Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/omnGS73DN8Rb0euhU2l4naCUBoU.roa
File: omnGS73DN8Rb0euhU2l4naCUBoU.roa (raw, json)
Hash identifier: KaOFRcK7rZPEqE7flUcVP+pBD1Cx+cKpGiGQI7X614U=
Subject key identifier: A2:69:C6:4B:BD:C3:37:C4:5B:D1:EB:A1:53:69:78:9D:A0:94:06:85
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 018EC7C61AA66AEC6115904F2343003DF2C2
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/omnGS73DN8Rb0euhU2l4naCUBoU.roa
Signing time: Wed 10 Apr 2024 11:30:32 +0000
ROA not before: Wed 10 Apr 2024 11:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29006
IP address blocks: 62.138.8.0/24 maxlen: 24
85.25.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 09:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:c6:1a:a6:6a:ec:61:15:90:4f:23:43:00:3d:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Apr 10 11:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a269c64bbdc337c45bd1eba15369789da0940685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:b7:91:b9:54:d1:b4:a0:f0:2f:43:72:df:
88:84:65:b1:f2:cf:e4:a2:2f:ff:55:11:3f:c9:a2:
90:86:1a:7f:7c:c3:2b:18:82:4c:a1:14:66:d4:c7:
86:06:4a:73:cb:72:32:a2:40:92:cd:6f:c2:83:fd:
a3:f0:ca:01:25:88:9c:12:ab:aa:8c:0f:7b:ae:d7:
c1:c4:54:b7:7b:5a:40:0f:49:dd:0b:8c:6e:ce:7b:
d0:45:c0:f3:62:8c:9f:2c:30:d0:49:26:18:28:2f:
83:e8:d7:6a:8e:8d:6e:db:db:0b:4a:d0:ba:f3:31:
bb:83:24:e2:54:98:b7:3b:b7:f8:c3:d5:a3:e9:b2:
76:5b:d1:e4:2a:89:b8:0b:84:9f:5a:da:6e:66:4c:
00:7e:2a:c5:fa:4d:7d:f3:f1:e0:eb:5a:cc:8a:45:
6e:b8:e3:95:a7:46:b9:2d:df:14:39:77:7a:37:7d:
4a:c3:8e:52:db:c5:2b:49:8a:23:66:13:37:aa:13:
f1:f2:3f:9a:09:ab:b5:1a:6c:9d:4b:ff:f1:6a:75:
56:f3:5f:55:33:74:11:a7:f2:d1:46:ee:ba:ba:93:
22:b0:8c:13:ae:07:43:57:ce:9a:14:20:a0:f6:72:
6a:cb:eb:78:a1:0c:59:16:c9:b7:ec:a6:44:34:78:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:C6:4B:BD:C3:37:C4:5B:D1:EB:A1:53:69:78:9D:A0:94:06:85
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/omnGS73DN8Rb0euhU2l4naCUBoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.8.0/24
85.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
61:89:36:1c:79:27:72:56:50:39:fe:c4:3d:7a:d4:be:12:ad:
0a:dd:06:48:7e:e9:08:55:6b:81:5f:bb:41:8f:c8:ed:32:42:
7b:8c:e1:b6:bb:52:b2:a7:73:87:2b:e0:2f:98:97:fa:68:32:
60:27:d2:12:3e:be:66:6d:b6:56:a8:96:a8:f6:0e:71:52:c2:
40:55:dc:38:25:26:df:b7:60:47:7c:91:f5:bd:17:0f:f4:95:
8c:01:17:8f:c2:d6:95:54:a3:14:57:66:09:42:9f:08:4f:8d:
a7:3d:5f:08:c8:48:57:9f:4b:03:06:21:1f:a9:21:1a:39:7e:
b9:1d:0a:e9:21:43:d4:f5:51:bb:5b:b9:ab:86:56:5a:f1:c5:
56:67:6d:5d:58:8d:c1:d8:ef:76:04:2a:6a:63:92:da:85:10:
80:a6:75:f8:55:21:36:22:a4:98:41:97:2b:33:c4:ca:c7:0a:
e9:31:ff:93:35:fd:22:45:77:f4:15:55:57:d2:a5:4e:9f:0c:
45:e1:7b:39:81:79:53:d1:0a:63:ce:6b:6f:a7:0e:b2:be:18:
b3:7f:5e:7b:7e:ee:6d:6f:0d:11:66:35:2e:de:35:9e:7a:f6:
07:93:d6:c7:15:5a:3f:08:4a:6b:04:3a:67:a5:33:af:a3:3b:
ad:e0:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:16 2024 by rpki-client on console-ams.rpki-client.org