Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/OrQa19rZ6jawW1_E77FGPu6vtGw.roa
File: OrQa19rZ6jawW1_E77FGPu6vtGw.roa (raw, json)
Hash identifier: L/XnY5NTltotJHa9yglJCimi21Od4/bWNW4RF+sX4VA=
Subject key identifier: 3A:B4:1A:D7:DA:D9:EA:36:B0:5B:5F:C4:EF:B1:46:3E:EE:AF:B4:6C
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 018571BA236FE10A9FAC64FBBCA4EB566731
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/OrQa19rZ6jawW1_E77FGPu6vtGw.roa
Signing time: Mon 02 Jan 2023 09:05:02 +0000
ROA not before: Mon 02 Jan 2023 09:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 195.88.246.0/24 maxlen: 24
195.88.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:23:6f:e1:0a:9f:ac:64:fb:bc:a4:eb:56:67:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jan 2 09:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ab41ad7dad9ea36b05b5fc4efb1463eeeafb46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:2a:22:60:1f:9a:00:98:70:83:54:ae:d8:
65:fa:97:65:74:7d:5e:41:d9:c4:5a:dc:31:b5:60:
5a:bb:8f:52:99:45:be:b2:32:cd:93:fb:b1:6b:ae:
56:5a:05:71:54:77:53:ff:18:7a:d0:05:87:9b:f4:
b5:1d:54:b4:14:c5:fb:39:2e:82:4a:18:71:54:74:
40:f1:fb:66:f5:ea:de:72:6e:88:f0:5a:90:55:16:
0a:a4:da:28:05:47:90:ce:b3:a1:37:57:6e:d6:a7:
69:5f:f5:e2:a2:79:5d:f5:e4:ed:59:79:b7:1c:47:
86:ae:e0:fc:85:25:93:b2:5c:f9:ab:b6:b6:40:13:
f1:e8:f2:f0:82:a5:4a:ec:4a:85:c5:f0:69:ed:30:
fb:b5:e8:13:ef:78:da:bd:1e:6d:dd:7c:72:85:d8:
b2:fd:16:42:10:36:b9:36:9b:ec:29:31:62:fc:2e:
0e:d5:de:e3:b0:c0:57:0d:0e:ee:62:e7:4c:22:dd:
87:0c:45:ec:9b:21:fd:da:fe:ae:9d:7a:de:14:f5:
03:f2:0f:cf:38:6b:8e:00:1f:35:6f:2b:a6:18:18:
2d:ee:f1:4e:cc:6f:04:17:f5:c4:8f:8d:19:ab:62:
94:46:1d:8c:00:7e:80:b8:44:49:d6:56:97:8e:be:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:1A:D7:DA:D9:EA:36:B0:5B:5F:C4:EF:B1:46:3E:EE:AF:B4:6C
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/OrQa19rZ6jawW1_E77FGPu6vtGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.246.0/23
Signature Algorithm: sha256WithRSAEncryption
43:e3:5f:a5:9e:10:de:61:f1:8d:01:99:8b:d8:71:62:60:32:
64:63:ee:4a:84:bd:8f:a5:c3:86:58:ad:8c:64:87:91:5a:cf:
37:fd:55:0e:da:c7:a0:24:8f:77:74:86:f0:87:24:8e:67:45:
cd:98:6a:af:33:c9:27:48:08:4b:9e:0d:af:e1:da:81:ff:ca:
0b:86:7b:8f:7c:a4:a0:8e:a5:7a:4a:52:d8:34:30:06:f3:ce:
d2:44:32:44:65:a6:a6:a9:99:6b:d9:66:88:12:fd:02:88:b4:
1b:da:92:16:28:62:14:bf:06:cc:f5:fc:a1:23:c7:5f:68:8a:
45:f3:62:7d:4d:77:54:7c:e5:0a:ce:99:80:bd:a7:09:f9:df:
f5:36:48:4e:e5:8d:33:96:dd:17:44:84:d9:cc:d0:d0:38:fa:
fa:dc:8c:f3:ab:b7:47:e3:ba:fb:3b:2f:11:3a:ff:0c:a5:04:
c8:69:51:ff:b2:40:da:4b:79:d8:83:a0:73:5f:64:6a:a2:e5:
d5:d4:14:43:e4:93:89:19:aa:7b:23:d1:6c:19:df:99:1c:94:
db:83:bc:fc:5e:2b:7a:75:e7:01:b2:3b:d3:dd:15:77:4c:70:
0b:69:a2:08:4b:33:15:0f:72:83:47:3e:70:cf:5b:41:ba:17:
b0:ab:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:46 2024 by rpki-client on console-ams.rpki-client.org