Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/OtbPg3jlZDaOmPvDaWkOvLGEJ0A.roa
File: OtbPg3jlZDaOmPvDaWkOvLGEJ0A.roa (raw, json)
Hash identifier: bTZ5vPEokwJZpetCHcGeSaFA+qhS2h3brfA2e0iTxq0=
Subject key identifier: 3A:D6:CF:83:78:E5:64:36:8E:98:FB:C3:69:69:0E:BC:B1:84:27:40
Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial: 0185704BE538D69820E3421AB3D74C268C34
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/OtbPg3jlZDaOmPvDaWkOvLGEJ0A.roa
Signing time: Mon 02 Jan 2023 02:25:00 +0000
ROA not before: Mon 02 Jan 2023 02:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198491
IP address blocks: 195.85.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:e5:38:d6:98:20:e3:42:1a:b3:d7:4c:26:8c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Validity
Not Before: Jan 2 02:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ad6cf8378e564368e98fbc369690ebcb1842740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:cb:c4:28:d1:6e:d7:dd:96:be:5f:d9:a3:
98:83:52:87:47:d7:51:e2:00:49:01:e9:07:c1:4f:
76:78:8d:43:13:64:22:90:d4:02:5e:79:59:6b:26:
02:d0:73:47:08:f9:b9:60:fd:b7:ca:4f:0a:e1:ec:
f1:c9:69:88:23:f4:12:e6:92:9d:28:01:54:ce:1d:
bc:49:2d:f9:ef:5e:82:fc:a5:df:57:6c:15:b7:f4:
d8:c3:28:a7:70:12:82:1f:88:c6:bc:09:d9:2d:13:
ec:fc:ec:07:eb:fb:34:bb:75:1d:cf:ee:23:3a:02:
79:3a:f2:3d:a7:11:2a:54:a6:ac:82:64:ec:09:96:
06:9e:a4:77:0b:fa:24:a4:4a:8c:52:14:5c:2d:21:
0f:51:ba:a3:fa:30:29:20:31:54:07:62:38:bb:1a:
38:fa:9f:4f:fe:ee:b9:b6:c2:96:0c:5c:74:82:8f:
24:47:99:ae:67:f5:39:b0:50:23:ab:f9:9c:58:d0:
42:72:25:04:90:5a:44:a9:cf:06:9f:ec:77:95:71:
93:6d:33:3c:e7:22:9a:c9:c6:87:92:40:1d:0a:02:
fa:2a:25:ca:ed:57:1d:75:07:1e:98:db:9d:f1:ce:
25:dc:05:9a:b1:cc:52:d8:06:1e:81:8d:e0:d7:c6:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:CF:83:78:E5:64:36:8E:98:FB:C3:69:69:0E:BC:B1:84:27:40
X509v3 Authority Key Identifier:
keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/OtbPg3jlZDaOmPvDaWkOvLGEJ0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b1:2e:a2:b8:1c:06:1b:53:b7:14:33:14:9a:f1:27:6b:71:
d3:9d:cc:4d:38:ad:6e:6c:e7:09:20:f8:e1:26:5a:2f:0b:55:
70:f8:2e:2c:12:95:27:36:62:87:c5:8d:c5:9f:e2:c4:62:71:
e3:11:cb:e8:60:19:e3:c6:0a:b9:03:6a:0e:d1:c2:cb:d7:d2:
42:13:76:e3:a7:dc:ad:14:40:3e:65:9f:39:b5:08:5b:84:b6:
ff:7b:bd:f8:66:be:76:ff:1c:62:56:84:d1:ac:b9:ab:91:c3:
08:f9:94:cf:b4:27:1f:86:ce:95:21:d6:90:03:f0:87:51:52:
49:3c:8a:63:b8:95:c5:5d:eb:aa:bd:36:32:bf:90:85:7a:6c:
0c:e7:2f:12:66:b1:75:06:f5:ed:2d:fb:c5:a8:9f:33:a4:51:
9d:f6:19:d0:a3:bc:b4:ea:64:e4:f6:0f:05:7c:92:88:26:4a:
fa:fc:d1:04:d3:f0:5d:82:73:66:cf:45:93:fd:6c:2e:45:c3:
77:49:cd:d9:c2:04:1b:dd:66:c3:c9:ee:14:4d:c6:16:ca:df:
55:a7:b5:be:bb:24:e1:ee:c7:fa:62:be:9d:a8:60:0e:e2:7c:
c3:61:b0:f9:af:b6:e4:96:3b:88:03:16:ba:39:3f:b9:ff:c2:
74:ff:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:28 2024 by rpki-client on console-fra.rpki-client.org