Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/Ohy7K1tFYN-slvjL4vQxIYFzkiI.roa
File: Ohy7K1tFYN-slvjL4vQxIYFzkiI.roa (raw, json)
Hash identifier: H6AEYTRr3t2Cu/eREPgvDTc3cQBbNMKU1+tC7+YY7eE=
Subject key identifier: 3A:1C:BB:2B:5B:45:60:DF:AC:96:F8:CB:E2:F4:31:21:81:73:92:22
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 018CB4B77796EB34D63CA47BC508456CE68A
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/Ohy7K1tFYN-slvjL4vQxIYFzkiI.roa
Signing time: Fri 29 Dec 2023 08:36:11 +0000
ROA not before: Fri 29 Dec 2023 08:36:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 77.243.208.0/20 maxlen: 20
46.31.176.0/22 maxlen: 22
46.31.182.0/24 maxlen: 24
46.31.180.0/23 maxlen: 23
185.91.143.0/24 maxlen: 24
185.91.142.0/24 maxlen: 24
185.91.141.0/24 maxlen: 24
2a00:df80:1::/48 maxlen: 48
2a00:df80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:b7:77:96:eb:34:d6:3c:a4:7b:c5:08:45:6c:e6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Dec 29 08:36:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a1cbb2b5b4560dfac96f8cbe2f4312181739222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:af:0a:f6:81:54:7c:9f:4e:61:80:1f:f5:
4d:f5:fd:ea:de:00:5c:33:97:27:1e:31:62:0c:f8:
5d:8f:07:58:48:ec:ab:c0:77:e1:4d:b7:c2:4b:06:
6b:fb:fd:0f:ce:58:91:b8:f4:c3:4d:99:64:bc:01:
aa:1f:8d:c5:e4:1f:53:e3:62:c8:33:4f:cd:54:d5:
c6:56:6b:95:d2:f4:1c:e9:95:bd:7b:d4:2d:71:fa:
80:95:5b:d7:60:02:aa:d9:6f:b3:4a:35:94:a3:af:
26:45:45:aa:53:30:90:eb:10:15:1b:0f:76:ca:18:
db:00:52:68:d9:aa:6e:ea:01:21:a9:f1:a8:9f:34:
67:7e:c7:1e:b4:27:67:67:9e:45:6d:e1:a7:43:95:
72:c4:ed:ee:8d:1b:30:b9:56:03:5f:ce:5e:a1:45:
93:81:33:86:21:a2:66:8a:60:92:ae:c5:f7:21:11:
31:46:6b:aa:d5:1a:b8:31:45:94:28:83:89:f9:f8:
ca:42:63:09:18:bd:05:af:e9:0c:2c:50:45:cf:21:
2b:3d:b5:07:33:75:dc:de:95:be:95:79:0d:74:f3:
37:9b:db:06:57:a7:a6:a8:9e:79:4a:bd:81:9a:b6:
c9:ab:a8:ad:63:f6:34:19:85:03:75:e7:1c:c5:a7:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:BB:2B:5B:45:60:DF:AC:96:F8:CB:E2:F4:31:21:81:73:92:22
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/Ohy7K1tFYN-slvjL4vQxIYFzkiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.176.0-46.31.182.255
77.243.208.0/20
185.91.141.0-185.91.143.255
IPv6:
2a00:df80::/47
Signature Algorithm: sha256WithRSAEncryption
43:3e:7c:18:d9:31:3a:be:1b:d4:33:56:9f:a6:25:55:07:f4:
43:0a:42:e3:a3:e6:7f:a6:11:8b:d7:36:23:39:88:31:e6:e8:
b7:8e:82:c4:20:1d:a9:bc:9a:da:70:c8:4c:f8:e5:b0:14:ed:
77:f8:86:94:05:dc:35:76:14:ae:eb:ed:d6:e7:bd:ed:ca:05:
49:ec:ba:39:c5:d0:3b:3c:74:ed:2a:46:ee:b1:b0:3e:21:31:
b3:9c:2c:88:f7:8a:4b:d4:51:0f:02:71:cd:db:a1:5c:00:00:
ef:75:a4:f8:a6:3e:b6:ce:19:d0:be:b3:9b:2d:3a:82:1c:9a:
c0:df:97:a1:41:db:2e:cc:54:23:ae:dc:9f:bb:10:1c:2b:61:
3e:56:8a:d9:bb:51:9b:85:e7:04:65:e4:13:98:8b:32:2a:8a:
99:2e:e9:98:ef:10:12:87:a9:d0:49:6f:f2:f1:6d:f6:38:bb:
7a:df:05:c0:12:7d:9c:26:65:d8:e5:99:bc:20:c5:0e:a7:89:
8a:ff:d3:35:f6:35:42:2c:97:ec:2b:ac:3e:30:55:cd:5b:06:
81:08:ac:a5:fd:77:3a:e1:85:b1:c9:a2:3d:70:a4:a2:f3:03:
ae:a1:0e:aa:90:b4:f4:3b:03:80:64:52:a7:f2:d1:09:f4:a4:
08:52:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:19 2024 by rpki-client on console-ams.rpki-client.org