6e:df:cf:3a:52:64:90:
36:89:1e:f6:19:6e:50:9f:b2:0f:d8:6b:10:88:f1:
03:cb:ab:9c:3f:3a:29:33:9e:6c:c5:21:4e:3a:28:
a9:24:3f:5a:6c:59:2e:88:41:67:c5:53:c5:bf:9b:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:AF:7A:3B:3F:E1:B7:86:90:9A:2A:B4:0C:19:97:68:8F:86:6B
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/OEKvejs_4beGkJoqtAwZl2iPhms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.60.0/23
Signature Algorithm: sha256WithRSAEncryption
51:72:38:a1:4e:b5:f3:b1:eb:67:1c:df:39:91:34:28:65:32:
4a:c9:4a:74:f4:37:17:95:60:53:ce:1b:5d:f9:f8:bf:ff:6e:
9e:be:12:f7:48:77:33:35:41:0d:db:8c:e1:66:96:88:6f:2b:
f6:bf:de:00:ed:44:4a:55:41:18:07:31:10:c0:31:ed:d9:3d:
64:9a:64:44:66:1a:47:09:81:40:62:b5:f2:6b:eb:6e:73:04:
76:f2:37:45:09:a6:4a:e3:b1:33:c6:52:ed:dc:79:96:31:d3:
9d:fa:50:67:c0:79:4a:4f:87:83:20:e6:77:a4:65:55:b0:36:
72:14:c3:93:66:18:0e:0f:96:ee:1f:4a:2c:f5:cc:9e:2e:93:
9b:5f:39:56:5e:e6:a8:63:86:23:8b:6f:81:d2:e5:91:cc:b9:
61:68:91:d6:45:c1:62:a1:c6:02:64:80:c8:de:e6:3e:52:76:
61:a7:60:91:01:f0:f0:14:d0:8f:c5:95:4f:75:be:75:f5:3c:
d5:be:d2:7a:7f:f3:7e:94:dc:af:25:66:53:d3:05:8c:26:77:
0f:aa:a9:fd:35:5c:e0:23:f9:09:f2:c9:11:f9:f2:a5:df:f9:
02:08:72:0d:d2:05:ad:60:0d:a4:85:c2:52:f2:7b:de:8a:8c:
b9:39:86:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpwIdhmLVeSFsuuEPyqcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj
MjAzMmUwHhcNMjMwMTAxMjMyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQyYWY3YTNiM2ZlMWI3ODY5MDlhMmFiNDBjMTk5NzY4OGY4NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzufhSda10NzdicJqwso4QSMm/20K
VcsK0Kg6q1/u1SThKPJl73f1w/l7JgbgITTdB37tNT8O/XwUdsLfWzbqSBi3nxp1
rRFxnNkoTIhwb7eecSKn4Vg+gi+35g7UzBSJo+CZWM2kmpESzZERGbPpN5Eiy/zD
k6PGf04g6rdvB6HrQ5XJSfnO4KeRFDHz5PT6yJX17pULBIiBHz35HyFasv6HvDcs
Tu/safdBlQXUFxtL0uhdZdDAVPfwLhUTAyJlfls2Us/87xMIRm7fzzpSZJA2iR72
GW5Qn7IP2GsQiPEDy6ucPzopM55sxSFOOiipJD9abFkuiEFnxVPFv5s5VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhCr3o7P+G3hpCaKrQMGZdoj4ZrMB8GA1UdIwQY
MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct
OWUyMjBmMDRhOTAxLzEvT0VLdmVqc180YmVHa0pvcXRBd1psMmlQaG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx
LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDo8MA0G
CSqGSIb3DQEBCwUAA4IBAQBRcjihTrXzsetnHN85kTQoZTJKyUp09DcXlWBTzhtd
+fi//26evhL3SHczNUEN24zhZpaIbyv2v94A7URKVUEYBzEQwDHt2T1kmmREZhpH
CYFAYrXya+tucwR28jdFCaZK47EzxlLt3HmWMdOd+lBnwHlKT4eDIOZ3pGVVsDZy
FMOTZhgOD5buH0os9cyeLpObXzlWXuaoY4Yji2+B0uWRzLlhaJHWRcFiocYCZIDI
3uY+UnZhp2CRAfDwFNCPxZVPdb519TzVvtJ6f/N+lNyvJWZT0wWMJncPqqn9NVzg
I/kJ8skR+fKl3/kCCHIN0gWtYA2khcJS8nveioy5OYYn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org