Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/OeSsa5f_8-mKquhvLnKPvJ3HM2k.roa
File: OeSsa5f_8-mKquhvLnKPvJ3HM2k.roa (raw, json)
Hash identifier: qP25mnXPbppkQP8ZFR9qLu131waV68ljJ11u8FDZ0DM=
Subject key identifier: 39:E4:AC:6B:97:FF:F3:E9:8A:AA:E8:6F:2E:72:8F:BC:9D:C7:33:69
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 0188BA8476C729F510BB360794049A0170A8
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/OeSsa5f_8-mKquhvLnKPvJ3HM2k.roa
Signing time: Wed 14 Jun 2023 15:27:03 +0000
ROA not before: Wed 14 Jun 2023 15:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 185.24.160.0/22 maxlen: 22
185.17.44.0/22 maxlen: 22
130.255.16.0/20 maxlen: 20
130.255.20.0/24 maxlen: 24
130.255.27.0/24 maxlen: 24
37.19.24.0/21 maxlen: 21
178.255.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:84:76:c7:29:f5:10:bb:36:07:94:04:9a:01:70:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jun 14 15:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39e4ac6b97fff3e98aaae86f2e728fbc9dc73369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:eb:41:9b:90:ce:0d:7b:41:89:8e:ee:4c:
42:8f:11:cf:0d:42:6d:21:82:45:ac:0a:1d:c4:8a:
7e:42:76:1c:a5:32:6e:91:c0:4e:ff:e0:2c:06:d0:
33:d7:a7:8d:b2:93:52:41:e5:68:79:34:f9:f1:0c:
53:2e:a3:f9:a8:9f:ca:1d:30:aa:c8:9a:9c:dd:3b:
26:38:e3:4f:99:ab:b3:09:98:96:2d:53:41:76:93:
b1:0b:dd:99:ed:72:18:00:c5:65:b0:70:28:29:1a:
db:45:70:3b:27:05:ef:61:d2:f1:63:7e:af:03:50:
3b:ea:53:01:06:44:1f:36:c4:e4:00:a2:9a:b5:f9:
cf:79:37:30:a0:2c:0f:c9:42:eb:29:9e:cb:46:a4:
76:69:a4:71:ad:60:ad:62:96:49:74:1e:58:01:ad:
cc:8b:11:0b:90:46:b8:f4:3e:4f:3e:23:9d:ec:5f:
1a:64:60:fd:c4:5c:74:5f:e9:78:73:e6:39:ba:a3:
96:ac:b1:34:55:00:8a:1e:af:12:0b:35:7c:d8:4e:
a8:1f:b7:18:a1:c8:42:30:28:3f:1c:22:9a:d5:af:
a3:e9:40:50:a8:f5:d9:4f:a0:80:9b:c1:8e:a2:2f:
ca:3b:49:44:fa:35:bd:74:76:07:85:b5:a0:f7:b1:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E4:AC:6B:97:FF:F3:E9:8A:AA:E8:6F:2E:72:8F:BC:9D:C7:33:69
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/OeSsa5f_8-mKquhvLnKPvJ3HM2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.24.0/21
130.255.16.0/20
178.255.88.0/21
185.17.44.0/22
185.24.160.0/22
Signature Algorithm: sha256WithRSAEncryption
19:dc:02:bf:ef:e6:66:fa:bb:38:1f:34:0f:af:d3:60:85:b2:
e7:f7:ee:d5:a2:70:94:60:b2:ad:3c:88:77:65:ec:1a:05:0e:
6c:4a:a1:41:5b:cc:02:53:6f:56:1c:b8:d6:89:0a:a6:4a:69:
50:2b:3a:07:12:94:06:c4:05:62:21:9b:49:23:12:00:9a:ab:
b1:5b:5f:63:66:83:19:61:85:71:41:d6:37:fe:25:85:1f:9e:
4c:d2:39:af:a2:6a:85:e7:16:61:7b:f6:28:42:cf:ee:82:75:
31:7e:e9:c2:92:a6:cb:17:2a:2b:05:c6:04:e2:35:e5:f6:d6:
4f:d0:ed:03:6b:43:55:b3:6e:ae:b3:f9:b2:db:bb:05:36:09:
22:5e:eb:76:73:4d:12:20:68:f8:1f:14:92:cd:50:ea:fe:42:
14:a2:ee:d7:a7:d3:6d:71:8d:85:ac:36:fb:d3:a8:b5:cb:df:
fb:99:a5:5e:7e:75:d7:99:6b:2b:4c:8c:d7:02:24:ba:a9:ad:
34:98:ff:09:8b:48:3d:d9:0c:06:6b:85:d2:e6:1b:6a:9a:dc:
52:5f:40:28:7c:63:96:7c:6f:63:63:33:f0:c7:bf:80:df:2c:
a7:9a:e0:c8:c5:be:0e:55:07:a1:0d:21:bd:dc:2c:52:cf:60:
c2:4e:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:39 2024 by rpki-client on console-ams.rpki-client.org