Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oxGO98itYiqZMTMjd6vqJjEzcfs.roa
File: oxGO98itYiqZMTMjd6vqJjEzcfs.roa (raw, json)
Hash identifier: vQ4bnu3XAyJVxWfpp24G6jiIRgtGAf4Gvh/0+/Yjpfo=
Subject key identifier: A3:11:8E:F7:C8:AD:62:2A:99:31:33:23:77:AB:EA:26:31:33:71:FB
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018AB130F5E4799A8657566B4D4249038D34
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oxGO98itYiqZMTMjd6vqJjEzcfs.roa
Signing time: Wed 20 Sep 2023 06:04:50 +0000
ROA not before: Wed 20 Sep 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207783
IP address blocks: 85.122.82.0/24 maxlen: 24
85.121.148.0/23 maxlen: 24
194.102.170.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
85.120.144.0/24 maxlen: 24
217.156.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 12:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:30:f5:e4:79:9a:86:57:56:6b:4d:42:49:03:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 20 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3118ef7c8ad622a9931332377abea26313371fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:48:f7:6c:aa:83:ab:5b:2a:a3:99:a2:1b:
c8:98:44:b3:dd:a3:98:a6:c1:e9:d2:fd:85:c7:0d:
de:f7:5c:0a:7b:ef:fe:cc:c1:9f:62:c8:95:20:71:
73:68:ea:b3:39:59:6f:0d:fc:4d:02:31:6c:53:75:
78:08:f3:e7:60:25:cf:91:e7:25:1f:42:a7:00:f3:
d9:ec:ba:2d:66:9e:f0:c4:a4:6f:ec:fd:77:8c:6d:
ab:54:cd:24:85:b8:95:ba:38:70:92:e5:cb:25:c4:
a5:dd:78:1e:9d:c2:22:46:ca:eb:77:11:1b:6f:03:
4d:55:f1:25:93:a5:f1:ed:5d:64:e5:54:27:ec:2c:
8a:9f:d9:74:c0:94:5d:86:6d:16:a6:c8:fa:1e:73:
d3:ef:f4:1e:ad:0a:fb:64:1b:ca:d8:d1:cc:4d:80:
c2:db:ea:5a:a2:1c:18:d7:6c:f4:25:be:c1:5e:4c:
5f:8f:81:5e:e0:c9:ca:05:58:92:4d:f2:d0:47:ec:
6d:1e:ef:46:49:7a:88:1b:bb:5e:31:0f:9b:0d:2f:
1d:85:05:43:0c:36:a3:b9:66:c8:e5:a1:56:fa:83:
93:01:59:d4:c0:31:e1:42:16:d5:f6:a8:07:c1:b5:
f4:f7:a1:7a:36:ce:88:a6:ef:dd:59:52:f6:8f:64:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:8E:F7:C8:AD:62:2A:99:31:33:23:77:AB:EA:26:31:33:71:FB
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oxGO98itYiqZMTMjd6vqJjEzcfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.144.0/24
85.121.148.0/23
85.122.82.0/24
194.102.170.0/24
194.102.218.0/24
217.156.96.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cf:bc:5b:3c:48:1c:d5:31:c5:5a:02:30:c0:51:10:84:f1:
7e:1e:bf:97:91:06:df:ed:97:bc:ae:26:39:b5:66:bb:22:b1:
30:8d:1f:10:9d:3e:b3:95:65:8b:5b:a3:a8:84:b5:b6:fb:85:
a2:c7:d9:e0:6b:fb:7f:6f:3c:23:dc:22:40:ae:a2:ad:fb:60:
a9:61:73:a8:61:c4:50:4f:c9:00:df:d1:39:82:a2:59:7e:2b:
e9:c9:a7:c8:49:7b:5b:9b:ca:66:9f:94:1d:f4:bd:f3:da:e0:
8b:4d:1d:a0:72:2a:94:d1:b3:7f:7d:04:e2:e1:04:1c:ee:28:
39:c5:fb:96:ad:81:80:18:1f:a2:03:5e:a8:37:1f:2c:7f:5c:
d9:5c:66:cd:60:96:d4:be:00:ca:cb:14:b1:7a:64:bc:31:57:
81:5e:c7:8b:b1:f9:d5:65:b2:5b:c7:83:7f:85:52:23:9b:fb:
26:12:83:3e:a6:e7:0f:33:46:04:05:35:b3:2f:1e:bc:b5:1f:
19:7c:b7:73:61:94:e5:c3:13:ee:e7:a4:12:96:87:27:16:53:
9a:05:40:92:b1:42:1a:0b:59:60:c5:70:c1:a5:f0:ff:22:4f:
9f:e5:21:2d:7f:35:db:2d:f1:2f:b0:39:cb:07:ef:ca:8a:b8:
7c:9f:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org