Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/ozOCivlUMNxquylnjxXsyFBBarg.roa
File: ozOCivlUMNxquylnjxXsyFBBarg.roa (raw, json)
Hash identifier: GFzqhnYM+snd6dz3jHsKLTwCYge6ug+FJuxNAojfEKw=
Subject key identifier: A3:33:82:8A:F9:54:30:DC:6A:BB:29:67:8F:15:EC:C8:50:41:6A:B8
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 018A4CBCEDB8102971C6BD56ECF9E26AB53E
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/ozOCivlUMNxquylnjxXsyFBBarg.roa
Signing time: Thu 31 Aug 2023 17:56:04 +0000
ROA not before: Thu 31 Aug 2023 17:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.99.237.0/24 maxlen: 24
185.99.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 12:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:bc:ed:b8:10:29:71:c6:bd:56:ec:f9:e2:6a:b5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Aug 31 17:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a333828af95430dc6abb29678f15ecc850416ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:88:e1:ab:44:69:1f:31:91:81:4d:4c:a7:
21:e2:80:79:ab:c2:a1:d5:8a:e5:31:9e:a2:f5:e2:
a2:de:e6:23:e4:3e:b0:54:63:53:2b:95:68:43:88:
45:44:a4:d6:83:7a:e5:d3:61:87:0d:1b:3a:b5:f5:
b0:3a:56:9c:45:37:aa:2d:5c:f8:c5:d8:2d:5c:58:
69:cb:f8:df:e7:ee:57:15:c8:02:0c:65:3f:f2:40:
10:4e:c5:c8:22:c5:f8:cd:6e:09:05:7e:70:87:16:
e4:99:c4:39:66:1e:4a:e3:03:bc:54:3f:9e:e3:e6:
a4:93:62:76:72:37:14:79:1d:7e:2d:c7:75:1a:a9:
bf:34:f3:f8:96:5f:a8:a3:45:48:43:bf:90:61:f0:
b9:84:9a:2a:1f:06:76:0f:76:80:7f:b9:2a:76:23:
eb:31:f0:db:fb:44:e3:58:72:ea:4f:93:2c:ca:52:
8a:a0:bb:58:75:49:12:c1:3c:31:ca:31:85:71:a2:
f9:bc:ae:ad:84:5a:c2:0d:6f:67:3b:d0:14:b2:31:
3d:64:f5:9d:70:6b:7b:b6:af:94:2a:f2:17:7b:e9:
09:a1:35:1e:10:ce:a4:14:81:79:06:9d:9b:f6:76:
54:c7:f0:cb:f4:c7:b2:0c:59:b6:62:9d:3e:f8:5f:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:82:8A:F9:54:30:DC:6A:BB:29:67:8F:15:EC:C8:50:41:6A:B8
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/ozOCivlUMNxquylnjxXsyFBBarg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.237.0-185.99.238.255
Signature Algorithm: sha256WithRSAEncryption
5c:68:12:77:20:93:4f:95:cf:a6:77:68:95:53:b6:cd:e2:73:
0a:cc:0a:68:fb:31:95:fc:13:d9:ea:fb:b1:64:39:6c:74:a9:
10:67:1c:43:0e:38:41:c3:7a:8e:3b:c8:ec:f0:68:33:0e:63:
04:4a:91:8f:04:44:c4:77:e1:18:93:16:54:88:3d:64:cb:48:
ab:9b:a0:e7:f3:de:47:99:81:70:30:09:b4:e1:88:26:6c:ea:
a4:03:b1:29:54:39:7d:83:e6:a3:8e:63:dc:bf:da:4e:52:0f:
af:ab:2c:d6:53:d6:c8:68:40:8b:ce:95:94:d8:cd:9f:43:62:
31:20:c2:92:cd:6a:46:63:27:78:cf:96:f4:e3:89:3c:79:f5:
5d:60:6c:4f:6d:d5:21:93:89:c7:93:09:2b:10:ca:39:1a:fb:
9e:a4:db:63:9b:75:c4:b7:d1:25:9b:02:0d:ad:03:b2:ff:df:
d4:1f:c1:9d:22:c7:e6:bc:0c:61:51:75:ce:75:ff:45:23:6d:
5d:c0:ce:ba:47:0d:6b:44:bd:d3:f7:a1:a4:5f:01:b1:1b:d5:
4e:7f:d0:94:c0:4e:df:e9:51:15:0e:36:7e:b3:43:ee:a6:98:
70:45:c9:a0:90:53:8d:2d:51:6d:a0:a9:cd:76:23:5c:13:d5:
49:ea:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:08 2024 by rpki-client on console-ams.rpki-client.org