Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rOmyI2WlcrqTM5tzS1OMGFnBurM.roa
File: rOmyI2WlcrqTM5tzS1OMGFnBurM.roa (raw, json)
Hash identifier: 5ArTjMVAaLHMRvDja99jxAu6zwtnpUWeYCVkOsgx2k0=
Subject key identifier: AC:E9:B2:23:65:A5:72:BA:93:33:9B:73:4B:53:8C:18:59:C1:BA:B3
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB8410A679773963BA5140E35D9A6FB
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rOmyI2WlcrqTM5tzS1OMGFnBurM.roa
Signing time: Sun 01 Jan 2023 09:44:52 +0000
ROA not before: Sun 01 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16236
IP address blocks: 194.2.86.0/24 maxlen: 24
194.250.98.0/24 maxlen: 24
194.2.132.0/24 maxlen: 24
194.2.133.0/24 maxlen: 24
90.115.208.0/24 maxlen: 24
90.115.209.0/24 maxlen: 24
194.3.4.0/24 maxlen: 24
194.2.57.0/24 maxlen: 24
81.255.178.0/24 maxlen: 24
194.2.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:41:0a:67:97:73:96:3b:a5:14:0e:35:d9:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ace9b22365a572ba93339b734b538c1859c1bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:cb:fb:a3:93:8b:47:30:aa:26:3a:d0:80:
80:46:cc:66:88:a9:a7:e1:a9:0a:9d:ac:58:06:1f:
18:89:b8:f5:5a:0a:fd:b3:d3:e4:cf:3d:19:97:5d:
26:50:b9:1f:cc:b8:ef:8d:ae:3b:70:c2:a1:26:ff:
37:74:10:68:1d:3f:28:c7:98:5e:88:a4:a7:57:2e:
e1:ac:cc:e7:9e:87:4f:72:ea:91:f3:87:06:94:dc:
a9:29:63:4b:60:5c:56:c9:11:95:33:b5:19:04:1e:
c5:18:1e:06:0f:13:2d:5f:6d:a6:08:89:8b:7a:8a:
af:38:41:47:67:f4:c4:87:fc:31:91:3d:a3:48:cb:
d2:6b:86:1d:77:93:d8:69:30:53:47:37:92:c2:5c:
3e:9d:5e:db:27:3b:2b:3b:86:39:19:bb:54:f0:ef:
8b:1b:99:2c:79:36:c1:c8:8c:6f:f3:3e:fa:d7:50:
32:86:87:19:21:dc:71:ac:67:33:6e:dd:76:cf:b0:
f6:8d:01:30:5b:b4:19:6b:04:aa:08:b0:b9:43:e0:
af:f8:ec:d2:12:e0:e7:78:19:0d:43:ff:fd:1e:bf:
a7:1d:37:59:b6:f2:58:af:8c:76:b4:74:73:2e:c0:
ee:c3:39:f8:b7:4c:9b:75:a3:9b:96:55:46:c4:84:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:B2:23:65:A5:72:BA:93:33:9B:73:4B:53:8C:18:59:C1:BA:B3
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rOmyI2WlcrqTM5tzS1OMGFnBurM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.178.0/24
90.115.208.0/23
194.2.56.0/23
194.2.86.0/24
194.2.132.0/23
194.3.4.0/24
194.250.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:b6:1e:2a:0d:5d:0c:68:e4:f6:a2:11:ae:d7:a7:06:da:
46:c0:ba:e7:d2:d6:23:73:d2:d9:38:95:27:02:24:01:e0:ac:
23:3a:42:78:3d:6a:5e:f9:5e:f4:ce:bf:d8:5c:4b:15:1d:29:
70:68:d4:de:06:37:f8:85:aa:e6:9e:5f:cc:3a:c6:d5:f6:c5:
57:95:c3:8e:3a:9a:7b:dd:ae:ef:93:36:75:ca:47:13:c2:5b:
77:9d:05:ca:c4:cd:45:61:36:78:63:df:ce:19:0a:cf:23:f3:
f3:0a:72:40:ce:f5:39:cb:46:e1:51:6c:06:29:9a:3e:62:5a:
24:89:d0:6b:4c:e9:a8:09:cd:2d:7d:01:40:47:5b:3e:42:18:
fb:b3:f2:14:84:93:f7:b9:dc:0d:76:02:6d:56:46:fd:9d:8d:
3a:86:58:3c:d7:2a:91:c3:8c:f3:a4:b9:39:77:aa:40:dd:27:
18:cb:87:36:de:4c:11:c6:f5:fc:f9:b5:85:c6:30:d3:a1:6d:
93:eb:5d:43:08:d0:f5:ad:4b:f8:9e:bc:63:27:a0:c2:68:9c:
59:68:35:b6:ea:9c:ed:40:a6:30:2b:d5:35:a3:75:aa:d8:6a:
42:e8:b4:f3:ca:a3:84:cb:b5:d1:1e:a2:68:80:fc:00:32:3e:
a6:58:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org