Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Oc2bdPH4pDNeH0-5f3NXE6wS6zU.roa
File: Oc2bdPH4pDNeH0-5f3NXE6wS6zU.roa (raw, json)
Hash identifier: yIhzOuBcTNLu+lPWXC2yX9mmRpNK8bPmRUyHE0fnsX8=
Subject key identifier: 39:CD:9B:74:F1:F8:A4:33:5E:1F:4F:B9:7F:73:57:13:AC:12:EB:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01916925B0A3503E1E9A7B68A61DDA87C8C3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Oc2bdPH4pDNeH0-5f3NXE6wS6zU.roa
Signing time: Mon 19 Aug 2024 05:39:23 +0000
ROA not before: Mon 19 Aug 2024 05:39:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61254
IP address blocks: 185.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 14:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:25:b0:a3:50:3e:1e:9a:7b:68:a6:1d:da:87:c8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 05:39:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39cd9b74f1f8a4335e1f4fb97f735713ac12eb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:cc:19:00:99:20:81:be:f4:3d:62:27:2f:
c2:49:8c:f7:d2:4d:10:fc:a6:c1:2f:f2:60:3b:a0:
7d:3f:02:47:0e:88:25:11:8c:b5:b4:01:82:4b:32:
02:7b:0f:69:c2:3f:f3:c7:96:1c:48:72:4a:94:fd:
ba:b3:03:b4:7d:de:c4:f6:a9:78:46:37:c7:dc:e7:
8e:f2:a0:28:97:80:ef:e3:16:9e:68:33:42:b7:51:
02:7d:49:56:1d:57:6a:52:72:96:b2:fe:ae:ed:72:
85:1a:03:07:c7:60:a2:f5:bd:55:36:bb:f0:cb:4f:
b4:18:4b:0d:bb:a8:ba:5b:0b:44:1e:5c:76:f1:46:
ab:88:c2:e6:10:7e:e8:cc:dc:cf:74:a7:35:a4:24:
88:57:33:47:a9:9f:e0:54:a2:f2:57:b5:0c:a6:ba:
25:0b:1f:4d:50:10:c7:78:8b:86:18:bd:b8:f6:76:
10:14:ad:b5:83:fd:b5:e5:47:03:8f:37:33:9f:4b:
e4:a9:76:cf:be:a0:fa:e0:b2:75:5a:1d:f9:25:c4:
f6:a9:62:c7:98:6a:f0:31:fb:fe:60:e3:9f:b6:ae:
7c:a1:62:59:15:1a:d3:65:79:7e:a6:7e:c6:29:1d:
9a:82:f1:4b:17:20:5c:94:bd:83:81:e8:2a:0f:11:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:9B:74:F1:F8:A4:33:5E:1F:4F:B9:7F:73:57:13:AC:12:EB:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Oc2bdPH4pDNeH0-5f3NXE6wS6zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bb:aa:1f:36:e0:86:53:1a:bd:86:ce:17:20:3e:a5:ee:97:
a5:f9:37:14:b9:05:bc:b6:1a:bf:ed:77:db:8b:93:bf:96:67:
02:49:dc:41:54:bc:29:f2:cf:00:37:f0:cb:2d:25:4f:b4:5c:
ce:a7:d7:de:35:07:ca:98:e7:00:e0:2a:5c:3e:ff:8f:ed:77:
6d:c8:35:36:6e:93:b3:22:b5:75:87:3a:9f:41:6c:d9:f2:bb:
ff:46:ec:ab:fb:d6:8b:77:d7:16:23:b6:e6:26:14:f8:a4:cc:
0f:43:02:e1:e7:ed:a9:d6:0e:05:5b:f6:3b:91:d1:5e:ad:26:
8d:c9:81:e5:28:5e:b5:21:a6:94:3c:09:7e:e1:e9:d4:b0:07:
7a:3f:8c:5e:5b:c5:2a:8f:4a:4d:ac:41:b9:7e:2a:62:a8:70:
78:54:6a:7d:72:fe:4e:d4:11:54:7b:23:a0:34:a5:f8:17:52:
d9:81:ab:c7:92:ab:56:74:39:3c:63:33:57:33:48:86:e8:84:
2a:9b:ad:ed:ab:f3:a4:3d:9f:f8:88:64:87:ee:42:27:56:74:
23:87:11:91:8b:45:75:40:05:d3:fa:1f:ac:01:68:d5:61:c1:
b0:dd:df:ff:18:7e:cf:de:90:94:90:03:d2:02:2b:c5:f1:97:
4d:de:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 16:58:50 2024 by rpki-client on console-fra.rpki-client.org