Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/OF1B7uHLp8WR_qno1uZ9gXMymZc.roa
File: OF1B7uHLp8WR_qno1uZ9gXMymZc.roa (raw, json)
Hash identifier: 0djQoVPzilz2VUFzzajPu19MH2mIpSUOIMnhpLGe7po=
Subject key identifier: 38:5D:41:EE:E1:CB:A7:C5:91:FE:A9:E8:D6:E6:7D:81:73:32:99:97
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 01856BAEE3B4702856AF0F050D3CA834629D
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/OF1B7uHLp8WR_qno1uZ9gXMymZc.roa
Signing time: Sun 01 Jan 2023 04:55:01 +0000
ROA not before: Sun 01 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9255
IP address blocks: 194.124.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:e3:b4:70:28:56:af:0f:05:0d:3c:a8:34:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Jan 1 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=385d41eee1cba7c591fea9e8d6e67d8173329997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:be:06:65:90:75:16:b1:78:e4:41:28:9a:
70:33:41:4c:5f:c5:5c:c0:91:83:1d:7d:01:6c:5d:
f8:58:b7:d1:00:88:3f:23:91:11:37:ef:0e:9b:d8:
42:d3:13:5b:14:89:7b:06:98:29:1b:ab:2f:1f:3d:
1b:18:2a:92:73:8a:86:02:dc:b9:a7:9f:4c:3f:b2:
5a:3c:2c:71:95:64:cc:4e:c2:f2:49:6d:f6:23:86:
14:1f:38:22:ea:63:d8:cc:99:f4:04:6c:df:ca:2c:
f3:81:c7:f9:0a:57:b3:35:e3:94:bb:75:20:aa:7d:
38:c5:05:67:9a:f4:3e:e4:5e:99:4f:46:11:2e:e9:
c6:8d:c9:e8:7b:22:88:97:1f:f2:3a:f3:b0:5a:11:
25:9f:4c:78:76:e1:98:c5:29:8c:b7:27:cb:33:41:
b0:88:96:33:c6:d4:3d:fc:5e:d0:12:aa:ec:a4:74:
f9:6f:cc:a0:44:96:68:c1:3f:aa:9a:33:2f:a0:72:
d2:a7:95:27:2c:fd:1c:40:c6:2a:e0:c3:26:a9:41:
b2:64:1d:a5:b0:da:60:0b:35:40:a5:86:3f:ea:5c:
9c:e9:38:b5:76:98:ea:00:c0:f1:f4:4a:a5:ef:55:
7a:8b:63:bc:51:76:6d:d4:5c:f1:67:89:68:38:ac:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:41:EE:E1:CB:A7:C5:91:FE:A9:E8:D6:E6:7D:81:73:32:99:97
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/OF1B7uHLp8WR_qno1uZ9gXMymZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.188.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0c:80:95:a9:d5:bc:9d:41:41:95:af:1a:a1:6f:94:af:17:
13:e9:5a:ab:67:5c:b9:1d:d0:83:9d:bf:d4:ac:b0:e5:5c:16:
28:70:ac:70:e8:18:9c:c0:04:f9:28:28:0c:a4:d7:a5:8c:1b:
22:77:22:5e:04:b0:9a:77:7e:ae:a0:09:da:95:8f:bb:82:24:
cb:17:72:1c:32:48:92:6d:33:31:a3:aa:fc:0c:a9:10:f5:3b:
7d:13:66:45:a6:e2:fb:e3:c3:96:54:c7:57:40:36:7f:c1:c6:
f2:a2:ca:ec:17:6a:b0:d9:cb:1e:03:10:0c:d0:29:ce:cc:2f:
6a:c7:fe:cf:fa:21:ac:80:bf:49:81:72:e2:42:a4:14:e0:2f:
43:49:31:69:d4:e0:a5:a1:22:b4:48:0d:3e:ea:e2:1d:58:2b:
3e:66:ca:10:96:e5:18:a7:42:ba:6f:ec:73:4c:c3:b8:cb:86:
ec:12:7c:4b:bf:52:58:d1:3c:29:0c:41:9c:e0:0f:8e:30:32:
c4:4b:29:0c:19:b7:5b:2b:58:2f:a7:ed:f1:e1:27:fb:db:a2:
72:e8:c9:ad:dd:08:c3:df:8f:d8:4e:69:d8:d9:4f:dd:cc:43:
41:4b:b0:ba:47:46:77:4b:0f:76:aa:7f:a3:24:1d:86:49:d3:
1a:74:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org