Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/OORs8ueJvF6PdPsxmNSqIGBvbHY.roa
File: OORs8ueJvF6PdPsxmNSqIGBvbHY.roa (raw, json)
Hash identifier: EXLJ7s+bwTuGaKbwL6ys2e0h2zEzHZvWaYcOq4iKMYw=
Subject key identifier: 38:E4:6C:F2:E7:89:BC:5E:8F:74:FB:31:98:D4:AA:20:60:6F:6C:76
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 018CDA617196B358FB54437F3EAB0BF47B9D
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/OORs8ueJvF6PdPsxmNSqIGBvbHY.roa
Signing time: Fri 05 Jan 2024 16:07:48 +0000
ROA not before: Fri 05 Jan 2024 16:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206273
IP address blocks: 185.198.60.0/23 maxlen: 23
185.198.62.0/23 maxlen: 23
178.212.58.0/23 maxlen: 23
31.130.242.0/23 maxlen: 23
31.130.246.0/23 maxlen: 23
31.130.244.0/22 maxlen: 22
91.218.154.0/23 maxlen: 23
2a0a:15c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:61:71:96:b3:58:fb:54:43:7f:3e:ab:0b:f4:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 5 16:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38e46cf2e789bc5e8f74fb3198d4aa20606f6c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:d7:c0:7d:30:c7:ac:df:cb:1d:bb:30:a7:
2e:b6:7c:7a:89:7e:56:6e:31:e0:dd:46:42:0a:df:
3e:f3:e5:fa:0b:07:2c:0a:af:a5:a8:4e:3e:05:a8:
70:d4:6b:80:64:a6:04:9a:f0:38:34:ef:0f:a5:61:
38:66:fe:50:32:c6:19:72:da:1a:9c:e9:1e:49:6d:
b1:8e:07:09:36:53:20:02:b1:a0:8b:09:ad:e0:5e:
25:0a:69:17:5d:94:70:93:ea:52:a3:55:26:91:2d:
34:00:5d:81:cf:3f:cb:ae:fb:e9:1a:54:72:d1:2d:
d3:9a:7c:57:66:8d:09:21:a7:d4:1a:bb:f2:c9:60:
02:a7:9e:c1:ce:32:cc:c9:1b:ff:72:c4:63:37:7b:
2f:f4:01:ec:b7:fa:6e:97:40:3a:f3:b7:ba:d1:c1:
67:e5:13:0e:ce:cd:53:fd:00:84:7b:0a:69:2b:85:
62:60:88:54:fb:fa:d2:1c:1d:db:12:3f:10:bd:01:
0c:0a:35:82:0b:b4:2c:c8:4d:00:c3:a9:8c:42:a1:
d6:88:12:39:b4:58:de:03:54:59:03:eb:19:f1:17:
ac:cb:cc:73:ca:12:e3:a7:58:b8:29:32:95:b7:f2:
a2:2c:97:e7:38:4f:50:b3:b6:24:97:1a:76:48:5b:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E4:6C:F2:E7:89:BC:5E:8F:74:FB:31:98:D4:AA:20:60:6F:6C:76
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/OORs8ueJvF6PdPsxmNSqIGBvbHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.242.0-31.130.247.255
91.218.154.0/23
178.212.58.0/23
185.198.60.0/22
IPv6:
2a0a:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:af:ce:a2:58:0f:ff:6b:6e:aa:f4:b5:ca:41:49:46:bd:6b:
5a:df:31:11:5d:88:64:69:9a:9c:b9:78:56:33:8b:f5:db:40:
bf:16:0e:ba:51:cd:9e:a2:18:fe:67:8b:e5:10:a3:00:83:16:
ab:31:67:5b:96:7e:d6:fb:d2:1a:5e:f9:30:05:e2:c1:68:ce:
9c:bd:d0:64:a3:40:55:2e:a5:de:6d:0b:ae:8a:51:12:51:23:
81:16:db:1f:ee:23:9a:3e:fe:ef:8d:6e:4c:8b:d2:0c:b7:eb:
a4:f8:25:cb:fb:02:dc:c9:33:a9:64:a2:aa:87:5e:74:6a:4a:
db:c9:44:1b:05:1a:88:72:e7:e7:0b:fe:1a:35:0b:ab:b0:33:
bf:6f:05:2e:73:41:ad:40:6b:ef:f1:8f:3b:f5:e5:ee:1a:0d:
d5:02:1b:08:17:d7:e6:d9:db:31:5f:73:c3:27:8b:44:55:e2:
ac:99:85:d6:58:6c:dc:e1:26:1e:bc:73:07:da:56:a9:be:2c:
11:8e:f0:77:e9:28:ce:c6:f8:2c:da:96:f7:b7:bc:9a:26:5b:
80:c4:c7:76:d3:88:77:00:96:c8:c8:a3:3e:c8:9f:9c:fd:99:
3a:fa:87:4a:a8:c4:44:83:34:74:b5:c9:24:a7:25:c8:60:80:
ea:6b:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org