Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/OaHazVbpsXKhj626tfOdzHy2tH4.roa
File: OaHazVbpsXKhj626tfOdzHy2tH4.roa (raw, json)
Hash identifier: RHS5sALjozm85nRspFXNNIRZrgHtToIspJnjhhOkViI=
Subject key identifier: 39:A1:DA:CD:56:E9:B1:72:A1:8F:AD:BA:B5:F3:9D:CC:7C:B6:B4:7E
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 018C8D41550B0C090DE45671C4D652EFA381
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/OaHazVbpsXKhj626tfOdzHy2tH4.roa
Signing time: Thu 21 Dec 2023 16:41:58 +0000
ROA not before: Thu 21 Dec 2023 16:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1221
IP address blocks: 185.144.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:41:55:0b:0c:09:0d:e4:56:71:c4:d6:52:ef:a3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Dec 21 16:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39a1dacd56e9b172a18fadbab5f39dcc7cb6b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:3e:52:8b:55:b0:ff:6f:68:45:b3:85:2d:
f7:f2:82:dd:96:7e:e0:c4:72:16:69:88:ec:34:cd:
5b:7f:a2:74:ea:9d:36:09:9e:f9:da:74:68:ee:64:
af:5c:8f:7f:9a:8f:05:03:a6:8f:1f:e8:30:69:74:
6a:e5:26:ae:0e:fd:90:7d:7e:2e:24:7d:2e:aa:33:
3d:bd:b0:33:ef:18:72:2a:cb:ca:78:27:74:1f:c3:
db:7a:b7:f9:63:07:a4:2b:2e:f5:32:24:0b:6b:51:
9b:1b:d1:8d:6b:16:15:7c:67:dd:90:c9:05:bf:eb:
b2:27:43:67:38:f8:ee:84:c7:95:0c:8f:00:db:82:
cb:56:5f:85:73:4f:51:0c:e8:4a:de:6d:5d:d6:bb:
21:8f:44:43:4c:5d:e6:18:54:e6:de:8b:c6:a7:9b:
a0:da:a9:e7:60:78:ca:9c:75:a2:e6:00:9f:ce:fe:
28:bc:3e:f3:63:1c:bd:da:6a:05:78:d6:8f:a7:4a:
88:41:bf:3e:8e:61:f5:b5:a9:a0:5e:73:21:b6:61:
0e:4d:0d:6e:ce:be:2f:09:ac:6d:98:8e:ee:b3:1f:
b8:8b:9d:55:a4:28:2c:69:ad:3a:8f:a1:3e:47:bf:
f5:09:37:79:f2:f1:e2:8c:b8:be:28:36:86:44:ca:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:DA:CD:56:E9:B1:72:A1:8F:AD:BA:B5:F3:9D:CC:7C:B6:B4:7E
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/OaHazVbpsXKhj626tfOdzHy2tH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.111.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a1:c5:65:41:1c:8c:e6:06:9f:99:8f:06:bd:d6:88:c2:db:
a9:56:a4:18:8e:75:e5:95:b0:a7:03:1f:ca:53:c4:ab:c6:91:
9f:bb:21:3a:99:28:8f:75:32:58:21:eb:8e:a3:e6:bc:fb:21:
ab:87:fe:56:37:77:e0:0d:8d:74:21:ed:71:1c:46:a2:1e:48:
78:91:79:56:f7:48:ef:d2:5e:74:6d:ce:da:f5:bd:ef:d6:c8:
dd:6d:e5:17:fc:9e:5d:5e:d1:0b:7f:75:a7:2f:d8:b2:41:5f:
53:46:93:32:08:ee:a5:4f:6d:41:df:2a:d8:ea:a4:b7:cd:8c:
45:a0:a3:49:51:40:d0:f8:f6:ee:82:f2:14:12:ca:d8:78:ef:
bb:96:de:33:11:cc:58:bd:9a:75:ac:97:a3:4a:79:28:64:0e:
2a:32:96:fa:97:ac:bd:2e:c2:d6:da:87:62:76:1a:e5:85:48:
31:33:7f:24:c9:11:59:bd:84:68:a8:fb:18:b1:ad:11:2f:b1:
fe:2e:91:32:8d:2d:00:45:00:58:7a:08:e3:4c:9d:f8:04:05:
69:b1:26:56:e4:55:41:3f:1e:ed:08:24:32:08:7a:bf:54:07:
af:ea:08:3d:77:0f:96:c0:b1:19:74:08:e8:9d:22:d4:af:13:
e3:6d:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:34 2024 by rpki-client on console-ams.rpki-client.org