Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OhioI4C0oOzpXDA2mX08XXK-RX4.roa
File: OhioI4C0oOzpXDA2mX08XXK-RX4.roa (raw, json)
Hash identifier: jk7iuK09ubtOhj+cPTdMQwC5khodzSXkkJPs/6hz79M=
Subject key identifier: 3A:18:A8:23:80:B4:A0:EC:E9:5C:30:36:99:7D:3C:5D:72:BE:45:7E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF4D24C0BD329869FCD8427D26B1A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OhioI4C0oOzpXDA2mX08XXK-RX4.roa
Signing time: Mon 01 Jan 2024 18:30:50 +0000
ROA not before: Mon 01 Jan 2024 18:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203809
IP address blocks: 85.120.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f4:d2:4c:0b:d3:29:86:9f:cd:84:27:d2:6b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a18a82380b4a0ece95c3036997d3c5d72be457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:f9:8b:ea:36:9b:65:30:84:8f:a9:7d:1f:
68:b3:de:6a:70:8a:3f:fa:0e:de:83:4b:82:f7:4a:
4e:17:dc:b9:63:5f:8b:a6:c5:87:cf:63:a6:ac:9d:
e1:b8:93:66:7a:ec:96:ad:89:d0:16:ae:f0:d8:f1:
f6:65:d3:d7:b1:2e:15:30:75:5e:aa:78:6d:b1:ca:
4d:d4:8d:4b:b7:25:59:81:02:bd:bb:96:a7:cf:de:
28:33:85:e2:08:9f:8d:34:eb:fa:ef:0f:11:16:a1:
05:9e:e3:dd:cf:eb:c9:2a:68:91:c7:67:74:0d:87:
37:ed:8a:06:e1:87:c0:53:e4:ef:30:d5:7b:2c:eb:
b3:c7:5c:66:f6:ac:af:ff:fd:b0:71:ed:4e:8e:02:
37:13:49:66:f0:d7:4d:5a:6d:e0:fe:68:b7:a4:1f:
f3:2e:c2:d1:18:60:81:94:f3:84:47:44:30:68:d5:
3f:b2:8b:cc:e2:db:48:fe:6e:43:13:09:e2:58:5a:
ca:1c:37:db:a4:f0:a0:01:49:b5:a2:7c:53:45:12:
a1:ca:bd:52:b0:29:20:38:08:79:ee:7a:18:8c:92:
64:8f:fd:a1:9b:fc:a2:00:75:21:13:b6:74:19:fe:
1e:b4:2b:be:bc:4f:39:57:4b:80:e7:10:75:b3:d7:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:A8:23:80:B4:A0:EC:E9:5C:30:36:99:7D:3C:5D:72:BE:45:7E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OhioI4C0oOzpXDA2mX08XXK-RX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a4:1d:91:47:01:b4:7d:e0:b7:9e:e5:49:19:d2:a8:20:1a:
ab:9b:00:cb:8f:3c:58:25:30:3b:b1:42:a3:de:59:84:ea:39:
3e:d3:7e:8e:57:8d:32:f6:e4:28:b7:cc:25:e5:6e:53:dd:c5:
a1:56:26:e7:aa:e5:2c:e2:33:86:23:3c:ee:90:89:2e:ca:07:
4a:47:c1:d1:f3:b2:87:c1:ab:ce:a4:8c:cd:6f:dd:08:7c:02:
6c:a2:0c:2c:e2:a3:62:6e:2b:f5:7c:13:c4:d5:56:cd:f2:0c:
6d:cb:26:6a:2d:b0:ed:de:7f:8c:e1:95:ec:75:11:42:74:ec:
71:b0:56:34:91:bf:31:43:e7:23:ab:1c:00:93:31:09:e4:80:
7a:86:b0:f3:6d:d5:fd:a2:ee:1a:94:3f:2a:c1:15:e0:16:e2:
f2:14:3a:c5:5a:da:e1:7e:80:bc:d2:6c:12:a7:09:52:d0:2f:
8a:7f:2c:21:c4:a7:46:8f:ed:6b:d3:be:64:d6:74:df:50:1a:
82:9f:b4:e5:06:57:27:15:64:4a:37:22:1b:4b:e4:17:69:67:
6e:ba:7d:37:8c:d9:cc:9f:c9:1f:e0:09:c5:3e:92:7c:c1:34:
bc:d9:ef:1f:ec:44:07:bc:1d:51:e4:d8:b6:f2:34:8b:60:84:
8a:d3:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:16 2025 by rpki-client