Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ou8lXFwQJ8JgJy1IixAZLeboQWk.roa
File: Ou8lXFwQJ8JgJy1IixAZLeboQWk.roa (raw, json)
Hash identifier: FOH5w3CaFaOk69caAohePzvLCYhZQgQoiGMXW+9XEs8=
Subject key identifier: 3A:EF:25:5C:5C:10:27:C2:60:27:2D:48:8B:10:19:2D:E6:E8:41:69
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018E9EE13CE0B8A13BB8D1ACDC7F1B4A37B6
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ou8lXFwQJ8JgJy1IixAZLeboQWk.roa
Signing time: Tue 02 Apr 2024 12:55:45 +0000
ROA not before: Tue 02 Apr 2024 12:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 85.254.178.0/23 maxlen: 23
159.148.131.0/24 maxlen: 24
185.27.92.0/24 maxlen: 24
185.27.93.0/24 maxlen: 24
185.27.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 12:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:e1:3c:e0:b8:a1:3b:b8:d1:ac:dc:7f:1b:4a:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 2 12:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aef255c5c1027c260272d488b10192de6e84169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:67:83:a0:77:58:46:1f:06:9b:39:ed:34:
3f:ea:6b:41:43:13:60:44:e7:f9:48:ad:fb:3b:13:
67:8c:95:7b:87:56:9d:3e:8f:9d:31:2f:2b:8a:87:
b8:f0:bb:e5:c8:18:90:55:e7:93:6d:5b:9c:4b:17:
1b:77:e8:11:ad:04:ed:d2:01:29:24:b3:bd:10:94:
d9:cd:15:f0:56:b2:69:ec:e6:15:b2:3d:73:15:ca:
01:74:8c:1b:0c:b1:fc:a0:19:1e:3b:fe:b8:a8:4c:
5b:ea:32:d8:06:a6:06:e1:f4:1f:d1:de:89:d6:f9:
9a:1d:58:59:c5:b0:f1:b5:40:53:e6:f5:a6:5d:ef:
8f:21:7d:16:91:b7:db:c9:18:f2:40:01:21:a8:66:
1e:3a:34:35:ee:ba:a3:1c:ce:1f:cb:fc:02:71:fe:
4a:20:1a:9c:c0:26:e3:90:7f:de:e9:e2:1f:a6:31:
eb:0e:29:1e:83:12:79:76:2a:75:40:09:8e:8b:35:
55:5f:3e:2b:2d:47:3e:48:49:d8:9b:e3:3d:8c:90:
2d:41:5e:83:7f:6a:c9:57:93:02:3d:19:ac:75:32:
45:99:68:e7:e2:50:f1:33:67:55:75:d6:1c:b9:65:
25:a1:11:a6:9a:72:66:b2:6e:ce:4a:ec:22:6a:1f:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:25:5C:5C:10:27:C2:60:27:2D:48:8B:10:19:2D:E6:E8:41:69
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ou8lXFwQJ8JgJy1IixAZLeboQWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.178.0/23
159.148.131.0/24
185.27.92.0/23
185.27.95.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3e:51:54:9e:4d:a1:fc:de:6b:c9:5c:2d:f3:6b:0d:f3:72:
cc:93:bb:ea:9e:8d:e3:d6:d3:30:1a:16:7a:71:ef:17:6d:4c:
1f:29:7e:56:0f:37:4d:5a:f6:37:67:e5:02:0d:9b:89:d7:51:
72:e5:fa:8a:88:79:ad:41:23:23:35:1a:3a:ba:39:82:60:2c:
58:52:2e:15:55:d4:4f:5f:6e:6e:0f:4d:c3:9d:95:10:15:f2:
50:66:cf:2d:9c:44:8f:fd:23:e6:41:ab:90:b8:cd:0a:70:3f:
8f:99:92:50:b8:62:83:a8:84:6b:71:93:2b:26:24:3a:d9:a6:
f6:19:59:59:04:9a:ae:5e:1d:20:6f:9e:b1:92:98:c1:48:f2:
cc:f9:81:c9:8b:8c:e4:33:78:1a:2a:46:89:ce:96:d6:a6:5b:
c6:f8:fa:31:d2:a2:a7:24:82:a9:85:2a:4b:68:a6:cb:fd:3d:
d7:ed:31:b6:55:b1:cf:36:f8:be:01:31:53:72:d1:48:1c:e3:
18:12:45:2b:c9:f6:98:93:6e:0a:d5:15:9a:24:32:1c:e2:69:
2b:ac:2e:c6:e9:63:a5:d9:c2:df:3a:9f:2a:c5:95:c9:94:4f:
35:89:c0:4b:dd:1b:cf:bb:ce:c8:dc:7d:67:cf:61:a4:b9:4a:
cf:9b:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:53:36 2024 by rpki-client on console-fra.rpki-client.org