Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/OeIPOP399_apuu9gWrtdAP2EJDY.roa
File: OeIPOP399_apuu9gWrtdAP2EJDY.roa (raw, json)
Hash identifier: AzTO240FEHtrxfNI8wiVqyD9RsYO4LlCzAuaFEMbhVA=
Subject key identifier: 39:E2:0F:38:FD:FD:F7:F6:A9:BA:EF:60:5A:BB:5D:00:FD:84:24:36
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0188D59D6E9AF4725C6E6C87E5BA07BA54A2
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/OeIPOP399_apuu9gWrtdAP2EJDY.roa
Signing time: Mon 19 Jun 2023 21:44:04 +0000
ROA not before: Mon 19 Jun 2023 21:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205094
IP address blocks: 213.142.154.0/23 maxlen: 23
195.128.143.0/24 maxlen: 24
2a12:f140::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:9d:6e:9a:f4:72:5c:6e:6c:87:e5:ba:07:ba:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Jun 19 21:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39e20f38fdfdf7f6a9baef605abb5d00fd842436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:47:2e:62:0f:ed:3a:2a:ee:91:b0:8d:99:
3c:16:19:90:b1:28:34:a5:db:61:17:c1:ce:a3:c1:
5e:8f:e2:cf:bc:c2:cd:9e:aa:f5:37:76:a1:68:a9:
b1:15:5a:a5:de:01:7b:f4:5b:75:0e:76:5a:8d:d3:
21:9c:18:eb:0b:57:51:23:82:c1:b1:0e:ea:c3:cb:
0b:d6:cd:dd:4f:41:67:a5:2b:70:9f:0a:e1:ae:c2:
85:be:f2:42:50:c7:d7:c9:83:41:73:96:2d:b5:b4:
bc:c0:ce:65:08:e0:60:2d:a6:a0:4a:ea:b3:d7:e1:
0e:3d:e9:de:41:45:a0:e2:bf:45:43:74:1a:11:af:
07:49:7e:60:c2:eb:60:b6:40:88:71:d8:8f:0f:04:
14:16:a9:10:97:35:d8:5b:41:11:9f:f6:59:4b:75:
cd:34:a6:8a:ce:e1:80:31:73:98:bd:70:5f:ab:6b:
3a:5c:bd:06:a2:a9:16:51:9a:ae:a8:4c:7b:98:f0:
3a:2f:80:3a:c3:14:c0:aa:39:55:57:86:e0:b5:4d:
84:1e:41:4f:fc:ba:3d:84:44:12:b4:43:48:85:b3:
45:38:c6:14:1d:26:cf:3f:de:2c:7c:e9:61:f6:a8:
e2:af:10:58:27:66:4a:c5:2f:6a:a9:5b:85:44:88:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E2:0F:38:FD:FD:F7:F6:A9:BA:EF:60:5A:BB:5D:00:FD:84:24:36
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/OeIPOP399_apuu9gWrtdAP2EJDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.143.0/24
213.142.154.0/23
IPv6:
2a12:f140::/29
Signature Algorithm: sha256WithRSAEncryption
95:17:8c:3b:57:ca:fb:50:a1:37:c3:f3:15:a0:35:a0:86:a3:
38:4b:09:0f:84:3a:01:e8:7f:30:35:68:a2:1b:7a:a5:0e:9b:
64:e6:1b:93:7f:35:a7:dd:4e:a3:e0:8a:fd:87:e4:ef:75:69:
15:82:15:1b:2c:17:d4:6f:94:3f:a2:5d:90:6b:c7:05:2e:40:
5b:b8:8b:6e:f5:e1:48:2c:1c:53:9b:69:2d:ac:70:8e:92:10:
56:5e:0f:d8:36:57:ca:7b:f3:e6:5e:f9:f5:cb:b5:c0:53:60:
06:65:bf:ce:8d:33:b8:ac:9f:89:f0:bd:64:88:dd:b1:6d:8c:
5c:d9:30:c6:1e:e4:52:53:37:4d:8f:91:cd:be:5e:00:2d:d7:
2e:4d:97:0e:b3:19:26:3e:75:88:d6:dd:95:ec:a2:af:30:fd:
2c:bf:39:6b:32:e7:a6:31:36:cd:4f:b9:cc:5b:a8:24:94:cd:
5d:48:95:f5:c7:97:b8:d4:cd:02:5b:3e:0f:c7:77:0e:4b:39:
a4:4d:8e:12:50:c0:87:f7:70:a8:ca:83:7c:70:8a:8a:f8:19:
92:34:2c:43:a5:8b:4f:a5:39:d7:7a:2d:2b:e4:ef:c6:1f:44:
8a:0c:10:c8:47:d6:41:17:fd:33:0b:97:77:b2:9d:f2:ee:99:
8a:07:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:05 2024 by rpki-client on console-ams.rpki-client.org