Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/oxnus_VO4YgrRZACmz18FHTn7UA.roa
File: oxnus_VO4YgrRZACmz18FHTn7UA.roa (raw, json)
Hash identifier: OePZw6vI8fA0t2DF6s3Z621peamt0AM7d2TuPq+lVuM=
Subject key identifier: A3:19:EE:B3:F5:4E:E1:88:2B:45:90:02:9B:3D:7C:14:74:E7:ED:40
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018607553AB2A60855015B3A27C0CC138739
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/oxnus_VO4YgrRZACmz18FHTn7UA.roa
Signing time: Tue 31 Jan 2023 10:17:51 +0000
ROA not before: Tue 31 Jan 2023 10:17:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3316
IP address blocks: 194.190.138.0/24 maxlen: 24
194.190.141.0/24 maxlen: 24
194.190.142.0/24 maxlen: 24
194.190.145.0/24 maxlen: 24
193.232.85.0/24 maxlen: 24
194.85.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:55:3a:b2:a6:08:55:01:5b:3a:27:c0:cc:13:87:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 31 10:17:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a319eeb3f54ee1882b4590029b3d7c1474e7ed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:40:d9:ee:a0:b0:5a:59:b5:b0:11:4d:b6:
7c:96:7d:06:fe:2d:5d:7f:22:95:b6:96:a2:98:43:
38:34:47:28:dc:0b:b6:75:5a:ab:46:f4:7d:ab:a9:
83:8e:ec:71:64:92:ed:8a:86:e1:4a:4b:d2:52:7f:
56:98:29:cb:1f:74:cf:e5:61:ad:5a:80:55:ca:8e:
8f:17:f3:4a:40:f4:f6:ab:eb:5a:3b:4c:a5:ab:10:
22:cd:54:00:e2:89:84:dd:e7:64:bb:b3:7e:67:4d:
10:5d:47:62:78:4f:9c:f4:8a:0f:e2:36:bb:4e:70:
4a:3a:3a:74:48:bd:bd:2d:a8:47:14:96:6b:53:cb:
91:fa:98:82:54:4b:30:62:5b:44:40:74:90:ff:b4:
47:9f:66:6c:b0:4b:07:5b:4c:7a:74:77:1b:3a:c7:
34:4c:07:f4:79:3e:6b:12:1b:42:52:4f:6b:6b:76:
bd:4b:02:54:f7:92:4a:2e:9c:46:60:1b:f2:20:d3:
83:17:91:fe:04:ac:0f:3d:bd:30:7b:04:10:a3:4e:
f8:b8:a4:16:0e:ac:24:6c:29:f3:ac:7c:08:7b:ac:
18:c5:60:d0:08:5b:cb:c0:78:40:be:2d:76:2d:29:
55:9d:d5:1d:8e:db:0b:5e:39:ac:e8:95:ab:41:d1:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:EE:B3:F5:4E:E1:88:2B:45:90:02:9B:3D:7C:14:74:E7:ED:40
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/oxnus_VO4YgrRZACmz18FHTn7UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.85.0/24
194.85.105.0/24
194.190.138.0/24
194.190.141.0-194.190.142.255
194.190.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f2:69:47:63:4d:5d:60:6a:e4:39:ef:50:c0:85:28:b6:34:
98:20:41:1b:13:a5:50:aa:e4:4b:4a:0b:70:ec:0e:d4:fb:3a:
20:ff:8d:2d:ac:cd:13:0f:0c:c3:63:51:4f:58:c0:dd:38:3d:
e7:9b:9f:f9:fe:2a:28:d4:2e:f5:cb:c2:24:9b:d3:59:cb:5e:
82:f2:39:09:4e:eb:5e:cc:ee:9e:d0:a1:45:80:41:30:b0:c6:
40:77:77:34:4e:02:35:61:5e:c3:64:0e:0d:b2:9e:e6:88:c9:
58:ed:c6:4e:bd:f0:30:f8:54:fc:b6:75:4b:1e:0f:84:fb:a9:
f4:27:dc:a3:94:b8:92:fb:6d:85:97:1f:c1:c5:9b:00:68:cc:
de:49:4c:b6:a6:17:4d:ed:ac:fd:49:5d:b7:b0:9c:f7:19:9d:
5d:a8:13:e8:c1:db:49:7e:0c:d4:e3:be:7a:41:49:6b:d3:ad:
0d:ae:70:d4:4e:71:ba:9a:49:82:4d:ff:a4:f8:9b:02:a0:62:
eb:ed:6c:10:1e:82:b9:de:89:1b:6d:5d:49:ac:98:d6:b7:01:
f4:bf:d8:89:4d:70:b6:48:67:a9:31:bf:3e:50:82:35:bb:a7:
82:94:24:b7:cf:c4:d6:1c:50:46:a3:bc:f1:6c:63:64:1a:b4:
fc:9f:a1:ba
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYYHVTqypghVAVs6J8DME4c5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjMwMTMxMTAxNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzE5ZWViM2Y1NGVlMTg4MmI0NTkwMDI5YjNkN2MxNDc0ZTdlZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv5A2e6gsFpZtbARTbZ8ln0G/i1d
fyKVtpaimEM4NEco3Au2dVqrRvR9q6mDjuxxZJLtiobhSkvSUn9WmCnLH3TP5WGt
WoBVyo6PF/NKQPT2q+taO0ylqxAizVQA4omE3edku7N+Z00QXUdieE+c9IoP4ja7
TnBKOjp0SL29LahHFJZrU8uR+piCVEswYltEQHSQ/7RHn2ZssEsHW0x6dHcbOsc0
TAf0eT5rEhtCUk9ra3a9SwJU95JKLpxGYBvyINODF5H+BKwPPb0wewQQo074uKQW
DqwkbCnzrHwIe6wYxWDQCFvLwHhAvi12LSlVndUdjtsLXjms6JWrQdElIQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKMZ7rP1TuGIK0WQAps9fBR05+1AMB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvb3hudXNfVk80WWdyUlpBQ216MThGSFRuN1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAwehVAwQA
wlVpAwQAwr6KMAwDBADCvo0DBADCvo4DBADCvpEwDQYJKoZIhvcNAQELBQADggEB
AH7yaUdjTV1gauQ571DAhSi2NJggQRsTpVCq5EtKC3DsDtT7OiD/jS2szRMPDMNj
UU9YwN04Peebn/n+KijULvXLwiSb01nLXoLyOQlO617M7p7QoUWAQTCwxkB3dzRO
AjVhXsNkDg2ynuaIyVjtxk698DD4VPy2dUseD4T7qfQn3KOUuJL7bYWXH8HFmwBo
zN5JTLamF03trP1JXbewnPcZnV2oE+jB20l+DNTjvnpBSWvTrQ2ucNROcbqaSYJN
/6T4mwKgYuvtbBAegrneiRttXUmsmNa3AfS/2IlNcLZIZ6kxvz5QgjW7p4KUJLfP
xNYcUEajvPFsY2QatPyfobo=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net