Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/cOKmUJ4lj2C2GldZH_oSOq5n7hY.roa
File: cOKmUJ4lj2C2GldZH_oSOq5n7hY.roa (raw, json)
Hash identifier: QKvJzOF3uuuy6+s8Z2Qehq8vS/w9wOvDaHzRHHAsdag=
Subject key identifier: 70:E2:A6:50:9E:25:8F:60:B6:1A:57:59:1F:FA:12:3A:AE:67:EE:16
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01856C011FAC9C867F655B513A5563112893
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/cOKmUJ4lj2C2GldZH_oSOq5n7hY.roa
Signing time: Sun 01 Jan 2023 06:24:51 +0000
ROA not before: Sun 01 Jan 2023 06:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.113.239.0/24 maxlen: 24
45.88.103.0/24 maxlen: 24
45.88.102.0/24 maxlen: 24
185.238.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 14:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1f:ac:9c:86:7f:65:5b:51:3a:55:63:11:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 06:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70e2a6509e258f60b61a57591ffa123aae67ee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:68:93:e4:22:17:2e:6e:bd:9d:29:64:f6:
7d:f4:5f:0a:c1:cb:de:79:d0:bb:c6:13:a5:66:74:
bd:9e:4d:82:88:14:27:40:8a:c7:a3:2b:1a:60:76:
cb:6f:94:ad:eb:59:9f:89:2a:97:d1:07:b3:16:a0:
df:be:49:e0:77:04:36:4b:f5:42:2b:27:a9:18:4b:
07:58:36:95:eb:9c:96:10:87:08:ea:50:28:8c:99:
0d:9c:c8:8e:2f:2b:48:ff:f7:1c:42:57:5c:2b:64:
a0:34:6a:87:26:24:57:e7:4c:42:82:66:e2:41:fe:
20:b0:37:c0:05:d4:0f:f0:79:a1:8c:84:28:c5:04:
4a:b3:a3:4e:14:5b:9f:1e:b1:52:78:6e:8c:58:86:
b0:58:66:12:d5:19:c0:f2:02:0d:48:33:65:60:fc:
af:ba:71:0a:3c:de:0e:04:86:d9:2e:76:c7:9b:26:
12:2f:f8:fa:fc:3d:a4:b7:2c:00:cd:90:52:a6:06:
9d:03:8f:b9:08:23:d9:25:03:0c:f2:3e:9c:ea:40:
1f:be:5a:ff:1e:be:d8:3d:e1:4a:c1:da:49:a7:3b:
0f:17:91:c7:d1:f5:2e:e4:82:a6:8e:59:f2:c2:40:
49:db:85:ee:c0:04:a6:78:5e:4b:d1:3b:4f:42:72:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:A6:50:9E:25:8F:60:B6:1A:57:59:1F:FA:12:3A:AE:67:EE:16
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/cOKmUJ4lj2C2GldZH_oSOq5n7hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.102.0/23
185.238.88.0/22
194.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0a:72:9e:9b:6b:0f:15:5f:07:ed:e5:d7:50:47:bc:f2:f3:
f4:17:f8:7b:aa:cf:bb:6e:05:95:fb:1a:54:40:86:57:0d:22:
4d:ce:07:59:df:e7:83:0e:56:6a:0b:9d:98:6b:85:7a:9a:76:
5c:78:05:ce:73:86:7d:c1:69:55:8f:f3:b3:ec:53:ad:ce:d4:
31:bf:71:40:1b:f1:fd:03:5f:af:49:79:8b:6c:de:63:d3:5a:
90:07:2e:be:59:bd:0c:ae:c3:05:57:1d:31:33:98:87:c0:c4:
34:9a:d2:ae:61:b8:17:c7:5c:51:89:a8:bd:89:ce:2c:55:d6:
a6:8e:56:fc:e3:0d:f9:8d:ea:40:c2:fa:a2:d4:a0:30:8b:a9:
26:42:d4:fb:3b:30:c0:64:af:c5:60:97:a2:11:21:70:dc:3e:
9b:23:34:c7:ca:1f:8e:3c:71:8d:60:0d:d7:b5:b9:1f:5b:d6:
99:ff:25:02:36:e8:83:cc:b7:7d:4b:d5:d5:21:f3:0a:b0:be:
d3:66:18:a0:2d:8b:6e:58:7f:49:95:77:9d:eb:4c:f8:d8:e1:
34:9d:b1:ef:97:b9:43:40:60:4a:6a:a0:c0:f0:ed:3d:ee:37:
21:54:84:d4:fc:b2:27:7b:c7:91:2f:f3:49:b2:2c:47:9b:bf:
04:e1:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:18 2024 by rpki-client on console-ams.rpki-client.org