Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oMBRrwdqKVb29iir5dqajj3ANgo.roa
File: oMBRrwdqKVb29iir5dqajj3ANgo.roa (raw, json)
Hash identifier: rvMNjavMkd7mHPB4kw3IMEpimbiQ3uXfMuWIzpIIAYM=
Subject key identifier: A0:C0:51:AF:07:6A:29:56:F6:F6:28:AB:E5:DA:9A:8E:3D:C0:36:0A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0187E61693F38F14F9F6BB88F4244657CAE4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oMBRrwdqKVb29iir5dqajj3ANgo.roa
Signing time: Thu 04 May 2023 09:27:32 +0000
ROA not before: Thu 04 May 2023 09:27:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 89.185.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 22:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:16:93:f3:8f:14:f9:f6:bb:88:f4:24:46:57:ca:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 4 09:27:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0c051af076a2956f6f628abe5da9a8e3dc0360a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:b2:d6:1a:f2:31:34:0b:38:5c:da:1f:20:
a7:c9:37:c4:8c:da:1b:76:b1:f4:d0:4e:f0:6a:f1:
16:6e:fd:df:17:6a:aa:39:62:6f:24:38:21:ce:ae:
bb:2e:66:85:6b:97:ae:f5:9e:2e:23:ce:39:ff:54:
93:ea:d0:1a:00:f3:e4:16:40:22:aa:a4:a1:11:31:
c0:11:df:ad:68:0b:67:f4:80:c0:e1:03:70:79:5f:
71:1c:6f:5b:1f:28:45:cd:8c:a3:82:f5:95:ce:ac:
0f:1e:df:6c:b4:98:25:c0:fb:61:46:56:63:e0:30:
5e:24:a9:a4:c6:a6:23:e2:e9:f8:78:41:20:10:b5:
51:2e:45:e7:65:7c:5b:d7:64:ac:71:0e:e9:57:87:
8e:cd:49:08:83:9b:45:5e:34:7e:c0:d8:b3:8a:23:
96:64:12:ae:5b:23:b4:f9:fb:9f:2a:44:72:8b:44:
a4:85:08:c2:8e:a5:47:cb:e2:de:6a:51:38:17:d1:
86:74:4a:8a:36:1d:1c:fc:b0:89:56:85:a9:a2:8e:
16:89:90:2e:b8:ee:a0:45:b1:48:6a:55:e4:95:c6:
c3:34:21:82:f2:a1:9d:0f:bf:72:1e:cc:3f:b1:83:
eb:4f:3a:e4:e4:b2:39:05:f2:56:a2:97:f6:44:01:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C0:51:AF:07:6A:29:56:F6:F6:28:AB:E5:DA:9A:8E:3D:C0:36:0A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oMBRrwdqKVb29iir5dqajj3ANgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:59:3d:e3:c7:86:e0:a8:25:43:97:ea:b1:a8:ed:af:95:32:
ad:46:40:e8:4d:58:d9:2b:37:8d:3c:4a:5e:8d:85:99:d1:e3:
0e:e2:83:97:32:86:7a:fb:52:6b:4a:09:ce:e9:cc:45:92:03:
00:f9:a9:d3:34:91:23:7e:ba:3c:55:0f:41:66:2f:fb:8b:93:
59:ab:34:9c:45:4e:1a:5d:32:07:ef:da:d8:ac:fb:b0:51:77:
9d:4a:fa:e8:db:9b:ae:88:dd:ab:05:6c:d8:d6:76:05:37:b5:
30:d2:c6:f8:1d:a0:36:e1:45:c3:cd:9b:de:71:0c:11:1e:3f:
4c:0d:02:d1:56:21:bf:ab:36:4b:49:44:f3:6d:5c:f7:9a:85:
18:ec:21:a4:72:82:f7:2c:99:bc:f8:2e:d1:a6:7b:6c:ea:d1:
21:b3:c4:0f:93:58:de:04:52:2c:69:a4:98:8e:70:dd:96:f7:
5a:3a:0b:2e:e7:83:36:84:6f:16:94:4f:e7:b8:be:67:99:37:
20:2d:3b:14:52:3b:4d:c7:b3:22:be:1f:91:65:91:f1:45:e0:
a3:fb:c7:54:9a:73:f1:58:57:54:16:30:45:96:9a:65:b0:bf:
43:b2:9e:43:bb:52:ea:38:38:f5:fc:7c:a0:c8:5c:b0:68:3b:
70:bd:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org