Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Ohou1liLCmZ-7rpPdGk6bcPWQKU.roa
File: Ohou1liLCmZ-7rpPdGk6bcPWQKU.roa (raw, json)
Hash identifier: Xs3F3WZDg/4DTaK4At9dM28UzIkwsPA4X/rhkX9GADk=
Subject key identifier: 3A:1A:2E:D6:58:8B:0A:66:7E:EE:BA:4F:74:69:3A:6D:C3:D6:40:A5
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 018572E80701EFC0DB286C10033DE88C2CF2
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Ohou1liLCmZ-7rpPdGk6bcPWQKU.roa
Signing time: Mon 02 Jan 2023 14:34:46 +0000
ROA not before: Mon 02 Jan 2023 14:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57935
IP address blocks: 92.119.56.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:07:01:ef:c0:db:28:6c:10:03:3d:e8:8c:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 2 14:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a1a2ed6588b0a667eeeba4f74693a6dc3d640a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:ec:2b:9d:ec:cd:37:54:ed:f9:3e:42:ba:
15:3d:5c:61:4d:eb:55:f3:97:97:ae:ef:5f:db:37:
4a:74:f0:0f:7e:6b:4c:b8:b3:59:fa:33:00:8e:48:
80:80:39:88:14:9f:ed:33:eb:35:86:e0:ee:05:74:
95:0a:50:74:3f:c6:c4:fb:b8:91:ed:28:1b:b5:d1:
24:58:21:1f:3f:09:26:4d:cc:00:ce:e9:a6:7c:5d:
e7:bc:9a:28:d7:39:d3:93:f9:e0:29:22:69:24:10:
11:cc:1b:fe:3e:95:24:8e:36:3b:d9:f1:34:44:c3:
3d:29:83:92:79:5f:97:e5:f0:60:f2:b9:ee:41:c3:
1e:12:07:31:40:76:f9:71:20:ce:56:16:63:d6:d6:
da:15:66:c4:6a:e2:51:ce:e9:5b:a1:fe:da:ff:80:
a5:7e:c2:21:17:24:49:4d:fd:83:d1:fa:1e:dc:94:
fd:bf:a3:24:82:6c:53:57:ad:1f:5d:d2:57:9e:e8:
9b:65:39:bf:3f:b4:e4:f6:7b:cf:45:cf:61:2d:1f:
ba:e8:9d:19:01:f7:6e:ee:61:e0:50:3c:81:1e:80:
13:30:51:b7:ca:fc:05:68:23:0c:15:e0:c0:03:f0:
a5:fc:2c:5b:db:e3:70:1b:d6:ba:19:58:17:c1:e0:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:2E:D6:58:8B:0A:66:7E:EE:BA:4F:74:69:3A:6D:C3:D6:40:A5
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/Ohou1liLCmZ-7rpPdGk6bcPWQKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.56.0/24
92.119.59.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:44:1b:45:6a:46:ac:74:34:75:d0:6e:8c:5c:a8:f4:88:
23:f0:36:66:cc:0f:71:e0:e8:7b:a9:34:96:b1:0f:73:ba:7b:
f6:a3:98:72:d1:77:13:5f:ab:67:40:73:5b:ce:2d:6e:ab:21:
1b:af:e5:13:75:2b:4e:92:ce:24:4d:aa:e7:91:f9:40:37:37:
b1:be:2b:82:0f:54:55:76:e5:eb:b8:82:f0:ae:3d:9e:b9:28:
3e:e5:c4:f9:59:3c:f4:63:5a:49:a4:6a:c8:01:b5:83:21:13:
c1:a6:30:3b:ba:8d:2d:3e:b8:df:3a:d5:d4:61:ba:e8:99:5d:
a5:cc:fa:fd:fc:b6:b1:a7:73:16:c5:51:96:04:e5:90:c6:6f:
cd:9d:07:4d:61:55:fb:ca:53:77:fb:a4:81:ac:16:d2:b6:32:
ca:d1:94:0f:86:18:f9:c7:40:45:20:65:eb:78:13:23:a1:91:
a4:89:63:d6:e7:2b:7e:ab:e7:4d:2e:66:b8:d0:92:3b:cd:11:
6e:08:ef:2b:e2:d5:76:47:8e:57:89:f0:68:8a:8c:68:52:6a:
cc:21:55:8b:68:d1:94:21:52:1e:68:75:1b:8e:d7:5f:59:69:
3b:7f:bf:8a:f6:74:21:1d:a9:32:45:f0:0a:ef:71:63:a5:00:
14:6e:c3:7b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVy6AcB78DbKGwQAz3ojCzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGFmNmZkYzE2ZDY4YWUyNmFhMGVhYjU2MjNlNmJlMjE3
MDM2YzEwHhcNMjMwMTAyMTQzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTFhMmVkNjU4OGIwYTY2N2VlZWJhNGY3NDY5M2E2ZGMzZDY0MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5bsK53szTdU7fk+QroVPVxhTetV
85eXru9f2zdKdPAPfmtMuLNZ+jMAjkiAgDmIFJ/tM+s1huDuBXSVClB0P8bE+7iR
7SgbtdEkWCEfPwkmTcwAzummfF3nvJoo1znTk/ngKSJpJBARzBv+PpUkjjY72fE0
RMM9KYOSeV+X5fBg8rnuQcMeEgcxQHb5cSDOVhZj1tbaFWbEauJRzulbof7a/4Cl
fsIhFyRJTf2D0foe3JT9v6MkgmxTV60fXdJXnuibZTm/P7Tk9nvPRc9hLR+66J0Z
Afdu7mHgUDyBHoATMFG3yvwFaCMMFeDAA/Cl/Cxb2+NwG9a6GVgXweBwRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDoaLtZYiwpmfu66T3RpOm3D1kClMB8GA1UdIwQY
MBaAFOxK9v3BbWiuJqoOq1Yj5r4hcDbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0VyMl9jRnRhSzRtcWc2clZpUG12aUZ3TnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ZGM4NWMtYjBhMS00OGQ5LTk4NzAt
MzgyNWJmMzNlNGVjLzEvT2hvdTFsaUxDbVotN3JwUGRHazZiY1BXUUtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ZGM4NWMtYjBhMS00OGQ5LTk4NzAtMzgyNWJmMzNlNGVj
LzEvN0VyMl9jRnRhSzRtcWc2clZpUG12aUZ3TnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXHc4AwQA
XHc7AwQAuUlxAwQAuUlzMA0GCSqGSIb3DQEBCwUAA4IBAQB/wUQbRWpGrHQ0ddBu
jFyo9Igj8DZmzA9x4Oh7qTSWsQ9zunv2o5hy0XcTX6tnQHNbzi1uqyEbr+UTdStO
ks4kTarnkflANzexviuCD1RVduXruILwrj2euSg+5cT5WTz0Y1pJpGrIAbWDIRPB
pjA7uo0tPrjfOtXUYbromV2lzPr9/Laxp3MWxVGWBOWQxm/NnQdNYVX7ylN3+6SB
rBbStjLK0ZQPhhj5x0BFIGXreBMjoZGkiWPW5yt+q+dNLma40JI7zRFuCO8r4tV2
R45XifBoioxoUmrMIVWLaNGUIVIeaHUbjtdfWWk7f7+K9nQhHakyRfAK73FjpQAU
bsN7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org