Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/oxvv_RxJPOVQUwsH-zHGrWjdCqA.roa
File: oxvv_RxJPOVQUwsH-zHGrWjdCqA.roa (raw, json)
Hash identifier: tm7Ct81DB1gstZhGyhOQmZ/9sW5R548Bi4crB4MnNqA=
Subject key identifier: A3:1B:EF:FD:1C:49:3C:E5:50:53:0B:07:FB:31:C6:AD:68:DD:0A:A0
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 018CC56E5F5655B6C02CB76C3A64A92E8D56
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/oxvv_RxJPOVQUwsH-zHGrWjdCqA.roa
Signing time: Mon 01 Jan 2024 14:29:54 +0000
ROA not before: Mon 01 Jan 2024 14:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202108
IP address blocks: 89.31.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 13:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5f:56:55:b6:c0:2c:b7:6c:3a:64:a9:2e:8d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Jan 1 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a31beffd1c493ce550530b07fb31c6ad68dd0aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:ce:54:ae:c5:f9:36:3a:ec:b2:b9:6c:19:
fd:10:72:a9:6e:e9:81:1e:ba:db:4c:9f:d7:2e:de:
20:4b:27:02:79:0e:08:5f:6d:6c:58:f6:5e:83:52:
7d:9f:90:d6:17:87:31:35:62:e6:5d:f5:9f:83:c1:
66:a4:85:3b:5e:c4:56:11:82:e1:30:4a:33:73:20:
bc:e9:a9:11:bc:e4:bc:6c:a6:05:98:82:e5:aa:4c:
e6:bb:c5:2a:d9:94:f9:14:ca:5e:78:9b:82:8b:b7:
5d:a1:b6:67:26:cd:85:34:51:a6:4d:cd:07:a7:f0:
0a:f1:e4:d3:c9:80:23:29:72:a5:79:10:ac:f9:c5:
5f:ec:e8:7c:35:e7:85:58:39:57:d1:4c:55:ae:ea:
b1:84:05:b8:f9:79:77:24:08:63:fe:81:95:de:ad:
a4:43:c5:07:83:5f:af:63:5a:59:ed:60:d5:d4:92:
45:40:54:4e:92:38:f6:90:37:24:e5:eb:a2:84:9b:
56:bd:c1:84:f0:ce:98:64:c7:a4:87:b7:43:c2:54:
c7:25:51:11:ed:9e:c3:ca:7e:34:d3:18:5b:67:9b:
8d:08:b0:dd:f8:61:b3:79:be:d7:9f:4d:2a:b7:ef:
b5:8a:52:fa:da:63:44:02:ce:b9:91:57:a4:13:36:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:EF:FD:1C:49:3C:E5:50:53:0B:07:FB:31:C6:AD:68:DD:0A:A0
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/oxvv_RxJPOVQUwsH-zHGrWjdCqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.138.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b9:34:4d:a6:a8:14:0a:87:c1:c4:a4:64:c9:46:66:31:3f:
fa:ac:6d:df:59:a1:b0:6a:92:59:62:78:d0:8e:b2:c2:27:a7:
97:60:e3:ec:0d:34:76:33:6a:17:2a:ab:51:cf:2d:93:c7:30:
67:ae:a2:90:e1:85:c3:7d:7b:38:e3:87:1f:2f:cb:bf:cb:7f:
b4:a6:c6:44:e5:c1:60:9f:56:e5:e8:a4:f6:87:d5:4a:14:25:
e3:e4:40:77:e4:d8:d9:86:20:5a:57:58:bb:a8:81:3f:3b:80:
e5:57:c1:83:c9:eb:05:ab:f7:32:06:74:47:f5:b4:0f:b5:b3:
3d:eb:40:8b:4f:6c:34:be:f8:c7:93:0e:20:ea:e4:45:fe:24:
58:31:38:1f:fa:91:71:3f:97:21:dd:b1:b8:19:fd:8f:23:b2:
6f:04:b6:a3:0a:7c:77:2f:2d:d4:b2:96:de:91:cb:a0:78:56:
dd:a9:71:e8:4a:29:ed:b4:ea:03:a5:0d:7f:9a:43:60:7e:35:
d3:e6:5c:a3:00:40:db:2b:44:67:ab:2f:a3:ce:43:ca:df:d8:
df:b5:ec:78:53:36:83:02:e0:43:b4:95:d5:2a:8f:4a:f9:8a:
f3:42:08:91:cb:26:50:8c:3f:c4:72:a2:8e:63:d6:a5:4d:9b:
5e:28:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:21 2024 by rpki-client on console.sobornost.net