Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/OEfMzP-zzfSNe4IFiBNdZqCyZiA.roa
File: OEfMzP-zzfSNe4IFiBNdZqCyZiA.roa (raw, json)
Hash identifier: lJudsDp30jk1cRjl0r7U952Hh0vQEsulgGVlDsJYl/A=
Subject key identifier: 38:47:CC:CC:FF:B3:CD:F4:8D:7B:82:05:88:13:5D:66:A0:B2:66:20
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 01872881854190D6C1DEBE89FCA1D6B5E7C1
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/OEfMzP-zzfSNe4IFiBNdZqCyZiA.roa
Signing time: Tue 28 Mar 2023 13:56:29 +0000
ROA not before: Tue 28 Mar 2023 13:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399976
IP address blocks: 194.54.146.0/24 maxlen: 24
2a12:c6c0::/29 maxlen: 64
2a12:c6c4::/32 maxlen: 48
2a12:c6c7::/32 maxlen: 48
2a12:c6c6::/32 maxlen: 48
2a12:c6c5::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:81:85:41:90:d6:c1:de:be:89:fc:a1:d6:b5:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Mar 28 13:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3847ccccffb3cdf48d7b820588135d66a0b26620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:aa:f9:60:59:95:2c:b6:76:2d:82:14:76:
9e:59:5e:b7:2d:0a:6b:de:33:bf:5f:ea:7d:cd:7a:
23:d0:86:9c:d6:20:64:5a:9b:1c:4f:4c:6f:3d:84:
4a:ed:aa:74:08:94:e4:6a:52:62:87:56:30:5f:03:
91:85:ab:10:0e:bd:81:97:96:93:70:4f:d9:76:49:
5d:9f:3a:d2:15:ec:16:a3:77:e3:98:8b:0e:8c:c5:
ff:be:bc:ae:a1:91:5c:ff:d3:0d:4e:06:7b:fb:d0:
51:b6:b0:ed:d5:98:2a:11:e6:2b:fc:2d:34:1c:0c:
4b:19:16:e1:c6:6c:a0:83:85:e6:05:29:05:d7:da:
bd:90:a8:01:bf:3b:68:e2:cb:70:92:83:74:a8:fb:
34:0b:c4:e7:f4:f6:51:01:fa:c8:e5:5a:3b:4a:f2:
a1:b9:a1:fa:df:78:25:22:cc:87:70:05:49:f2:47:
ab:11:11:7d:3f:f7:62:81:b2:22:2a:b2:78:4a:2d:
5d:e6:66:64:c2:4c:28:8d:d7:a2:4e:b1:2a:0b:96:
a2:5b:ed:e8:91:59:f3:8a:d2:23:e1:7d:8e:f2:b3:
1c:ff:48:0b:ca:b9:4c:8a:4b:27:ad:ff:ab:47:16:
cf:ba:4d:45:04:5d:fe:f3:e1:a5:f1:c2:03:79:13:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:CC:CC:FF:B3:CD:F4:8D:7B:82:05:88:13:5D:66:A0:B2:66:20
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/OEfMzP-zzfSNe4IFiBNdZqCyZiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.146.0/24
IPv6:
2a12:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:6d:47:fc:e3:b5:ba:d5:99:7f:a9:88:22:3a:cb:9d:d4:b8:
33:89:a5:e1:a1:0e:72:9b:6f:bc:ca:5d:ba:4c:4b:81:69:3b:
de:df:95:d9:e5:bd:bf:b2:f0:04:c1:7b:8c:6b:09:35:26:ae:
af:44:21:60:f0:7c:2e:d6:34:58:30:3a:7b:30:2e:1d:a3:16:
f6:03:84:1b:cd:5e:c1:98:1e:17:bb:4f:e8:92:f1:cd:e9:a9:
bc:65:db:03:40:15:94:ea:b1:26:00:85:ff:d5:37:54:75:5c:
79:c3:e3:6b:78:34:d0:bf:cb:95:83:4e:23:01:6d:df:83:13:
cf:73:a4:62:e4:25:d8:e2:34:9b:1f:0d:ac:fe:17:76:e0:d2:
81:33:9b:05:b2:9e:e8:1d:cb:5e:d8:f6:f5:c5:71:4d:b5:a7:
ab:33:75:64:f8:69:89:65:2d:cc:2f:78:4c:b4:11:17:eb:47:
75:f9:c7:99:ba:17:e8:74:ff:96:75:97:31:80:84:0b:67:30:
54:dd:e2:1d:59:4e:1b:1e:be:80:05:8c:f1:f9:ab:67:c6:ef:
24:f8:48:4d:ae:b7:73:6f:00:da:cc:93:bb:c9:08:fb:b4:51:
e0:ed:38:07:53:b2:6d:34:53:f6:c7:a0:6c:25:7b:93:7b:3c:
dd:11:b0:8b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYcogYVBkNbB3r6J/KHWtefBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjMwMzI4MTM1NjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQ3Y2NjY2ZmYjNjZGY0OGQ3YjgyMDU4ODEzNWQ2NmEwYjI2NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth6q+WBZlSy2di2CFHaeWV63LQpr
3jO/X+p9zXoj0Iac1iBkWpscT0xvPYRK7ap0CJTkalJih1YwXwORhasQDr2Bl5aT
cE/ZdkldnzrSFewWo3fjmIsOjMX/vryuoZFc/9MNTgZ7+9BRtrDt1ZgqEeYr/C00
HAxLGRbhxmygg4XmBSkF19q9kKgBvzto4stwkoN0qPs0C8Tn9PZRAfrI5Vo7SvKh
uaH633glIsyHcAVJ8kerERF9P/digbIiKrJ4Si1d5mZkwkwojdeiTrEqC5aiW+3o
kVnzitIj4X2O8rMc/0gLyrlMiksnrf+rRxbPuk1FBF3+8+Gl8cIDeRMyjwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDhHzMz/s830jXuCBYgTXWagsmYgMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvT0VmTXpQLXp6ZlNOZTRJRmlCTmRacUN5WmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwjaSMA0E
AgACMAcDBQMqEsbAMA0GCSqGSIb3DQEBCwUAA4IBAQBAbUf847W61Zl/qYgiOsud
1LgziaXhoQ5ym2+8yl26TEuBaTve35XZ5b2/svAEwXuMawk1Jq6vRCFg8Hwu1jRY
MDp7MC4doxb2A4QbzV7BmB4Xu0/okvHN6am8ZdsDQBWU6rEmAIX/1TdUdVx5w+Nr
eDTQv8uVg04jAW3fgxPPc6Ri5CXY4jSbHw2s/hd24NKBM5sFsp7oHcte2Pb1xXFN
taerM3Vk+GmJZS3ML3hMtBEX60d1+ceZuhfodP+WdZcxgIQLZzBU3eIdWU4bHr6A
BYzx+atnxu8k+EhNrrdzbwDazJO7yQj7tFHg7TgHU7JtNFP2x6BsJXuTezzdEbCL
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:33 2024 by rpki-client on console.sobornost.net