Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oke7HCqfbh_XerqDSPJm999gY-Y.roa
File: oke7HCqfbh_XerqDSPJm999gY-Y.roa (raw, json)
Hash identifier: p1As8SAUn9c0NO5jfmlw3lPLLRabQy6F8GEZXtqs3Zk=
Subject key identifier: A2:47:BB:1C:2A:9F:6E:1F:D7:7A:BA:83:48:F2:66:F7:DF:60:63:E6
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649CC95ABF537FAB47E9C28CB3C3668
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oke7HCqfbh_XerqDSPJm999gY-Y.roa
Signing time: Mon 01 Jan 2024 18:29:34 +0000
ROA not before: Mon 01 Jan 2024 18:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203442
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 07:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:cc:95:ab:f5:37:fa:b4:7e:9c:28:cb:3c:36:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a247bb1c2a9f6e1fd77aba8348f266f7df6063e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:ff:df:02:47:86:26:a4:fc:4a:41:10:bb:
eb:34:52:e4:39:68:b4:a0:9c:ee:62:c1:a3:ca:b3:
9e:13:f4:88:4a:f9:63:45:2f:51:f0:48:1b:c0:2d:
f8:1c:16:9c:70:8e:9f:62:8d:dc:12:2f:07:58:30:
af:2b:0b:13:bb:14:57:a2:f9:bc:34:50:46:71:77:
5b:f0:ba:a2:4c:90:57:ce:dc:10:c2:d3:6b:53:b1:
70:39:ba:e6:28:45:e3:68:d7:7c:67:65:11:e9:05:
6a:1f:fe:6d:71:f7:ea:b3:3a:9e:c5:32:8a:1b:88:
58:28:16:eb:a9:bf:c3:db:f2:a3:02:4e:a3:2b:eb:
82:11:4e:92:79:f6:fe:d3:67:e8:99:aa:87:68:5b:
f7:1d:62:d6:3b:64:92:e2:18:bf:b2:cc:f2:9a:53:
5d:cf:30:4e:15:63:14:16:c6:ba:05:9a:0b:30:56:
1c:0d:20:b6:de:9b:89:74:e5:04:dd:4f:b6:99:99:
82:c4:d0:22:b5:4f:95:4b:92:70:a5:a5:c2:c5:49:
79:92:3a:aa:12:6b:13:cb:21:98:1f:f6:e2:9b:dc:
64:e3:61:54:94:af:0f:32:51:74:c8:7a:d6:8b:43:
4c:8e:85:5a:14:c3:b5:d3:47:14:2c:5b:df:e0:b9:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:BB:1C:2A:9F:6E:1F:D7:7A:BA:83:48:F2:66:F7:DF:60:63:E6
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oke7HCqfbh_XerqDSPJm999gY-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9c:30:8d:f0:d1:59:25:fc:79:dc:0d:58:57:d0:bb:15:93:
e6:4e:65:8d:59:13:24:52:37:ce:51:57:23:a9:c4:e7:e1:65:
5d:07:2e:e0:44:fd:06:8c:85:d9:b0:cd:6e:b5:f4:24:b4:89:
fb:42:be:27:7e:89:9c:0b:d3:c2:c7:25:18:bf:b7:21:26:68:
d1:b8:9a:ae:d2:6c:fc:f7:75:48:4a:c8:9c:62:8c:32:01:cc:
58:bd:10:55:02:20:6c:06:29:ae:32:36:96:54:a4:14:e7:8d:
50:1a:50:d9:07:6e:56:78:b2:8d:8b:90:0d:1c:c2:5a:d0:7c:
21:30:d9:4f:4b:eb:b9:f0:8e:d7:76:40:ee:6a:a6:f5:0a:61:
80:3c:6c:22:76:3a:ab:63:a9:18:20:6c:74:f8:c8:26:ce:60:
ef:ff:8d:a7:62:96:85:86:f8:73:75:26:44:8e:cd:7f:5a:be:
ef:0d:bb:37:be:e5:e1:a7:f9:7f:43:5e:56:cb:25:8c:a9:03:
f0:cb:25:94:66:53:ca:da:60:71:93:d5:09:73:cf:42:3a:e3:
26:83:29:96:e1:23:29:08:77:d4:9c:46:0b:a0:b3:76:a6:8d:
6b:8e:58:52:3d:fa:5e:bb:8a:0c:d5:e8:04:ab:30:96:91:66:
12:eb:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:22:09 2025 by rpki-client