Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/olrf-D1DG9lkCzmPJj9J0WbHqEU.roa
File: olrf-D1DG9lkCzmPJj9J0WbHqEU.roa (raw, json)
Hash identifier: MIbOSI/KCiQjY7G12+jAoBLKxwn5SRZ1E7ffxI7XOw4=
Subject key identifier: A2:5A:DF:F8:3D:43:1B:D9:64:0B:39:8F:26:3F:49:D1:66:C7:A8:45
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 018DC4290FA1220844B522B46B8EC71086FF
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/olrf-D1DG9lkCzmPJj9J0WbHqEU.roa
Signing time: Tue 20 Feb 2024 01:37:21 +0000
ROA not before: Tue 20 Feb 2024 01:37:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
Validation: Failed, certificate revoked on Sun 25 Feb 2024 21:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:29:0f:a1:22:08:44:b5:22:b4:6b:8e:c7:10:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Feb 20 01:37:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a25adff83d431bd9640b398f263f49d166c7a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:59:76:95:47:e4:ec:29:cd:66:26:a1:b8:
c5:26:9e:83:d5:ec:fe:25:a3:da:00:d8:77:34:35:
e3:35:f6:cc:b7:35:f2:8f:5c:c9:d6:d3:f8:b8:dd:
d3:87:8e:4c:4e:21:01:3b:22:55:26:c2:f2:95:f2:
7d:81:76:bd:72:34:e5:f4:56:b2:4c:71:bb:6a:8e:
09:e4:f9:ec:bf:13:d2:f0:a8:ee:b9:ce:b9:3c:37:
a7:aa:1d:72:4c:01:b0:a8:c4:b4:0f:1b:d2:b7:98:
f1:94:40:0d:41:d4:68:8a:65:75:ba:66:cb:96:ac:
0e:d9:0d:3c:dc:89:97:da:17:d3:f7:99:1b:1e:d6:
58:0f:6c:53:b4:06:69:df:e1:d9:2c:d1:3e:7f:7d:
fc:37:91:e3:1a:c2:e3:71:5f:ca:1d:21:ec:7f:1b:
85:20:ab:1f:bf:89:de:e1:4f:82:b3:29:1d:0d:fb:
d1:89:1f:2d:cb:62:e2:7b:ce:ff:96:ba:58:02:d3:
f4:5f:8b:4f:2f:d4:98:d4:5a:c6:b9:c3:a2:3c:3c:
1b:1d:9e:52:86:fa:44:12:44:b5:ef:83:2a:0f:09:
e8:c3:72:d8:94:5a:e4:19:11:7a:34:f7:d5:99:0d:
de:0a:6e:d1:3b:6f:54:e9:4e:62:d9:29:34:e0:50:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:DF:F8:3D:43:1B:D9:64:0B:39:8F:26:3F:49:D1:66:C7:A8:45
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/olrf-D1DG9lkCzmPJj9J0WbHqEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80:8::-2a14:3f80:1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:d3:88:99:ad:21:79:f5:9d:ce:cc:c0:bb:dc:26:9f:eb:72:
7e:55:34:a0:3b:b6:91:3e:ad:0b:87:51:6d:0a:35:64:d2:a1:
a2:6a:32:70:60:43:4e:7c:06:6d:98:a3:2b:79:ce:92:d4:98:
9d:ec:21:40:3b:34:20:90:2c:7a:65:63:44:20:86:dc:c0:b8:
4e:39:14:e6:f3:f3:3d:a5:f1:18:df:74:b6:b4:a1:77:a6:66:
96:57:75:f9:77:c9:ac:2d:55:24:67:bc:e5:3e:59:ca:a0:fd:
bf:e2:37:bd:2d:57:19:9b:45:9a:c6:f0:d8:a3:6b:e0:d1:26:
75:4e:65:d7:f4:dd:e7:39:38:b8:e0:96:ae:77:e2:c6:f0:7e:
28:2e:99:b7:e3:ee:d4:18:ac:86:9e:a0:c5:a2:bc:3b:97:19:
2e:60:29:5d:38:57:ba:ca:f4:fe:24:1f:0c:bf:84:71:dd:6b:
5d:76:bd:14:68:10:7b:39:1f:a4:64:cb:44:df:70:94:44:bb:
ac:6a:4c:fd:c7:4f:f6:52:bd:da:29:bc:f8:d0:76:2d:98:ff:
57:23:cb:4a:4d:38:12:e2:30:e6:8a:0f:61:9d:b3:1f:70:55:
a6:d9:0f:90:a6:de:fe:95:2d:2c:31:24:76:3d:fb:76:af:a9:
ef:04:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org