Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/oRuLOH0lKJG_bhBZmHbxKoojBdk.roa
File: oRuLOH0lKJG_bhBZmHbxKoojBdk.roa (raw, json)
Hash identifier: AeQ9NnshwaOa5Y4JGJM28A3R/Pzv1V7u2c3GaFRbmcY=
Subject key identifier: A1:1B:8B:38:7D:25:28:91:BF:6E:10:59:98:76:F1:2A:8A:23:05:D9
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0185729F00CD467867FF3A67C7D7CD49E911
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/oRuLOH0lKJG_bhBZmHbxKoojBdk.roa
Signing time: Mon 02 Jan 2023 13:15:01 +0000
ROA not before: Mon 02 Jan 2023 13:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.97.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9f:00:cd:46:78:67:ff:3a:67:c7:d7:cd:49:e9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 2 13:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a11b8b387d252891bf6e10599876f12a8a2305d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:ab:e4:45:9e:b0:99:53:24:af:63:1f:50:
a8:af:9e:c1:37:4c:b1:e5:8e:ca:b7:42:76:d5:59:
26:d5:a2:92:5f:3b:53:d0:50:59:90:a9:25:ff:a1:
75:bc:54:1f:a9:e2:49:c8:67:20:58:fb:cc:0a:20:
5b:df:6d:04:a8:31:45:88:c5:af:f6:f1:70:3b:29:
a6:90:77:fb:5e:02:94:6b:81:28:b7:9f:66:d7:4b:
b1:6c:d3:36:25:b4:2f:ca:5b:5b:90:00:75:aa:3c:
e6:90:f6:de:81:b1:83:c1:dc:63:0f:18:7c:60:ec:
1d:c3:25:40:d7:de:1b:01:b9:ff:24:1b:96:9a:fc:
64:c6:3f:46:85:77:1e:68:eb:da:ab:0f:af:40:d0:
b3:3b:5e:fd:9b:3b:b7:81:7a:9d:b0:2c:b7:30:1b:
8b:18:20:34:38:54:78:c1:98:02:c2:b1:95:33:97:
e3:2f:35:c5:3e:09:d9:7f:c2:ea:e2:e3:b5:77:80:
51:48:b4:34:b0:fa:50:c3:8e:bd:d1:0d:fc:4c:93:
d6:79:26:66:12:a2:70:be:06:b8:5c:67:9f:ab:dd:
cd:8f:1a:53:b8:2f:d2:29:b7:1c:64:d6:db:da:90:
e5:2d:a1:65:63:0b:bc:db:ca:25:fe:35:10:0c:29:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:8B:38:7D:25:28:91:BF:6E:10:59:98:76:F1:2A:8A:23:05:D9
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/oRuLOH0lKJG_bhBZmHbxKoojBdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0e:f4:2e:07:35:ea:e2:43:7d:77:c4:9d:03:ad:c0:29:d5:
eb:c1:e8:3c:c0:4b:6e:52:e0:d0:a5:3f:3b:df:63:b7:9f:f4:
5a:30:ce:e7:d1:54:bd:8f:ca:c2:1d:f9:26:b9:0b:f4:9a:f8:
77:e4:9c:e3:91:21:70:a4:49:d5:b0:d1:7a:b9:6d:75:dd:55:
8a:85:0c:27:db:ce:22:62:a2:49:0b:b7:f0:02:87:a1:73:c9:
1d:e4:40:01:8e:a3:9a:dc:14:0a:a6:f1:38:48:b9:0b:7a:a9:
1e:9d:aa:2c:99:3d:56:2e:54:4d:f9:83:00:12:af:9f:fe:a3:
4e:98:ea:9d:7f:62:1a:39:72:f8:58:32:81:d7:d7:de:4a:31:
a5:a1:99:93:6e:e1:b8:05:06:1d:0e:43:d6:ce:3b:7e:21:b7:
6e:05:4c:22:46:86:51:e6:9a:a2:81:6a:3d:47:04:0f:3a:0b:
95:42:cc:1c:19:35:33:a6:6b:59:ea:14:94:42:1c:8b:c0:42:
dd:39:d5:1a:81:89:2c:07:1d:51:2e:70:db:f5:c1:89:c9:b4:
e5:0c:e4:10:74:6c:33:50:f1:a3:5e:9a:07:b4:aa:46:d2:e8:
73:ff:da:2d:cd:ab:ec:56:09:b2:4e:ba:5c:35:08:89:55:cb:
15:1e:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org