Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oWHQJDCPhmXfEg-zBdTx8tdQC7A.roa
File: oWHQJDCPhmXfEg-zBdTx8tdQC7A.roa (raw, json)
Hash identifier: LRsqtxRv6Y87qVzEYct9qil3m91hH7SK/y0Ot6ZWRAM=
Subject key identifier: A1:61:D0:24:30:8F:86:65:DF:12:0F:B3:05:D4:F1:F2:D7:50:0B:B0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0187048DB050405C9495ABE0A0525DB631FB
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oWHQJDCPhmXfEg-zBdTx8tdQC7A.roa
Signing time: Tue 21 Mar 2023 14:23:27 +0000
ROA not before: Tue 21 Mar 2023 14:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60581
IP address blocks: 91.242.118.0/24 maxlen: 24
91.242.119.0/24 maxlen: 24
185.173.244.0/22 maxlen: 24
185.173.246.0/24 maxlen: 24
185.173.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:8d:b0:50:40:5c:94:95:ab:e0:a0:52:5d:b6:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 21 14:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a161d024308f8665df120fb305d4f1f2d7500bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:65:01:56:32:34:88:c8:66:a3:10:60:da:
b6:17:9e:11:cc:7b:cb:0a:82:b3:c8:af:dc:45:4d:
8c:e7:d2:d6:ff:9a:00:b7:7b:48:7a:22:d5:dc:d4:
ab:27:b0:6d:43:10:65:de:ed:4b:cd:a2:db:a9:7f:
e2:be:29:6f:8e:64:95:cc:52:ff:29:97:e6:57:75:
5e:04:7f:66:01:32:8d:66:04:fa:28:23:63:cc:d8:
09:d1:b0:8f:c6:7f:6a:df:f3:6e:02:23:f2:a8:11:
dc:36:68:f7:cf:04:cd:bf:46:7a:40:10:81:f7:73:
53:31:83:f3:04:b0:d0:fc:cc:19:db:91:c9:60:84:
f8:61:bd:46:54:2f:08:b0:0e:ee:46:c0:47:50:56:
44:ef:13:74:7f:55:67:b5:ef:4f:eb:9b:df:c2:1e:
c7:94:c2:00:16:f6:1a:c0:a7:53:34:f7:76:71:dc:
93:50:d6:45:14:e9:c4:fb:39:7b:62:8b:57:e1:8e:
65:f3:91:eb:91:dd:1e:ec:dd:0d:e9:88:12:ff:44:
95:ef:fa:c8:e3:60:d0:87:f6:50:73:5b:39:37:a2:
6d:21:6a:db:57:06:b9:d9:b7:5c:4e:37:89:03:49:
5e:ec:d0:9c:0a:55:f0:98:b8:6a:15:55:1f:71:40:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:D0:24:30:8F:86:65:DF:12:0F:B3:05:D4:F1:F2:D7:50:0B:B0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oWHQJDCPhmXfEg-zBdTx8tdQC7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.118.0/23
185.173.244.0/22
Signature Algorithm: sha256WithRSAEncryption
67:51:6f:56:27:45:8f:d2:96:c3:3c:aa:35:db:de:d3:0f:30:
82:bd:e5:e3:02:6b:c3:99:16:0d:74:73:6f:6e:ae:dc:ea:7b:
3d:d5:7a:b7:5d:ba:7e:77:c7:dc:d7:32:16:45:48:a4:3f:6f:
a7:6c:2c:92:61:dd:82:f3:f2:96:4b:74:e1:60:2a:83:53:3a:
9d:2c:df:2f:c0:3b:c0:e0:51:ba:e8:63:33:61:4f:8d:0f:cb:
16:97:17:6c:f1:55:1c:40:d6:19:ca:f6:aa:45:d1:0e:84:41:
4f:58:3b:42:f2:92:02:f4:e5:34:f2:18:4d:32:70:55:41:74:
a9:a9:2e:c6:c7:22:06:61:59:97:9e:a8:11:26:00:14:f8:b6:
6d:85:e4:96:da:55:4d:14:59:b2:ae:2c:3d:46:0e:8c:ee:53:
14:59:36:e0:4c:06:35:bb:4d:49:c7:11:a2:ce:1d:42:9b:ac:
5f:7a:2c:15:df:ac:f7:cf:e5:d2:c3:5c:90:f9:04:48:f4:e3:
3d:e2:5d:da:ba:4b:64:e8:49:6b:d8:f6:e7:db:7d:36:0d:8e:
82:cd:db:a3:7a:c2:cb:c4:3e:15:98:5a:d2:a3:32:e4:0e:95:
ab:76:b2:46:a5:12:79:c1:50:10:7a:87:77:cc:8d:e9:b7:24:
74:44:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org