Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Ok15iYgAcBddLrpFbUWAuT3NSIc.roa
File: Ok15iYgAcBddLrpFbUWAuT3NSIc.roa (raw, json)
Hash identifier: jZbmVTbcH4NBgwT0x406WyfwIebC0SAtKEgDDBsvvRQ=
Subject key identifier: 3A:4D:79:89:88:00:70:17:5D:2E:BA:45:6D:45:80:B9:3D:CD:48:87
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 018AA79C0797D563A0A7D703E0907C4BFD16
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Ok15iYgAcBddLrpFbUWAuT3NSIc.roa
Signing time: Mon 18 Sep 2023 09:25:35 +0000
ROA not before: Mon 18 Sep 2023 09:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.107.197.0/24 maxlen: 24
185.107.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:9c:07:97:d5:63:a0:a7:d7:03:e0:90:7c:4b:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Sep 18 09:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a4d7989880070175d2eba456d4580b93dcd4887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:a2:81:3f:a9:22:29:08:b3:12:8f:66:cf:
ab:a6:cf:1d:77:92:c6:0f:ac:3a:25:d6:03:32:63:
f0:a7:7d:3e:2c:5b:1c:cb:9e:12:ef:48:aa:e0:cd:
cf:26:52:fc:22:b1:bb:a1:8d:4f:d3:8e:1d:3a:8d:
fb:fe:6a:53:95:73:ce:5b:1b:ae:5c:97:7d:bb:60:
28:55:72:e6:1d:2a:92:4b:fc:68:b5:2a:76:36:d2:
56:96:c1:2b:a4:34:8c:9c:61:f4:46:86:cd:ca:4c:
27:60:a3:dc:97:0e:8d:14:37:a7:3f:74:4b:49:2c:
db:a1:91:bc:d6:2b:55:91:5b:1c:15:1f:83:c9:6f:
a1:84:0d:ff:a3:56:45:b2:c7:1b:91:c8:9b:5f:cf:
44:82:f0:5c:fa:11:bd:25:89:98:06:d5:a2:10:7a:
77:9c:43:3d:4a:0c:8e:38:a9:df:90:4b:a6:ca:41:
4e:df:f4:98:08:2d:07:01:82:91:10:1d:ee:e1:1b:
9e:ca:12:dc:74:ba:d5:6e:a7:d4:48:4d:ac:d5:dd:
b2:47:fc:de:8c:96:20:0d:64:f8:28:69:fd:af:e5:
22:0e:72:c5:5a:86:e9:4e:60:38:07:50:ec:4c:33:
11:a9:b1:38:55:10:3f:b5:db:46:ca:cf:07:29:1d:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:79:89:88:00:70:17:5D:2E:BA:45:6D:45:80:B9:3D:CD:48:87
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Ok15iYgAcBddLrpFbUWAuT3NSIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.196.0/23
Signature Algorithm: sha256WithRSAEncryption
93:fb:09:cc:1e:fc:32:81:e0:69:2a:e0:fa:92:9e:0b:39:12:
25:06:ca:d0:2e:08:7f:0a:c0:ea:15:f8:23:35:85:19:f6:02:
c4:37:f1:b0:de:d6:13:61:a3:35:b2:1c:ff:cb:22:35:91:79:
54:3e:f3:8e:df:6d:13:5f:15:f9:ad:1c:23:1d:be:3a:0f:69:
72:a7:18:18:5f:09:61:5d:01:f5:58:a1:ae:f9:40:64:13:f1:
01:16:a3:1b:52:25:6c:29:7a:20:5c:f3:fb:c3:ff:e8:c2:49:
80:60:84:38:0e:c9:1b:d2:71:4d:a6:74:d5:fd:9c:23:87:b4:
37:ac:3c:73:83:07:23:f7:e6:2c:c4:07:1a:1a:be:47:78:a2:
ba:71:66:45:05:e5:d6:b5:bf:76:fb:c6:b8:d7:26:eb:98:02:
cc:5a:43:e5:f1:dd:c9:fa:2c:f6:fd:d2:08:49:d0:b9:08:26:
6d:11:e4:87:9c:bd:61:4b:99:27:cd:8d:98:8a:be:f1:a4:08:
37:6a:be:d0:e4:3c:33:94:86:ec:cf:d7:c4:bc:18:d5:1f:35:
7d:b0:9f:61:81:84:6d:46:e3:16:e7:e3:75:49:8f:ea:e9:7b:
c2:53:a4:7f:5a:b9:25:77:0e:67:f7:6f:9c:0c:a3:0c:f0:66:
0d:e5:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:19 2024 by rpki-client on console-ams.rpki-client.org