Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/Ouw3bY6L3bYOs_nNa-np64KHWkE.roa
File: Ouw3bY6L3bYOs_nNa-np64KHWkE.roa (raw, json)
Hash identifier: OOEtcMmCEgEXPOu9cGN40L3YCxrpkiR339eb2jc1qyM=
Subject key identifier: 3A:EC:37:6D:8E:8B:DD:B6:0E:B3:F9:CD:6B:E9:E9:EB:82:87:5A:41
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018B617FEE58C7EA7077374B188D0C97AD88
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/Ouw3bY6L3bYOs_nNa-np64KHWkE.roa
Signing time: Tue 24 Oct 2023 11:44:15 +0000
ROA not before: Tue 24 Oct 2023 11:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212650
IP address blocks: 185.190.88.0/24 maxlen: 24
92.61.172.0/22 maxlen: 22
92.61.168.0/21 maxlen: 24
2a10:6540::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:7f:ee:58:c7:ea:70:77:37:4b:18:8d:0c:97:ad:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Oct 24 11:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aec376d8e8bddb60eb3f9cd6be9e9eb82875a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:c8:cc:99:87:2c:ac:47:74:ff:ba:55:3f:
5e:62:b9:b0:ce:14:41:c7:ea:49:cc:da:ef:79:45:
00:46:e4:e9:d5:02:69:92:e6:27:c6:57:68:7f:b7:
a4:a8:61:a8:3e:96:8e:f9:31:16:e8:3a:49:07:eb:
fd:b2:95:c6:1d:b1:53:1a:b3:0d:e6:39:86:09:0a:
31:98:20:8b:23:37:1a:55:d4:d8:59:01:dc:ac:1a:
28:49:9a:0e:fa:a4:e0:98:be:f7:a4:a7:7e:2c:3e:
3d:78:05:ab:81:de:c7:04:96:60:08:cc:95:65:1b:
53:20:cf:d6:3e:52:35:d8:8b:34:ce:83:13:be:58:
0d:00:55:d5:e9:c9:e7:65:52:e6:e2:0b:2d:72:67:
bb:61:72:6a:a5:20:2d:49:3e:44:11:bc:10:96:32:
b7:61:88:78:7b:ee:96:cd:c1:b4:59:ec:57:8d:99:
86:1f:12:3c:35:c9:5a:36:b5:da:f0:af:c6:62:aa:
b7:78:d0:16:22:d5:c1:f0:b7:f6:d7:65:dc:03:99:
fd:b8:fd:30:e5:bc:c4:7b:65:10:57:eb:b7:ca:4e:
72:99:bf:74:91:3c:40:8f:2b:48:e2:86:9b:58:67:
fe:69:62:b0:a5:18:b2:35:15:0e:47:2d:3d:26:2c:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:37:6D:8E:8B:DD:B6:0E:B3:F9:CD:6B:E9:E9:EB:82:87:5A:41
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/Ouw3bY6L3bYOs_nNa-np64KHWkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
185.190.88.0/24
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
53:39:f0:8d:33:68:16:f2:71:74:d4:5f:14:94:74:67:57:1b:
75:e1:fa:d9:76:97:25:c7:72:ff:c5:bf:48:6f:7b:55:3a:6e:
8d:8f:f3:d2:e7:31:e4:b3:fb:69:12:16:e1:01:03:fb:57:ce:
ed:c5:97:61:4c:4e:a2:12:29:4e:f3:41:d3:0c:92:8d:c1:9c:
75:e4:12:0c:14:7f:d2:41:1e:a9:16:bd:21:0f:ea:16:60:6d:
70:56:58:93:a9:bf:1f:4f:b0:47:fa:1e:26:2d:7b:1c:86:dc:
5d:74:92:4b:0e:e0:13:8a:fa:2a:00:94:e5:c2:0b:41:ed:70:
45:d6:a4:11:3d:73:09:42:f0:10:09:26:a6:b2:d9:7b:9b:a6:
b8:d9:df:43:03:84:bd:69:9c:7e:45:91:36:f6:55:16:74:c9:
2c:cc:ca:8e:27:8e:dc:ba:52:c5:9e:05:50:60:ef:d4:cd:49:
0f:23:c2:82:fd:64:83:d8:46:c8:74:63:7b:07:b2:95:52:1b:
15:5e:ac:91:6e:c7:48:78:6b:98:19:ef:29:d4:c5:a2:ab:e6:
2b:2b:e2:4d:dd:e3:14:ba:90:af:87:bd:6a:45:7b:4e:92:06:
47:2a:9f:ea:d3:f1:a5:b4:d3:3b:28:33:5b:c0:16:6b:1c:47:
b0:13:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:37 2024 by rpki-client on console-ams.rpki-client.org