Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/OMAFE6Afr2SLSftQiZfAqJYiNEw.roa
File: OMAFE6Afr2SLSftQiZfAqJYiNEw.roa (raw, json)
Hash identifier: p4pp6wQ7CIvxU5x6pi3jydYOwKpZ9LgsnpL8OLuSOss=
Subject key identifier: 38:C0:05:13:A0:1F:AF:64:8B:49:FB:50:89:97:C0:A8:96:22:34:4C
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 0187FA33187E1DE6E3C46A9F9D1EF27435E6
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/OMAFE6Afr2SLSftQiZfAqJYiNEw.roa
Signing time: Mon 08 May 2023 07:11:05 +0000
ROA not before: Mon 08 May 2023 07:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61094
IP address blocks: 194.56.75.0/24 maxlen: 24
194.56.72.0/23 maxlen: 24
194.56.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:33:18:7e:1d:e6:e3:c4:6a:9f:9d:1e:f2:74:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: May 8 07:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38c00513a01faf648b49fb508997c0a89622344c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:c7:a9:c3:3a:8a:2f:03:26:c0:94:ce:c4:
04:39:ae:ff:2a:ae:88:50:da:bd:2e:fc:10:01:ab:
21:72:a3:5c:fa:73:6d:20:8a:8b:e3:54:32:64:eb:
a3:01:c9:16:7e:46:72:43:94:7f:c0:b8:17:28:80:
22:c5:9d:7a:c5:66:2b:f5:5c:c8:90:43:af:c0:9d:
0f:37:f1:79:20:7f:8d:1a:74:d7:a1:d3:16:48:c8:
a7:94:12:c5:b6:97:6a:bf:22:c8:f4:c3:fa:3b:e2:
13:ea:4a:82:36:0a:79:bd:e0:2f:f8:d1:30:68:b4:
ad:81:db:c8:25:fe:1b:6e:ba:83:52:ae:14:c5:77:
24:b5:89:1d:eb:0e:25:be:37:c4:44:ea:ae:92:59:
8b:c1:3b:e5:61:72:12:55:b7:96:e9:e8:3f:a4:00:
64:e5:a6:6e:f5:73:04:a1:aa:6c:27:3f:ba:8a:33:
16:96:21:c5:53:f8:55:a1:fd:9d:37:de:7b:b1:c5:
a1:35:43:34:49:4e:90:87:39:e3:82:26:00:c0:f6:
28:74:a6:eb:90:bf:20:99:63:bc:5f:36:23:a1:b6:
55:40:b3:16:91:7b:ae:92:6e:c7:a3:59:07:06:66:
1d:1b:0b:6b:ac:f8:89:05:bb:9b:c1:c3:6c:5e:5b:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:05:13:A0:1F:AF:64:8B:49:FB:50:89:97:C0:A8:96:22:34:4C
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/OMAFE6Afr2SLSftQiZfAqJYiNEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.72.0/22
Signature Algorithm: sha256WithRSAEncryption
11:96:55:79:8b:68:d3:3d:76:23:da:85:9c:ef:06:a4:0f:52:
5e:25:94:e7:71:38:1c:d2:97:31:4f:80:ca:01:93:25:e6:0e:
09:97:5a:16:9c:f7:ef:bd:1c:05:0f:e5:7d:4f:68:fb:2a:df:
64:a8:30:14:dd:f1:85:71:10:7f:e7:51:a4:ee:ae:51:9e:b7:
19:07:49:63:55:f0:2e:0c:e6:29:b5:72:0e:54:44:97:d6:67:
27:e6:ad:2e:dd:db:bc:ed:0a:2b:dc:0d:65:5f:fb:f7:20:8e:
82:dc:b1:30:0a:94:a8:ed:a3:16:01:17:57:3c:b3:0e:4e:2b:
f8:b5:78:c2:71:c2:cf:c5:a5:6f:67:db:f2:6e:e2:7e:51:6e:
f4:d4:2c:2a:9f:e8:1a:b6:00:5e:8d:5f:35:07:d4:db:b5:05:
3e:25:51:e5:7f:d1:f9:46:69:e1:9c:55:78:fd:78:09:ef:b5:
d0:54:1f:d6:28:89:58:a1:d4:ee:76:be:75:64:74:54:7a:df:
f7:2f:df:a5:37:d3:b4:a8:62:e1:59:c6:84:ba:4a:87:f8:72:
cd:92:8d:59:22:3e:f0:9b:fa:d7:cd:97:8a:2b:aa:dc:ad:57:
d1:ec:9f:cb:a9:6a:09:f8:11:69:ce:84:ba:b6:c8:ba:7d:51:
ba:75:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:32 2024 by rpki-client on console.sobornost.net