Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa
File: O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa (raw, json)
Hash identifier: WBj4/3C7c4eX8zV8CL5ykhS/TAFcM/LdwESJFXqrcrs=
Subject key identifier: 3B:96:C2:76:C7:C9:DE:01:4D:0B:D5:4B:1C:B0:49:4F:4F:25:05:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186E171F837A24C3B03723258670DAE76FA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa
Signing time: Tue 14 Mar 2023 18:46:28 +0000
ROA not before: Tue 14 Mar 2023 18:46:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 81.161.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 11:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e1:71:f8:37:a2:4c:3b:03:72:32:58:67:0d:ae:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 14 18:46:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b96c276c7c9de014d0bd54b1cb0494f4f250531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:1f:b2:21:92:cd:05:1f:64:19:22:cc:67:
ee:c7:27:40:1d:cd:57:5a:2b:7d:7f:58:95:a6:63:
70:1a:bc:30:cd:97:18:b6:8e:2b:c4:af:03:c5:09:
43:d0:d3:ac:04:a7:c3:2f:34:88:69:81:a9:29:24:
0a:35:25:63:b1:7d:2b:5c:f9:4e:d2:5d:1a:82:0c:
e6:cb:32:28:46:57:75:83:50:b5:d7:62:b6:98:df:
cc:0d:5c:42:58:56:a3:b0:95:0d:84:58:18:92:12:
84:2f:7b:fe:75:29:fb:da:21:67:a5:fa:0d:e8:47:
57:7b:e8:ac:fa:2f:99:67:08:0a:bc:4b:c5:a3:3c:
14:ff:86:6a:60:15:fd:65:90:f9:45:a7:00:0b:86:
60:73:8d:7e:2b:1b:1b:c7:2c:5b:40:d6:be:73:79:
9b:5a:bf:f4:fa:7a:ea:5a:fa:d1:00:c8:1e:bd:94:
9e:e8:68:1f:8f:75:87:31:39:f0:68:6b:90:c1:0e:
d4:09:16:fc:09:ee:86:1b:40:2a:af:e4:5d:76:a8:
05:f6:8f:06:46:b2:77:e8:3b:d5:4c:0a:04:d6:96:
b0:28:5e:bf:3c:ce:bc:5c:78:2a:4d:76:99:5d:ba:
ba:05:22:9e:81:49:a0:96:c7:33:3a:39:e1:2c:36:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:C2:76:C7:C9:DE:01:4D:0B:D5:4B:1C:B0:49:4F:4F:25:05:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:28:97:ac:b9:85:dd:57:84:72:05:d8:1a:26:00:c3:2d:f8:
ec:9b:cf:c6:65:33:d5:1b:8e:20:d4:0f:e2:1c:5d:3d:f1:54:
de:2f:63:39:93:57:4c:95:96:f6:37:7e:2e:52:ed:23:5e:c8:
d8:2f:7c:06:d9:11:32:61:04:b0:d8:33:b0:d1:59:55:04:a5:
a3:b3:71:db:65:2d:c7:44:c7:6b:12:20:08:e6:54:a5:f5:16:
c9:5c:5d:56:e7:1d:1c:42:d1:e6:2c:bc:8f:d8:aa:e1:5f:04:
f4:a6:27:f4:67:08:63:ac:67:ac:c5:0d:08:c5:a2:61:ca:e3:
4f:24:df:d9:26:b4:c4:fe:31:13:76:55:11:68:0e:bd:ba:15:
be:40:09:22:dd:9b:72:82:54:a9:23:60:e7:1e:ea:44:f9:67:
ea:78:09:25:74:83:bb:4b:5e:61:23:84:ba:04:53:5b:bf:8d:
11:c6:19:b8:32:07:8a:31:b5:1d:95:42:86:92:0c:c2:dd:59:
8e:62:80:38:c8:c3:dc:fc:44:34:a0:c6:88:85:af:63:f1:51:
dc:2a:62:c3:6b:7d:27:66:d8:72:3e:34:05:fb:fd:fe:5a:83:
ea:ea:18:7a:9a:fb:b5:58:b5:1e:a2:1e:86:66:65:8b:c5:39:
cb:74:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:31 2024 by rpki-client on console-ams.rpki-client.org