Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/ozGnvhwuDl22-VBYLYeTZdqNSeM.roa
File: ozGnvhwuDl22-VBYLYeTZdqNSeM.roa (raw, json)
Hash identifier: XszECQLPDt6W8B1brVDBJeg6vZ0+g69XMM7MYofVR/A=
Subject key identifier: A3:31:A7:BE:1C:2E:0E:5D:B6:F9:50:58:2D:87:93:65:DA:8D:49:E3
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01856D6F78E92CFD88E1F7265DE7D630CE8C
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/ozGnvhwuDl22-VBYLYeTZdqNSeM.roa
Signing time: Sun 01 Jan 2023 13:05:00 +0000
ROA not before: Sun 01 Jan 2023 13:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20850
IP address blocks: 193.189.96.0/23 maxlen: 24
95.69.248.0/22 maxlen: 23
95.69.250.0/23 maxlen: 24
188.230.118.0/23 maxlen: 24
188.230.120.0/22 maxlen: 23
188.230.124.0/24 maxlen: 24
188.230.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 07:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:78:e9:2c:fd:88:e1:f7:26:5d:e7:d6:30:ce:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 1 13:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a331a7be1c2e0e5db6f950582d879365da8d49e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:ba:77:29:8b:ed:08:0f:ac:65:d4:80:60:
d5:de:6c:52:a0:82:9d:a3:8c:5f:19:70:9f:d5:4d:
53:19:2c:0a:77:50:6b:b1:b6:9e:75:35:d7:60:3b:
41:0b:4b:22:cb:e5:af:63:b2:b8:4d:50:44:b1:e3:
d8:fd:9d:16:ce:b6:be:4e:9b:bb:f6:a3:84:68:78:
9f:ef:8f:78:bd:68:16:f6:60:e0:6b:17:3d:4c:8a:
f0:a0:9c:0c:07:39:47:c2:b5:b4:f8:22:7a:33:4f:
de:64:39:98:f1:3d:6a:c2:23:d1:de:e8:c2:1e:28:
9a:02:95:29:60:01:e1:a9:e7:f6:de:30:90:dc:a0:
2d:d4:21:40:3e:ec:b8:8d:3e:9c:cb:f1:15:38:97:
41:e8:4b:bf:2c:50:4e:4e:08:09:42:1c:ce:a9:03:
a2:1b:25:c2:da:25:04:59:ca:9b:ec:eb:37:13:65:
42:d8:6a:5f:a0:c3:6b:7c:9f:23:25:f2:72:03:cc:
6a:32:c9:17:e1:46:fa:6f:b4:76:32:f0:88:fc:1a:
cb:af:38:90:c2:b4:3a:cb:72:09:0b:fb:e0:42:3d:
59:39:a3:d5:68:88:59:55:ce:06:e7:f2:38:99:fc:
5b:96:6c:a7:7f:e3:67:15:b4:b4:a9:7c:c7:c1:70:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:31:A7:BE:1C:2E:0E:5D:B6:F9:50:58:2D:87:93:65:DA:8D:49:E3
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/ozGnvhwuDl22-VBYLYeTZdqNSeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.69.248.0/22
188.230.118.0-188.230.124.255
188.230.126.0/23
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:76:08:23:f3:9f:ae:87:fc:33:bb:ba:ef:d7:91:42:e9:39:
1a:c0:82:af:f7:fa:ca:8d:89:c8:f9:78:7d:eb:86:fa:77:00:
72:2e:02:00:eb:a4:c6:a4:4e:cf:ac:10:3e:58:db:00:90:42:
55:3f:dc:60:0d:af:94:34:e5:ca:bf:27:f4:48:a6:51:b3:92:
6e:cd:96:86:93:1e:0f:ef:c0:85:62:7a:63:81:32:99:89:f3:
f2:d0:14:57:44:83:6c:d2:a1:04:e8:2d:b2:a0:a6:07:c5:c4:
f7:92:be:8e:24:93:e3:41:1b:b1:3c:3a:0c:2c:99:da:3e:1e:
8b:6c:68:a0:35:52:ee:36:cb:2e:56:5d:3b:71:ce:40:45:bd:
3e:5a:dc:8c:bc:dc:77:4f:4c:d7:b7:f1:9a:f6:79:e4:b6:82:
50:43:c0:68:95:02:23:18:39:58:de:bd:41:bc:78:4c:7b:e7:
98:42:fc:0a:f9:34:60:7e:76:cf:1c:8e:0a:5e:ea:ca:0a:5c:
8f:91:ad:57:be:72:22:01:ed:1c:24:6a:8a:77:fc:03:9b:b1:
b4:e7:48:e0:df:64:60:17:60:03:db:e1:c6:90:6b:ea:0f:93:
90:0e:76:9f:08:80:c7:09:e7:53:6c:0d:d9:f8:9a:16:38:0f:
00:20:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org