Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/OfhBkZRJlBRWJi2mweEsKD_4Cy4.roa
File: OfhBkZRJlBRWJi2mweEsKD_4Cy4.roa (raw, json)
Hash identifier: vOC3eFriPOYsWtEXAlAsB6YDZHe/R4rvaDXDVZj+j0o=
Subject key identifier: 39:F8:41:91:94:49:94:14:56:26:2D:A6:C1:E1:2C:28:3F:F8:0B:2E
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 018BE152CB03DC743537890AFAD41519637D
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/OfhBkZRJlBRWJi2mweEsKD_4Cy4.roa
Signing time: Sat 18 Nov 2023 07:26:21 +0000
ROA not before: Sat 18 Nov 2023 07:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206495
IP address blocks: 194.9.56.0/23 maxlen: 23
194.150.70.0/23 maxlen: 23
194.150.68.0/23 maxlen: 23
185.186.242.0/24 maxlen: 24
194.9.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:52:cb:03:dc:74:35:37:89:0a:fa:d4:15:19:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Nov 18 07:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f841919449941456262da6c1e12c283ff80b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:ac:81:77:74:e6:58:95:f7:a9:c1:27:98:
ee:54:a9:91:58:00:32:33:18:33:9f:76:b3:60:3d:
9e:da:62:5d:e1:a7:2e:6a:e4:ba:27:b7:9c:1e:a0:
de:c2:6d:c4:7e:73:f2:cd:4f:e8:d8:86:30:7b:e8:
e5:d2:bd:99:fe:c9:1c:f9:e8:a9:37:21:08:66:35:
33:73:a5:22:3e:1b:6f:33:47:af:d9:cf:6e:2a:64:
18:5a:55:58:94:98:fc:2f:2e:c9:78:03:4b:70:a3:
ad:3e:1a:db:19:b2:78:1d:83:58:89:62:0c:13:bf:
f0:55:9f:98:82:f1:b3:c4:79:bf:52:aa:a5:a7:81:
78:cd:de:c1:35:9d:79:43:6e:cb:09:c3:be:e3:fb:
59:85:77:d3:ac:1d:ed:eb:ba:26:7f:05:11:ae:d3:
4e:b8:8e:47:f6:f2:4d:e2:d3:e7:79:a0:91:37:97:
3f:7e:7b:d7:18:00:3e:fc:23:47:4b:f6:2e:60:2b:
84:05:7e:83:b6:65:af:ec:02:d2:1b:b1:e2:2c:bb:
4b:33:20:87:5e:62:1b:79:1c:fa:35:55:2a:2e:22:
04:70:e7:3c:ae:2f:a5:b4:f1:c5:c6:88:1f:89:08:
77:ae:27:a2:32:c5:99:6e:dc:0e:05:1c:aa:6e:bd:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:41:91:94:49:94:14:56:26:2D:A6:C1:E1:2C:28:3F:F8:0B:2E
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/OfhBkZRJlBRWJi2mweEsKD_4Cy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.242.0/24
194.9.56.0/23
194.9.80.0/23
194.150.68.0/22
Signature Algorithm: sha256WithRSAEncryption
25:80:e8:db:58:e5:5a:d3:c4:b7:43:17:2f:81:3e:e2:44:b4:
06:d2:60:5e:96:7a:ee:f7:52:fc:0a:75:bb:bb:1e:7f:29:a0:
cb:9f:83:59:fd:ef:c8:83:3a:ce:3a:b8:f4:fb:c7:48:81:40:
32:2f:b4:79:96:ba:c5:0d:c2:35:b9:c6:7d:29:73:7c:f4:06:
c4:f1:07:b3:97:46:a0:bd:be:52:71:65:a2:39:72:90:58:4d:
2d:6a:98:76:1a:36:c0:48:1d:3a:63:20:71:6b:5b:69:ab:79:
42:5b:4a:5e:75:25:fd:c2:7e:8d:e7:2d:3f:8b:b7:09:05:af:
43:c1:22:98:a5:d3:44:d7:3e:c0:22:86:ac:e5:70:48:70:0b:
b4:72:43:32:17:e9:32:99:41:b7:99:2f:b8:1a:16:1c:cb:1a:
8e:2a:be:db:62:ea:8a:11:be:6e:9c:78:52:c0:eb:26:2d:2a:
1f:7e:87:c9:8c:c7:d7:c0:d2:91:9d:f5:f0:c4:76:41:4e:12:
88:50:8e:59:aa:f3:57:aa:a9:2c:c1:dd:12:0a:62:6a:b9:a7:
54:47:c5:fc:15:49:4d:98:1d:39:99:e8:e7:96:ef:f1:d5:04:
90:4a:a9:33:6f:24:ef:8c:4b:84:bb:e7:e0:86:88:e7:4c:ea:
fd:85:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org