Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/OcQAL2-zOveOmqiEKPwcVgzaPKI.roa
File: OcQAL2-zOveOmqiEKPwcVgzaPKI.roa (raw, json)
Hash identifier: lvod6GXkBE5vFaGZw7k4IuKyB6ZTcCvjULc9MkOE3DM=
Subject key identifier: 39:C4:00:2F:6F:B3:3A:F7:8E:9A:A8:84:28:FC:1C:56:0C:DA:3C:A2
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018CAABCF0C57AB494DA780F1762C53FCABE
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/OcQAL2-zOveOmqiEKPwcVgzaPKI.roa
Signing time: Wed 27 Dec 2023 10:05:58 +0000
ROA not before: Wed 27 Dec 2023 10:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.183.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:bc:f0:c5:7a:b4:94:da:78:0f:17:62:c5:3f:ca:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Dec 27 10:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39c4002f6fb33af78e9aa88428fc1c560cda3ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:37:4c:68:13:be:94:17:59:1c:cd:9f:81:
1f:a4:00:f9:37:ca:be:37:69:5c:5f:4e:26:29:49:
95:f4:7a:ea:16:6d:b2:49:d5:74:1f:ec:fc:3e:46:
89:65:cc:0f:bb:e1:20:f0:37:eb:93:fb:83:f2:a2:
d0:fe:78:ca:62:0d:96:a9:4f:65:18:27:6d:99:3b:
9f:94:52:10:8f:2d:b1:7d:19:80:6b:05:73:f8:78:
e3:97:11:d1:40:6a:46:44:1e:ea:ef:18:0f:0b:2c:
5d:9a:2f:8c:4e:61:50:52:1c:71:1b:26:ad:95:93:
28:16:08:3a:11:20:b4:eb:f4:6b:83:a5:20:e5:d2:
39:38:95:f0:d2:c9:a3:26:57:1b:87:df:0d:5d:aa:
85:ef:bd:65:6e:e5:7b:97:19:e9:18:04:67:8d:7b:
7a:b9:ec:df:8b:af:7a:80:ed:3f:3f:78:89:22:2a:
a5:04:c0:b4:bd:72:b5:dc:3f:12:28:78:6f:59:17:
cc:bf:63:62:fb:ce:ae:5e:f4:50:1a:ef:e0:e9:77:
1f:ea:61:ce:e0:dc:5e:f0:ea:f3:d6:97:18:cd:41:
10:2e:c5:74:4d:64:07:1e:27:ab:8b:a1:94:85:fb:
61:ad:b2:07:76:06:3e:34:68:fa:d5:cd:d6:c7:c8:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:00:2F:6F:B3:3A:F7:8E:9A:A8:84:28:FC:1C:56:0C:DA:3C:A2
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/OcQAL2-zOveOmqiEKPwcVgzaPKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
185.169.182.0/23
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:64:71:3d:82:96:92:b8:4f:cd:6f:97:71:6e:94:ff:ac:36:
66:65:0f:57:7d:59:26:cb:8a:26:30:7c:4b:b0:1e:82:8b:ae:
0c:1f:e1:f2:cf:0c:86:02:06:31:03:7c:f3:cd:e9:3a:7d:79:
b1:21:ee:6c:1e:3b:e0:78:20:90:ec:81:bc:ce:e5:54:f7:62:
d4:f2:8c:34:ed:d8:87:16:3e:7c:b8:a9:01:af:9c:7c:e3:17:
df:89:98:7c:34:84:04:dc:e0:d8:83:dd:b8:60:e5:13:ac:84:
4f:da:76:be:9f:e9:f2:de:3e:67:4d:92:78:16:ea:77:5f:6b:
3a:ee:b9:f9:8d:70:67:3e:af:6b:19:eb:cf:5c:79:20:b6:e0:
f2:dd:c6:29:43:0c:a3:02:6b:b2:f5:bb:59:cd:ae:c9:fb:d6:
6b:70:00:d2:50:2c:32:65:85:b8:8b:3f:44:25:45:87:42:a9:
5c:5f:b5:55:72:af:03:a3:09:8b:ea:8e:b8:98:7d:32:b7:2f:
2f:6a:55:16:ca:27:74:c5:ad:f0:6c:b8:ac:90:72:26:19:ea:
9b:ea:52:c3:d3:bc:5b:a9:9a:f2:e7:60:c3:4e:3b:2a:61:c8:
aa:4b:30:0e:71:6d:94:0a:da:ac:8c:1d:5a:0d:92:2a:d2:af:
fa:e8:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org