Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/oh09FbvPdpXyPFaCddc9CWA9iK8.roa
File: oh09FbvPdpXyPFaCddc9CWA9iK8.roa (raw, json)
Hash identifier: 2FijCOz9Thcf25fJ6IsP7SjkSqWgjsL7Iuq4dzfoRXc=
Subject key identifier: A2:1D:3D:15:BB:CF:76:95:F2:3C:56:82:75:D7:3D:09:60:3D:88:AF
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 0188DF9D152552AB3EC8E426868AC546A437
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/oh09FbvPdpXyPFaCddc9CWA9iK8.roa
Signing time: Wed 21 Jun 2023 20:19:53 +0000
ROA not before: Wed 21 Jun 2023 20:19:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:9d:15:25:52:ab:3e:c8:e4:26:86:8a:c5:46:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Jun 21 20:19:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a21d3d15bbcf7695f23c568275d73d09603d88af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:3d:1c:c4:8d:16:dd:54:e4:41:21:67:1b:
0b:6b:6e:38:4d:c1:4e:1c:07:a4:ba:dc:4c:41:bb:
b6:4f:78:c4:e8:ef:0d:f7:7d:f4:ca:f0:ce:df:42:
15:57:a5:75:29:69:77:ad:86:8b:63:73:07:90:9d:
70:50:bd:f7:ec:c0:ab:17:dd:40:ae:bc:4d:58:cd:
8e:e7:1b:ec:04:6f:51:fa:74:c2:af:2b:95:32:4c:
d0:b6:ec:06:ef:3e:ac:c1:fa:0f:6c:d7:ba:5f:57:
1f:10:26:0e:bb:52:46:4c:b3:54:de:fb:e0:2b:e9:
a4:fe:46:a9:b7:fc:7d:c8:62:1b:7a:5c:3f:a0:f3:
d1:ce:71:57:88:a9:e0:34:0e:b2:c4:e9:43:00:f9:
09:61:32:56:d0:7f:1a:d9:c3:43:44:01:fd:7a:58:
1d:21:3a:5a:40:4e:c7:46:26:93:e6:52:32:ef:9c:
1c:22:74:3e:d8:1b:2d:33:85:eb:a7:e8:16:3e:53:
37:9d:6d:b5:77:4e:db:f4:00:19:7d:30:69:e0:0c:
03:2e:c1:27:d6:9a:40:ec:22:72:70:3f:02:b2:94:
7c:19:fb:f8:99:7d:1a:8c:80:46:44:5e:a6:bb:cb:
a9:09:5c:05:d2:e5:1d:7b:d5:60:90:33:16:08:7f:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:3D:15:BB:CF:76:95:F2:3C:56:82:75:D7:3D:09:60:3D:88:AF
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/oh09FbvPdpXyPFaCddc9CWA9iK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bf:98:95:ca:c3:97:1e:71:8e:0c:2f:ea:e1:30:90:91:2a:
a2:44:ca:49:66:7c:fe:d2:a0:3e:b7:9b:89:61:fc:b5:d0:7b:
2f:05:f8:03:11:9c:1a:70:cb:2b:c1:ad:0a:e5:40:3a:c1:2a:
02:8f:8b:d0:e4:44:ac:f3:8d:89:97:53:be:0b:c0:7d:ec:3f:
4e:21:9f:5c:43:45:79:6c:81:8e:5d:33:03:f7:63:6c:15:64:
ca:cc:da:1f:f9:c7:e6:f4:f5:ee:9d:88:c0:00:fa:dd:ab:1f:
b5:86:58:7f:47:19:2c:29:d0:ad:54:fa:ee:ad:b1:2c:29:54:
8c:0d:1c:a8:e2:32:4e:1a:b9:01:e3:7e:7d:24:e5:56:7e:da:
ce:31:8d:22:a2:38:14:5d:5c:e3:d5:bf:95:f1:43:73:a9:4d:
00:7b:f0:04:3e:2f:cf:a7:13:fc:ef:88:62:5c:3c:81:93:e6:
0e:7f:97:9a:e3:56:3e:61:13:c4:46:8c:37:1e:de:64:2a:c7:
a1:d6:5d:8c:c6:bc:ba:f7:23:d8:e4:4e:87:2b:91:44:99:32:
61:98:c1:4f:1a:a2:6b:21:90:73:f8:32:4a:52:1a:68:64:98:
2b:e6:fd:55:36:f6:9c:7c:78:03:5c:71:6f:ff:f5:95:60:2f:
27:a0:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:08 2024 by rpki-client on console-fra.rpki-client.org