Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/o_zDeyZHAQ9n1RMOrdlL2r-smqQ.roa
File: o_zDeyZHAQ9n1RMOrdlL2r-smqQ.roa (raw, json)
Hash identifier: 77Q4vFS0EHAOATqyWj+DsIZd3TcyP5CGVIh4MxsAois=
Subject key identifier: A3:FC:C3:7B:26:47:01:0F:67:D5:13:0E:AD:D9:4B:DA:BF:AC:9A:A4
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018E8401F6D68827C7EC0E6C8845A365403E
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/o_zDeyZHAQ9n1RMOrdlL2r-smqQ.roa
Signing time: Thu 28 Mar 2024 07:41:44 +0000
ROA not before: Thu 28 Mar 2024 07:41:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.191.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 18:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:01:f6:d6:88:27:c7:ec:0e:6c:88:45:a3:65:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Mar 28 07:41:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3fcc37b2647010f67d5130eadd94bdabfac9aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:a4:e0:2a:47:45:a5:cd:5f:07:f4:21:03:
c7:22:be:77:e1:c3:b2:04:a3:2f:4f:8d:ba:00:96:
be:46:01:d3:d2:5f:fc:27:2b:9f:d8:80:60:2c:b3:
8b:a3:68:e7:ae:50:71:73:1d:ae:5b:d7:bc:b3:7d:
36:a1:96:b8:1a:5b:7d:f8:b9:48:45:75:fd:aa:55:
78:9a:fb:15:0a:41:03:16:bf:18:38:48:89:99:68:
05:53:46:98:cb:ef:0c:fd:fc:92:e4:36:39:1d:6a:
1f:22:37:93:e3:14:33:6a:df:b9:33:64:1d:95:5b:
5d:a9:cf:f0:32:bb:f5:52:35:82:b2:9e:c6:29:35:
a9:b3:3f:78:0f:ce:27:da:bf:fd:db:8c:c4:76:dc:
d5:6c:5d:21:39:86:ad:21:84:4f:67:8e:e9:6f:dc:
61:9c:31:ee:5e:81:c4:8c:ca:1a:55:cd:db:d6:60:
4c:d2:dd:21:87:78:76:e5:ef:f6:42:7f:17:85:fd:
27:aa:e5:ba:b4:08:b2:df:a7:84:e6:61:f1:cd:da:
a9:6a:95:d6:00:5e:0f:b3:e3:98:8e:dc:ef:03:f7:
b0:5c:c8:8e:a7:0c:59:c8:11:79:a6:93:29:36:d7:
82:c4:3d:73:f2:6f:69:c5:16:b7:4d:40:08:af:11:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:C3:7B:26:47:01:0F:67:D5:13:0E:AD:D9:4B:DA:BF:AC:9A:A4
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/o_zDeyZHAQ9n1RMOrdlL2r-smqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:bb:1e:77:5b:c9:53:af:19:28:07:68:7d:bf:6f:34:45:
2b:f8:02:4d:79:c6:cc:3e:4c:27:c6:d1:73:f4:50:29:21:58:
fa:19:30:e0:c4:fb:73:cc:58:b3:64:51:61:35:3b:ae:ef:f5:
20:b7:72:89:bf:f7:24:30:2d:bc:fa:50:ad:1b:49:c3:94:28:
ae:d8:bb:1a:de:ac:bd:fd:13:e7:6f:43:01:93:e2:bb:04:8c:
2c:c8:d7:4a:ce:a0:76:08:1c:09:f1:43:0f:15:3b:d1:06:2c:
ef:f9:39:d7:b2:cb:31:11:f6:52:b3:34:70:ac:52:26:16:b2:
e4:85:28:17:f2:c2:09:5d:10:d7:f3:4a:89:33:7b:fc:21:4e:
e3:a6:78:6a:bb:ee:68:67:44:ae:a2:18:ad:3b:fc:72:d0:51:
29:82:65:68:4d:e1:85:dc:ca:9e:bd:da:3f:52:ca:5a:75:0f:
0e:cc:33:d7:34:a1:cd:d0:ab:bb:71:4b:52:25:ff:8f:3f:f5:
35:cf:22:77:7e:ee:fe:90:09:d5:b2:ec:03:ee:46:2e:84:ae:
26:7f:bc:a9:ac:65:78:82:ab:10:3a:ed:a8:94:f8:0c:0b:08:
c1:ed:05:6d:8a:eb:59:c3:78:64:10:d1:11:01:46:d4:81:de:
b6:74:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:19 2024 by rpki-client on console-ams.rpki-client.org