Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/kOj6KYabmDWjksCwAS3shkXixyg.roa
File: kOj6KYabmDWjksCwAS3shkXixyg.roa (raw, json)
Hash identifier: Rvzz0+IPHq3uIePgc15AxaDkCrYqf1nBayP50g3CQok=
Subject key identifier: 90:E8:FA:29:86:9B:98:35:A3:92:C0:B0:01:2D:EC:86:45:E2:C7:28
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 018C0CC58A0BF1F582F965E246129BCE19B8
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/kOj6KYabmDWjksCwAS3shkXixyg.roa
Signing time: Sun 26 Nov 2023 17:55:21 +0000
ROA not before: Sun 26 Nov 2023 17:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204393
IP address blocks: 195.96.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:c5:8a:0b:f1:f5:82:f9:65:e2:46:12:9b:ce:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Nov 26 17:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90e8fa29869b9835a392c0b0012dec8645e2c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:2d:99:5b:6b:a6:e3:59:a2:b3:45:2f:70:
16:43:fd:a4:3e:aa:aa:e5:12:b0:05:ed:a1:21:12:
67:15:19:f2:f2:81:4e:f7:d3:2c:6a:4f:71:f6:af:
3c:1f:90:f8:b1:7c:a0:a4:88:be:79:b4:0e:e0:bd:
c6:eb:7d:34:36:65:ac:c2:07:d9:c4:c0:d6:fa:7a:
23:26:c9:4d:11:c2:12:21:7b:b7:0b:80:59:04:57:
a9:02:29:f4:79:77:63:d3:4f:f2:34:15:f7:82:b4:
b2:12:1e:01:d9:c5:60:80:be:cf:c5:7a:fa:d9:08:
50:3f:50:9b:32:fd:05:44:ff:03:fc:1a:19:71:3f:
26:b8:89:c1:19:e1:5d:1b:23:b2:11:c7:ab:fe:82:
25:b4:d3:b5:36:87:2a:ba:df:10:e7:63:2d:f4:bc:
fd:5a:29:84:6d:ee:76:de:69:fb:71:f5:d4:79:04:
84:e7:a4:7f:b7:2b:f2:77:b4:a3:30:69:07:47:a6:
cd:02:24:74:4b:ae:1f:cd:bf:cb:14:9a:35:9e:34:
06:24:87:a2:80:e4:87:db:d1:b6:3a:f7:95:88:04:
d3:ba:c5:1d:af:f3:f6:73:fc:7b:bf:94:90:86:ca:
d8:01:bb:e5:10:4e:51:7d:36:ef:96:3d:fa:1b:27:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:FA:29:86:9B:98:35:A3:92:C0:B0:01:2D:EC:86:45:E2:C7:28
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/kOj6KYabmDWjksCwAS3shkXixyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.128.0/24
Signature Algorithm: sha256WithRSAEncryption
23:21:0f:9f:ad:6a:64:7e:f2:89:23:10:d2:5f:1e:83:7f:58:
cb:e2:48:53:18:fb:a4:9d:f0:e0:b5:cf:a7:89:ca:70:af:b7:
a3:3b:a6:51:bb:19:bf:b7:c9:23:9a:93:cb:01:d3:ae:b4:fc:
a1:91:d0:11:09:66:a2:f3:43:10:6b:4c:5c:b0:d3:b2:b5:37:
a7:9e:6c:a0:cb:d9:d8:b0:66:71:db:69:52:06:4a:88:40:48:
15:ae:d2:da:5d:e4:43:88:dc:e8:79:9a:69:3f:03:24:8d:d6:
92:bf:b9:1c:79:b9:6e:dc:39:9d:86:4a:94:1c:b7:4d:83:fe:
2e:dc:f3:e3:74:21:84:ce:18:24:a2:a0:80:5a:19:be:df:cd:
05:7a:eb:08:5e:8a:c3:32:28:4e:2b:82:7e:99:b9:7d:d5:bb:
8b:1d:52:e8:d7:30:2b:3d:e1:91:18:c2:f0:2e:d2:d4:89:c3:
be:ff:0a:4f:a0:e8:ed:62:70:87:45:e3:6f:0c:0d:12:77:88:
d6:4a:e1:a4:cf:65:b7:51:b5:e7:f6:f4:c6:50:d3:45:e9:9b:
81:e9:3f:6d:d4:5b:79:12:53:90:76:a6:4c:94:52:b6:17:a6:
2a:bb:d4:9e:c2:ad:59:50:77:55:64:95:59:a9:b4:ad:68:55:
a6:99:5b:e6
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 31 23:16:30 2023 by rpki-client on console.sobornost.net