Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/o-Clinf7CVod9-wDUKthGzHxxVw.roa
File: o-Clinf7CVod9-wDUKthGzHxxVw.roa (raw, json)
Hash identifier: bQoo4a9Uq18Y2B/5m56L8Tz+eV6QsmYWNW2KHk9sYc0=
Subject key identifier: A3:E0:A5:8A:77:FB:09:5A:1D:F7:EC:03:50:AB:61:1B:31:F1:C5:5C
Certificate issuer: /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial: 0186BE3C2EC698DD8CDFFB24AC572CF46BF3
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/o-Clinf7CVod9-wDUKthGzHxxVw.roa
Signing time: Tue 07 Mar 2023 22:41:00 +0000
ROA not before: Tue 07 Mar 2023 22:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208171
IP address blocks: 185.224.30.0/24 maxlen: 24
2a12:8d40:1024::/48 maxlen: 48
2a12:8d40:2022::/48 maxlen: 48
2a12:8d40:4096::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:3c:2e:c6:98:dd:8c:df:fb:24:ac:57:2c:f4:6b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
Validity
Not Before: Mar 7 22:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3e0a58a77fb095a1df7ec0350ab611b31f1c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:bc:53:aa:4e:00:c1:b4:3a:df:f5:01:fa:
ab:90:ce:3a:f1:33:0a:6e:86:d2:5a:10:b0:c8:20:
7e:14:5d:d9:bb:5f:6d:60:f6:2d:0c:59:57:e9:fe:
5c:b3:5d:a8:d7:4e:17:32:60:c6:b8:6f:8d:eb:99:
dc:d7:20:45:be:e9:71:57:61:71:0a:d2:e5:cd:ea:
17:1b:58:6c:48:33:6e:de:db:3c:c8:28:7a:68:a3:
33:3d:d7:47:c6:8a:37:99:11:33:5b:1b:da:ae:67:
cc:eb:46:94:f0:ef:39:60:5f:07:66:8c:46:28:f0:
8a:b1:43:45:1e:76:55:26:de:04:68:18:48:1e:45:
ea:0f:9c:0b:2e:40:55:f5:6a:55:1a:cd:63:85:e0:
c3:70:b6:c7:d6:35:8a:35:f7:b0:57:9c:e3:50:4f:
eb:b0:37:c9:48:96:5d:7b:68:91:1f:4e:30:53:e6:
aa:d8:6e:31:e6:a6:2d:a3:23:d1:3b:0f:50:9e:7a:
82:4b:c6:a8:fa:c0:4a:69:eb:68:e4:67:1c:c2:3b:
10:f7:44:bd:b9:d4:89:fe:e0:cf:e3:f9:db:ec:04:
9e:76:af:88:7c:4f:e6:a2:be:4e:80:c9:4f:9a:09:
99:0f:cf:eb:51:2e:cb:06:8b:fa:ff:5d:64:e0:e5:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:A5:8A:77:FB:09:5A:1D:F7:EC:03:50:AB:61:1B:31:F1:C5:5C
X509v3 Authority Key Identifier:
keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/o-Clinf7CVod9-wDUKthGzHxxVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.30.0/24
IPv6:
2a12:8d40:1024::/48
2a12:8d40:2022::/48
2a12:8d40:4096::/48
Signature Algorithm: sha256WithRSAEncryption
24:16:05:66:89:bf:ad:3e:4b:ac:2d:56:61:72:53:39:2d:3d:
51:fd:e0:6a:45:47:79:2f:1f:7e:9b:3f:18:06:6d:5c:75:ba:
4a:a7:cd:b5:31:9b:8d:1c:e9:ac:49:45:18:fb:ab:8c:b7:3f:
47:95:92:fb:88:3e:75:30:a7:11:ba:95:f3:c3:b0:69:bf:ae:
6a:aa:f9:30:a6:ba:6c:d9:90:fd:d7:ac:73:92:6c:7e:06:40:
f4:89:46:19:55:dd:da:be:de:d5:ee:6b:15:df:a4:3c:5c:b2:
d8:a9:4a:c4:7e:7c:d8:51:dc:c3:33:fd:8f:16:71:55:99:18:
6a:1b:98:c3:4d:6f:73:a2:70:a6:28:ed:1d:49:70:6f:b4:7f:
07:d4:db:ba:64:04:a3:d6:58:c5:46:7a:05:6b:94:dc:d1:3f:
c0:61:8f:7e:95:c1:f2:db:c0:a5:02:65:19:45:41:6a:44:dd:
52:b6:35:da:db:af:1c:4c:0d:82:dc:54:9c:a2:8d:2b:75:72:
be:17:93:21:2f:30:8a:c5:67:ee:20:2d:b4:03:dc:6e:2d:60:
e0:2c:18:de:7c:d6:28:ab:2f:35:e5:69:71:57:6f:07:be:72:
5d:11:8d:0b:62:48:f3:00:1f:d0:43:2d:68:83:ec:22:50:59:
8d:40:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org