Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/oi3KzC-5t1IqG9R_BgMFQRyiiWY.roa
File: oi3KzC-5t1IqG9R_BgMFQRyiiWY.roa (raw, json)
Hash identifier: L4ygurOfN8z4NwR5gaolcavs8m3nb73nNbMjJDVWkOc=
Subject key identifier: A2:2D:CA:CC:2F:B9:B7:52:2A:1B:D4:7F:06:03:05:41:1C:A2:89:66
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018C86CBB5CD2813E2330C4D44A0E07AE565
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/oi3KzC-5t1IqG9R_BgMFQRyiiWY.roa
Signing time: Wed 20 Dec 2023 10:35:46 +0000
ROA not before: Wed 20 Dec 2023 10:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199482
IP address blocks: 178.156.122.0/24 maxlen: 24
178.156.126.0/24 maxlen: 24
84.236.157.0/24 maxlen: 24
37.72.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:cb:b5:cd:28:13:e2:33:0c:4d:44:a0:e0:7a:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Dec 20 10:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a22dcacc2fb9b7522a1bd47f060305411ca28966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:a7:26:92:a5:3c:92:2e:98:11:84:39:d4:
41:41:2e:9c:f2:32:d8:d7:8d:8a:6e:9b:ec:03:45:
11:29:b0:dd:37:87:af:58:49:40:49:12:34:da:68:
4a:44:42:a9:2d:e6:45:5a:1b:a7:c2:db:6e:6f:63:
bc:e2:dd:73:94:c8:15:bf:0a:c1:67:4e:3f:c3:76:
a7:24:31:bd:b6:11:4c:2b:dc:ce:78:db:f7:a8:b3:
f5:9d:9a:4f:20:25:13:63:20:f9:3c:12:3b:12:68:
d4:a1:7a:7a:23:f0:16:75:a0:4f:22:6f:af:90:d9:
d2:4d:9b:85:cb:50:2f:a1:53:ca:70:19:40:e3:62:
05:2c:91:17:bd:fd:30:28:ed:0f:b3:1f:89:45:a3:
a4:7c:a4:c8:62:40:4e:1d:cc:03:db:ad:69:17:72:
d7:c2:8d:f8:d2:99:5a:67:c4:1a:b6:f5:0d:a4:4e:
a7:71:e0:60:7d:99:f2:6e:fa:4e:d7:f4:78:2d:9a:
a3:f3:fd:e0:d1:07:61:dd:34:c9:d5:a0:86:d4:8d:
7a:ac:79:df:de:d7:24:32:10:32:ce:a1:2b:96:2f:
ca:2a:8e:ab:2b:1f:dc:60:a3:0a:6a:dd:48:86:5e:
86:5b:a9:18:53:95:02:48:23:f1:60:30:08:9c:3d:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2D:CA:CC:2F:B9:B7:52:2A:1B:D4:7F:06:03:05:41:1C:A2:89:66
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/oi3KzC-5t1IqG9R_BgMFQRyiiWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.12.0/24
84.236.157.0/24
178.156.122.0/24
178.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
28:62:48:81:a1:7d:bc:02:bb:ef:04:14:d4:bf:89:42:ab:b1:
44:67:7d:55:6f:0f:23:8b:ce:a1:96:84:27:ae:0e:7f:1f:4b:
a3:62:9c:ff:b3:be:d5:05:c1:2b:52:8d:10:46:1b:47:a1:8f:
60:9e:38:a9:01:2e:c1:32:30:52:79:cf:f9:a9:da:e3:44:fc:
87:0e:04:e5:e6:9e:0d:20:bf:1b:5d:72:f0:3a:40:32:b8:23:
de:a9:de:71:c5:a0:c6:bf:c8:cc:1f:fe:09:04:75:74:6e:7d:
0c:86:6c:c3:01:4e:e8:e7:66:5b:f6:2e:34:1c:47:72:11:66:
28:aa:05:d1:7b:da:c2:9a:95:76:88:0f:39:68:d8:18:06:75:
09:82:24:67:1c:4b:11:fa:47:50:f1:ef:75:19:42:56:0f:3b:
01:2b:ae:4a:50:a9:8c:44:86:19:6d:e2:22:1f:1c:b0:50:3e:
f3:47:f2:7f:c8:6e:d7:4e:92:4e:a6:08:a4:66:6c:af:b9:b8:
e3:06:da:09:97:73:ea:77:49:7a:e3:a3:08:49:c0:1a:66:c2:
8c:98:34:3b:bd:d8:c2:3a:f9:64:86:7c:46:c0:79:3b:ae:c5:
2c:fc:36:c3:35:62:a3:91:06:84:d3:fe:1d:90:ac:45:61:26:
05:c5:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:37 2024 by rpki-client on console-fra.rpki-client.org