Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/OqWT6BzrCtfCcdAxT05qCCv-nuI.roa
File: OqWT6BzrCtfCcdAxT05qCCv-nuI.roa (raw, json)
Hash identifier: mY9pZIDvZkJG+F+dyGWMOBYfBNCZ+SIJS5EBDDmjV3k=
Subject key identifier: 3A:A5:93:E8:1C:EB:0A:D7:C2:71:D0:31:4F:4E:6A:08:2B:FE:9E:E2
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 018D379DCB07C057C60C6553BF00BCC2C203
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/OqWT6BzrCtfCcdAxT05qCCv-nuI.roa
Signing time: Tue 23 Jan 2024 18:38:24 +0000
ROA not before: Tue 23 Jan 2024 18:38:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53589
IP address blocks: 85.236.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 17:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:9d:cb:07:c0:57:c6:0c:65:53:bf:00:bc:c2:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Jan 23 18:38:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aa593e81ceb0ad7c271d0314f4e6a082bfe9ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:bf:4e:a5:dc:f9:ca:67:ce:83:61:32:0d:
94:72:21:2f:38:8b:d8:d1:bd:c7:96:b1:fc:ca:67:
cb:ac:3a:78:e2:b8:f0:58:29:6b:7f:ef:c0:dc:4f:
d3:5f:06:4e:24:23:40:04:39:74:94:42:af:66:bc:
bb:08:c4:c8:f9:8c:66:0a:3f:0e:3c:cd:d5:ef:c6:
2f:7a:92:8f:40:45:45:95:53:5a:71:1a:f8:f8:0c:
ba:cb:17:4f:95:b3:9b:87:62:44:1c:42:3d:97:c5:
d2:fb:eb:08:db:31:a2:f3:81:d8:aa:ad:83:cc:79:
b5:c4:e3:ad:e3:6b:a0:05:05:d1:47:20:8f:77:68:
3d:37:c6:69:f0:34:63:0e:76:c3:74:02:1c:ce:9f:
f2:b9:6a:8e:4c:1f:e8:ab:a3:02:6f:f6:e1:12:dc:
25:3f:57:0a:98:91:94:5b:18:05:f0:39:42:bc:10:
2b:00:2d:c2:07:87:7d:77:20:d5:25:c3:a1:c5:30:
73:a1:46:24:9f:04:0f:51:8c:ed:50:43:85:16:17:
41:29:10:b1:2c:ec:0b:c5:15:b9:15:e9:65:69:f9:
7d:13:d5:73:af:ff:23:82:19:93:5d:2b:3a:e3:4e:
e0:c4:c7:b4:23:6a:39:fd:15:b2:4f:93:53:c0:1e:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:93:E8:1C:EB:0A:D7:C2:71:D0:31:4F:4E:6A:08:2B:FE:9E:E2
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/OqWT6BzrCtfCcdAxT05qCCv-nuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.152.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:e1:1c:55:21:fe:79:5c:47:2f:e8:d6:cb:fe:d5:51:7e:52:
12:20:9f:44:b8:d1:74:6f:da:38:10:b3:1a:0d:23:85:db:dd:
60:04:27:92:de:61:e7:3a:91:68:e3:3c:2b:b4:8e:d4:0c:5e:
54:69:86:ef:85:5b:58:de:0f:22:25:23:12:e4:2e:4c:30:bf:
ec:2c:ac:d2:4e:3d:8d:62:28:8e:11:85:cf:13:01:f2:e3:fe:
32:16:cc:55:6f:ad:00:0d:e9:c0:19:ed:4c:e6:99:c3:da:a6:
cf:b0:8f:94:0b:72:b8:a4:ea:e9:ac:17:ac:00:3c:06:d8:5f:
0c:bf:b3:db:c4:f5:0e:ad:57:b0:ed:fb:4b:e2:81:2b:6a:51:
1e:4e:84:f4:4b:13:87:e1:d4:34:91:53:1c:43:72:38:8e:91:
7f:84:fb:80:ca:96:9d:36:22:2a:be:68:4c:5f:c8:ee:a8:3b:
0d:25:c2:2b:3e:49:28:f9:18:55:bf:a5:fe:11:73:ce:fc:10:
75:f4:fb:cb:36:bb:27:be:31:e6:3f:c4:a6:f0:63:f2:40:41:
23:a8:d3:8e:34:69:b3:03:74:72:47:a1:22:df:9c:23:f1:26:
2e:18:50:37:e8:eb:93:57:81:a5:a5:b2:b8:28:21:88:65:03:
ae:7a:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:18 2024 by rpki-client on console-ams.rpki-client.org