Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OELNGWn55XgHg5TnfVXJ-byrbmc.roa
File: OELNGWn55XgHg5TnfVXJ-byrbmc.roa (raw, json)
Hash identifier: SPDGkRB2hUDIzzNImHbT2rr6hPNh6+tnx9Tcy9jOdjM=
Subject key identifier: 38:42:CD:19:69:F9:E5:78:07:83:94:E7:7D:55:C9:F9:BC:AB:6E:67
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 018571A7AC59411E9ECB054B7E757920C822
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OELNGWn55XgHg5TnfVXJ-byrbmc.roa
Signing time: Mon 02 Jan 2023 08:44:52 +0000
ROA not before: Mon 02 Jan 2023 08:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206143
IP address blocks: 185.195.63.0/24 maxlen: 24
185.195.62.0/24 maxlen: 24
185.195.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 May 2023 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ac:59:41:1e:9e:cb:05:4b:7e:75:79:20:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jan 2 08:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3842cd1969f9e578078394e77d55c9f9bcab6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:df:25:02:33:ee:78:e7:d7:c7:f4:a6:d6:
f4:95:15:b6:b4:79:c3:0e:a3:4e:a7:f3:b7:d7:91:
ec:5a:76:62:66:2c:7c:01:87:28:50:ec:1a:e0:b9:
a4:8f:e7:9f:f9:51:7c:6c:a4:73:e4:41:7c:7c:62:
6e:ac:1c:cb:13:36:29:54:b1:13:14:bd:48:b7:f9:
1e:f6:52:6d:d9:90:01:51:94:ae:79:38:0a:6e:f4:
dc:16:8e:81:0c:29:e6:f3:a0:2f:fc:0d:bb:6d:ff:
2f:3b:17:de:92:b4:23:89:0b:6a:52:a3:e9:95:24:
54:64:43:18:e3:c5:f7:27:b9:80:76:a6:b7:dd:63:
3f:25:54:c9:2a:e8:13:e4:67:0d:32:4b:d5:be:c4:
a5:64:36:b6:5f:13:28:1f:33:b4:9b:6e:70:39:ed:
53:dd:8e:2e:61:c4:f3:a2:3c:17:5f:dc:66:79:6d:
6d:ae:b8:46:74:ec:e8:7d:0a:b1:f2:f4:c7:23:1a:
8a:c9:55:c0:c9:1f:c5:a4:14:e2:1c:f5:b5:dc:7e:
eb:c7:a0:4e:8a:54:6e:ec:06:89:64:39:58:16:1b:
6b:66:9c:55:bd:d8:4a:dd:ee:08:f9:18:1c:2c:e2:
6b:c8:f7:90:c0:3d:79:25:f6:37:15:9f:ee:8c:a7:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:CD:19:69:F9:E5:78:07:83:94:E7:7D:55:C9:F9:BC:AB:6E:67
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OELNGWn55XgHg5TnfVXJ-byrbmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.61.0-185.195.63.255
Signature Algorithm: sha256WithRSAEncryption
2d:a9:d9:44:9d:54:7a:4e:31:79:3d:a4:77:28:14:57:38:e5:
26:6a:45:6b:3c:fe:6b:28:d0:62:77:ab:91:2c:c2:4f:4a:32:
0c:d6:e3:38:53:b3:48:81:2d:46:87:d2:9b:da:2f:12:9b:2b:
b3:86:e4:cc:65:ee:90:2e:cc:bf:92:b2:77:23:d2:28:12:cc:
16:94:ae:1a:c5:f8:dc:f3:aa:4f:f7:b9:09:12:ed:9c:26:e8:
48:4d:2f:ee:1c:96:aa:de:5c:28:ba:fe:92:f9:1c:54:bd:b7:
1a:f7:5f:de:5a:62:7d:be:ed:d3:72:7f:7e:33:72:7c:e2:99:
9f:10:df:dc:99:c9:a0:d9:23:e9:d7:9a:b8:23:63:50:98:97:
4c:d5:bd:65:18:35:a0:23:f3:7e:ef:73:a1:23:1c:be:15:ed:
43:77:16:71:16:9c:b9:4a:01:b0:b3:68:1a:46:fa:4a:ee:a0:
0d:ec:ff:e5:ea:2b:df:a0:25:87:fd:88:c3:db:08:e1:8b:88:
93:fb:6f:67:d3:36:d2:bc:26:bc:13:dc:45:e3:11:b5:e3:b8:
e3:07:1e:1e:93:72:62:9b:98:f7:6d:3f:fa:8b:00:6b:a6:d1:
ab:f9:09:44:11:d5:bf:de:5a:a0:2b:66:50:7c:35:45:01:15:
7d:68:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:38 2024 by rpki-client on console-ams.rpki-client.org