Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/K4N7C9cylDr1jbCMTMx9y9xiwHg.roa
File: K4N7C9cylDr1jbCMTMx9y9xiwHg.roa (raw, json)
Hash identifier: Fr5/cpIc4AtFqE+u3SlV7X292k5HyJtJHhEG1+hA4ng=
Subject key identifier: 2B:83:7B:0B:D7:32:94:3A:F5:8D:B0:8C:4C:CC:7D:CB:DC:62:C0:78
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 0188B0171DA0ED1AA327E3995B5A97DE1496
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/K4N7C9cylDr1jbCMTMx9y9xiwHg.roa
Signing time: Mon 12 Jun 2023 14:51:24 +0000
ROA not before: Mon 12 Jun 2023 14:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60268
IP address blocks: 185.97.132.0/24 maxlen: 24
185.97.133.0/24 maxlen: 24
193.19.73.0/24 maxlen: 24
185.33.168.0/24 maxlen: 24
185.33.171.0/24 maxlen: 24
2a00:cee2::/32 maxlen: 32
2a00:cee1::/32 maxlen: 32
2a00:cee4::/32 maxlen: 32
2a00:cee3::/32 maxlen: 32
2a00:cee0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:17:1d:a0:ed:1a:a3:27:e3:99:5b:5a:97:de:14:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Jun 12 14:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b837b0bd732943af58db08c4ccc7dcbdc62c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:90:48:ff:4b:85:01:2f:77:d8:9c:4a:7f:
e1:57:45:ff:7e:a3:2b:68:27:e7:ea:c1:a4:8c:95:
16:9d:44:69:d2:6c:69:ee:6e:85:f4:df:5e:be:a7:
50:f0:5e:72:30:05:13:78:f5:86:27:51:f6:12:78:
77:62:07:5f:f1:be:19:fe:cc:13:83:e1:c9:06:1b:
dd:73:12:d1:ab:46:da:6a:d7:04:31:cf:07:4f:fd:
b4:69:07:90:95:cc:10:8e:54:f3:3b:4f:9f:0e:27:
94:6b:ea:85:33:b8:e2:58:9b:ae:b4:1d:7a:1c:b4:
65:32:ef:45:c7:9c:37:e8:84:b0:87:d7:c7:e1:50:
60:d8:52:04:91:98:f6:14:24:06:cc:8d:7f:0b:3b:
53:7b:e8:a1:58:99:32:3f:16:4a:c1:b3:74:51:d7:
45:79:82:35:61:f4:b9:77:9d:32:6c:75:44:bf:84:
e5:21:8f:92:99:f3:66:33:a3:71:49:95:c1:6f:02:
4d:88:21:b2:76:09:e5:0e:e2:8e:38:f9:0a:63:f9:
98:15:48:97:d4:7d:52:eb:ef:b8:a1:d6:4a:a5:51:
82:34:9d:ea:c1:3c:43:83:78:06:f6:11:ca:30:0e:
18:36:b2:86:15:db:00:43:9d:d0:9f:b6:e3:8b:4f:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:7B:0B:D7:32:94:3A:F5:8D:B0:8C:4C:CC:7D:CB:DC:62:C0:78
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/K4N7C9cylDr1jbCMTMx9y9xiwHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.168.0/24
185.33.171.0/24
185.97.132.0/23
193.19.73.0/24
IPv6:
2a00:cee0::-2a00:cee4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:55:05:30:db:fa:12:2e:31:89:b3:f4:0c:e4:49:af:68:c8:
40:5d:73:bc:af:6c:d1:87:64:2a:83:8a:19:03:8d:53:f7:ba:
b7:02:e8:49:c6:cc:17:ab:7a:37:d8:34:38:30:20:66:d5:3b:
65:05:61:9e:2d:17:af:b5:8d:7d:e4:0b:e1:84:94:f4:95:2c:
6e:59:90:d4:c2:1d:27:cd:80:64:e3:3c:09:98:16:5f:fb:8b:
d1:db:f0:80:a2:e9:7a:d1:6c:f6:5b:91:fa:dc:fc:50:22:ba:
60:e5:2d:a1:26:63:27:d4:90:37:c0:b5:08:50:b2:c4:3a:ec:
c4:e4:b9:aa:12:e0:da:b9:16:4a:4b:66:51:b0:53:9c:36:80:
3b:55:0c:54:6c:40:d7:6b:8e:25:db:44:29:06:34:23:47:f9:
93:cc:94:ab:32:b8:28:5d:ef:7f:a9:08:71:48:96:b6:5e:9e:
ca:15:45:09:78:84:a3:27:de:e2:b4:2e:ea:b7:cf:77:9c:51:
ae:ed:45:ad:35:e8:bb:04:24:b6:91:ba:34:7d:88:1a:46:13:
e8:59:17:b4:5c:56:b3:aa:95:db:a6:fd:28:e9:10:77:7e:03:
1e:f4:22:ee:ee:19:8a:65:7f:70:85:31:8b:68:a7:12:a7:6c:
be:bd:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:47 2024 by rpki-client on console-fra.rpki-client.org