Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/Ovb_dhIE1_960GPNDwmr-IWzAqE.roa
File: Ovb_dhIE1_960GPNDwmr-IWzAqE.roa (raw, json)
Hash identifier: Bhae0tPZOF0IL3Ak9xWEjk9PmZjrMUsp/67Liwkm7iI=
Subject key identifier: 3A:F6:FF:76:12:04:D7:FF:7A:D0:63:CD:0F:09:AB:F8:85:B3:02:A1
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 018FFC33DAC3F95F8E97F9BF21F8CF730C20
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/Ovb_dhIE1_960GPNDwmr-IWzAqE.roa
Signing time: Sun 09 Jun 2024 08:53:27 +0000
ROA not before: Sun 09 Jun 2024 08:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207724
IP address blocks: 92.114.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 11:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fc:33:da:c3:f9:5f:8e:97:f9:bf:21:f8:cf:73:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jun 9 08:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3af6ff761204d7ff7ad063cd0f09abf885b302a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:2e:15:1a:5d:d4:a7:ee:13:61:f1:e1:cd:
96:e0:38:18:3d:c9:a3:b2:cc:5d:17:56:03:0f:23:
3e:ee:f3:59:a7:d0:85:1a:36:26:aa:e3:42:8c:90:
9c:90:a0:94:34:70:fd:39:69:70:e4:f6:a9:cd:9c:
85:6d:51:d5:ad:ec:97:50:ae:5f:95:c0:e7:e6:fd:
b6:7a:b6:cf:21:8e:80:27:8a:f2:b4:d2:57:9e:11:
66:7e:3a:7e:b6:0a:7b:b1:5a:98:e8:14:6a:c6:42:
4a:b2:82:7c:42:bd:65:dc:cb:fd:28:a4:e7:27:8e:
ea:9e:0b:f4:99:b5:b0:66:aa:17:df:de:f3:bf:6e:
9f:61:32:c7:5f:b4:a6:f2:b4:a2:89:e8:17:95:fc:
9c:d8:25:d5:6a:ec:cc:18:bb:3b:30:37:4c:40:61:
37:1b:55:1f:2a:c5:7c:56:f5:75:a6:c7:28:b3:56:
eb:45:95:76:b6:8e:de:c3:dc:12:6b:70:63:28:5a:
64:25:56:04:38:3b:28:d8:fc:5d:c4:73:28:72:83:
f6:04:e0:ad:d4:3e:c9:cf:83:76:38:d7:01:1c:5a:
e1:de:55:a8:1f:db:e4:5f:bb:84:da:1e:4a:e1:07:
24:10:d1:16:9a:b8:2e:b4:04:1c:f1:ff:e8:06:5f:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:FF:76:12:04:D7:FF:7A:D0:63:CD:0F:09:AB:F8:85:B3:02:A1
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/Ovb_dhIE1_960GPNDwmr-IWzAqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e7:e8:bf:3c:96:39:44:19:4c:ad:4b:de:cc:f0:ca:be:f7:
34:f1:b4:d8:d5:ce:6d:ff:91:dd:9f:0e:3f:1c:b7:ba:64:3b:
9c:11:0c:64:b8:a5:e7:17:00:97:69:63:7f:9d:ec:ef:cd:7b:
fa:cb:68:e6:71:89:3f:bc:8f:8a:8f:18:78:fd:a8:6a:59:ed:
b0:24:37:14:33:9d:3f:4a:2a:6c:18:9b:cc:fa:2e:61:cc:fb:
3e:a1:e1:cc:90:f2:62:59:8c:ac:36:cf:13:88:66:c8:20:b8:
c9:ca:a5:96:25:74:11:53:86:21:76:cc:95:db:cc:4c:b1:3d:
45:30:23:a6:30:f3:b0:c4:ff:b2:60:c9:bf:77:2a:d0:07:39:
93:b1:6e:78:21:26:98:82:19:42:4f:6a:34:81:81:14:dc:91:
16:12:28:3d:b6:3b:57:47:4a:a8:ec:fa:42:d9:f8:37:f1:45:
98:eb:65:4d:e7:5f:6b:38:0a:58:01:b9:8a:f9:17:e3:5a:64:
d2:eb:e9:e4:80:59:66:34:56:3f:76:52:54:1e:31:44:b0:91:
f7:ff:ee:93:e9:61:ae:97:00:eb:30:8c:21:15:d3:44:23:15:
8b:14:33:12:9c:65:6b:35:a7:6d:17:1b:17:a1:98:fd:91:e2:
5e:12:fe:21
-----BEGIN CERTIFICATE-----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 at Sun Jun 16 13:06:21 2024 by rpki-client on console-fra.rpki-client.org