Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Oh94GlasWjsXgehr2vmYPjtmz_8.roa
File: Oh94GlasWjsXgehr2vmYPjtmz_8.roa (raw, json)
Hash identifier: HJhbGihxxxVCoCjO9Zl8MLrHBAiUhxB2EuJGs6Vw8qA=
Subject key identifier: 3A:1F:78:1A:56:AC:5A:3B:17:81:E8:6B:DA:F9:98:3E:3B:66:CF:FF
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018C40D650542B9F0419D9C8AE6081505752
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Oh94GlasWjsXgehr2vmYPjtmz_8.roa
Signing time: Wed 06 Dec 2023 20:33:56 +0000
ROA not before: Wed 06 Dec 2023 20:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49665
IP address blocks: 178.155.52.0/24 maxlen: 24
85.140.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:d6:50:54:2b:9f:04:19:d9:c8:ae:60:81:50:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 6 20:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a1f781a56ac5a3b1781e86bdaf9983e3b66cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:00:62:3f:3f:62:13:b1:1d:f6:be:a5:9e:
29:94:da:a7:7d:fe:07:14:71:27:7e:e5:02:9f:6d:
52:f8:4c:9c:de:35:bb:7c:ed:6a:24:71:93:3a:3e:
05:72:ae:bd:27:f9:09:b1:18:31:73:57:db:ed:52:
49:f0:af:f5:c0:c5:5c:9a:e0:30:7c:a5:f7:8d:e8:
63:1a:61:6c:56:d2:a7:b8:08:3f:de:1b:5a:3f:b4:
3a:1e:1f:d1:e4:e0:31:d5:56:41:69:d0:06:b3:6d:
3c:17:69:4c:48:ab:0b:9d:f2:02:af:75:52:e7:96:
49:96:20:cb:88:43:ee:96:ec:9f:6a:18:fc:ba:bb:
f1:df:73:7b:dc:b1:cd:05:c0:c9:cd:06:a9:14:45:
a9:cc:1e:71:b6:3c:32:01:f4:1f:64:60:1c:e4:aa:
2f:b9:8a:15:3d:c8:c3:e4:19:54:2f:59:da:1e:73:
29:05:7e:e1:d4:b5:d5:27:9f:9f:08:db:26:69:7d:
f5:d3:9d:e6:81:40:46:93:21:0e:7f:2b:82:97:c1:
a5:de:77:b3:39:24:6e:ab:5f:f7:57:73:b2:1e:15:
cf:05:f1:b9:44:c8:ff:f5:76:f8:87:41:2d:c7:4e:
ef:ab:43:d3:f1:ef:b9:87:bd:9c:53:f1:d6:a3:d8:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:78:1A:56:AC:5A:3B:17:81:E8:6B:DA:F9:98:3E:3B:66:CF:FF
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Oh94GlasWjsXgehr2vmYPjtmz_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.95.0/24
178.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e4:98:41:15:d2:10:3b:5d:82:86:b9:49:ee:c1:99:85:2a:
28:81:ea:d3:38:9f:f2:6f:4e:40:23:2f:87:e8:5c:28:52:c5:
f1:e3:67:39:53:8f:9c:44:14:17:9e:46:71:77:e8:c2:6d:e4:
25:42:54:d4:7d:58:71:50:37:e6:3b:63:25:92:53:79:e6:72:
22:95:d1:cf:12:62:7d:12:9e:4f:0e:32:6f:a6:0c:11:df:5a:
2d:94:8f:fc:92:1d:62:a3:dc:d7:00:3d:cc:9c:41:b4:7a:35:
1b:bb:71:25:d2:3f:bf:32:e7:46:5d:06:6a:ea:8f:eb:d0:e9:
07:af:a3:5c:11:6c:01:99:47:bb:4f:4d:1c:45:24:ad:49:f7:
96:12:92:d8:af:cb:1b:89:00:1a:5b:9b:17:6d:c5:8f:50:35:
68:b4:6c:68:78:c6:fd:35:3c:a6:52:d7:1f:6b:0a:24:ee:24:
f4:3f:b9:fb:1a:af:bc:42:eb:29:c1:4d:af:21:d9:ef:c9:3b:
0f:15:31:06:8f:2b:6f:28:24:02:b9:33:2d:7d:e7:d1:49:e4:
59:85:9e:f3:cb:e3:d4:85:1a:c6:77:ab:36:98:6a:ae:3e:d3:
37:9e:9b:8e:05:49:37:dd:22:d2:67:17:3d:a9:d0:4c:f3:22:
8b:29:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:21 2024 by rpki-client on console-fra.rpki-client.org