Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/o8qy1dSyrFRvqVZFVQvuYnZq-YU.roa
File: o8qy1dSyrFRvqVZFVQvuYnZq-YU.roa (raw, json)
Hash identifier: SLWseAgezZMJDnneGMeP1pbo/nPSkvg9KW0PgeZQy0Y=
Subject key identifier: A3:CA:B2:D5:D4:B2:AC:54:6F:A9:56:45:55:0B:EE:62:76:6A:F9:85
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 018B1853EF38FF467F0CE9A886BD691F92E5
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/o8qy1dSyrFRvqVZFVQvuYnZq-YU.roa
Signing time: Tue 10 Oct 2023 06:43:55 +0000
ROA not before: Tue 10 Oct 2023 06:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24577
IP address blocks: 185.108.68.0/22 maxlen: 22
91.187.224.0/19 maxlen: 19
194.145.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:53:ef:38:ff:46:7f:0c:e9:a8:86:bd:69:1f:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Oct 10 06:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3cab2d5d4b2ac546fa95645550bee62766af985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:ae:47:53:65:52:08:cb:44:05:fb:9e:3c:
e2:af:69:d3:d3:fe:a6:68:62:23:28:9a:ad:ba:70:
41:6e:75:ec:f6:e4:6d:cd:13:ee:2f:c1:2d:62:3e:
ca:90:75:78:8f:08:da:5f:de:16:3f:37:e0:9d:62:
12:9c:d3:79:4c:28:b5:d8:0c:14:a0:cd:89:16:d7:
27:dc:69:37:93:21:45:18:17:7a:8d:05:61:bf:18:
51:19:b5:bb:43:1a:44:eb:79:90:86:a2:af:81:d4:
ee:85:6c:dc:7c:3c:c4:fd:99:e5:37:10:5c:d4:fa:
ca:f6:2e:e8:1b:12:db:0b:1b:2e:3f:87:f0:69:2f:
7f:b8:12:4a:20:7f:67:f3:2d:df:f4:67:d1:18:d6:
ae:70:82:ec:c8:e7:60:2c:6d:04:e9:3a:00:bb:30:
e8:91:68:3d:aa:38:1d:9e:98:7b:f3:3d:0a:20:53:
46:8c:a6:9f:f4:9a:5a:b5:f9:72:5f:bc:8b:6a:0d:
6c:c8:98:25:f4:fb:bd:92:08:ff:6f:45:08:89:c6:
de:9c:34:39:86:9e:6b:5b:1d:43:26:6a:a3:e5:a4:
2d:c1:0b:af:d8:b9:86:03:d5:27:dc:2d:81:93:dc:
19:ff:3b:ff:b4:7c:84:86:55:6f:22:44:53:9e:b0:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:B2:D5:D4:B2:AC:54:6F:A9:56:45:55:0B:EE:62:76:6A:F9:85
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/o8qy1dSyrFRvqVZFVQvuYnZq-YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.224.0/19
185.108.68.0/22
194.145.204.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e6:92:4b:1a:88:bd:96:8e:08:6b:a2:c3:8b:49:9d:16:57:
ba:f2:98:30:a8:78:7e:5d:33:5d:8f:85:58:95:bc:4e:3d:f8:
52:04:c2:b1:cf:50:8b:95:9d:0b:b2:aa:7e:4b:f9:c0:cd:99:
19:68:5f:f1:42:38:2e:0a:65:e4:14:1d:ff:9e:42:c7:ba:59:
ac:ab:b9:c6:fd:99:d8:b3:62:c9:0c:8c:c1:c3:91:51:04:e5:
57:19:62:9b:25:79:0c:48:2e:c7:ff:f8:4a:74:63:54:9e:8e:
6b:a3:52:ee:45:21:8d:e2:09:62:84:a8:d1:0e:82:07:4f:f9:
2b:10:6f:79:9b:ac:59:67:ce:b6:ca:4d:26:36:a9:6e:f1:86:
5d:2c:d2:4a:f9:5e:16:24:db:2e:ba:ee:f7:df:0f:08:85:6f:
53:94:c7:e5:25:57:02:12:e1:4c:5d:66:30:3a:6a:46:2e:86:
34:c0:39:7c:4c:6e:6c:41:9a:09:e2:8f:7a:77:59:66:f9:b2:
eb:60:78:d5:9a:f5:c2:68:bd:c4:cd:74:89:cd:5e:91:9e:d1:
b4:34:65:3d:3f:fd:eb:07:4d:ef:ec:ad:b7:c2:62:54:1f:9b:
6f:88:e7:5b:18:98:8c:74:af:9f:d4:ca:f7:76:17:da:52:f4:
a5:a1:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:58 2024 by rpki-client on console-ams.rpki-client.org