Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/O-NWS3xzUdts0nnIZTf7vCh2SMo.roa
File: O-NWS3xzUdts0nnIZTf7vCh2SMo.roa (raw, json)
Hash identifier: Xy0Lg5lYuRl+FiY/2o12hXG90yxItcSe4vdajcBWtf0=
Subject key identifier: 3B:E3:56:4B:7C:73:51:DB:6C:D2:79:C8:65:37:FB:BC:28:76:48:CA
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01877BF0F53B55BCDAC158329CF62B1F5919
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/O-NWS3xzUdts0nnIZTf7vCh2SMo.roa
Signing time: Thu 13 Apr 2023 18:46:41 +0000
ROA not before: Thu 13 Apr 2023 18:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.191.96.0/24 maxlen: 24
188.191.108.0/24 maxlen: 24
91.225.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 18:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:f0:f5:3b:55:bc:da:c1:58:32:9c:f6:2b:1f:59:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 13 18:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3be3564b7c7351db6cd279c86537fbbc287648ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:4c:f0:eb:4f:86:94:66:54:b5:42:dd:62:
1b:82:20:b1:c3:29:8a:be:cd:f0:62:fb:c6:d3:e6:
56:09:35:a0:f4:4f:b5:91:89:b5:6c:62:4f:49:67:
4c:01:51:cc:50:d6:d8:8b:fa:01:3a:fa:1a:e3:12:
e6:61:fe:d3:13:c9:f7:6a:61:79:f0:e6:28:3a:7c:
73:5c:0c:2a:bb:d9:50:d8:4d:f7:5d:7c:ad:c5:34:
46:98:1c:6a:56:a8:d8:cb:39:9a:b8:c6:56:73:a9:
d2:35:11:32:6b:17:a3:97:ff:3f:98:f1:87:83:d3:
37:88:ff:2c:c2:21:58:60:9a:52:56:d5:e4:44:fe:
1b:c7:96:eb:17:4f:b3:e8:f6:aa:2b:0f:6f:c6:60:
56:98:f4:d8:1f:c5:28:1a:1f:9a:fc:72:86:2d:09:
02:f0:7a:fa:28:d6:5c:81:50:00:88:50:4c:51:9e:
fe:35:43:ac:ae:23:13:8a:b3:b3:dd:d1:77:e0:84:
65:61:06:41:19:15:05:c3:90:12:ff:6a:aa:4f:53:
11:48:1d:81:77:e0:c1:27:28:65:9b:86:13:6d:76:
2c:94:bb:9d:b1:8d:b6:84:66:85:9d:05:8f:cf:f9:
73:ef:3f:1e:c6:67:13:d7:47:fc:ec:f6:60:c5:37:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:56:4B:7C:73:51:DB:6C:D2:79:C8:65:37:FB:BC:28:76:48:CA
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/O-NWS3xzUdts0nnIZTf7vCh2SMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
188.191.96.0/24
188.191.108.0/24
Signature Algorithm: sha256WithRSAEncryption
35:88:b4:70:d9:26:f7:62:eb:76:73:23:9c:0f:ac:62:4c:bc:
f1:1d:02:d1:54:34:b8:76:de:63:03:95:c9:c0:79:ea:b2:63:
2f:e2:a1:6b:fd:e7:04:70:38:8b:4a:fc:d2:d8:11:88:9f:43:
f0:83:95:74:58:24:61:49:6e:48:d9:1f:09:7a:d4:18:05:90:
e8:20:1c:86:cc:12:55:96:aa:71:1e:1a:40:4a:4b:8a:38:e3:
f8:a4:bb:f8:0d:24:0f:cf:8d:50:30:02:88:fb:b9:e9:75:ab:
98:11:63:f8:c3:49:38:35:6d:8c:48:db:04:de:24:5d:98:02:
a1:27:c7:e1:d1:f7:d8:f3:6e:3e:de:b9:47:87:0e:d8:77:5c:
11:4a:27:55:5b:9b:2c:a7:08:24:30:26:b6:3d:3f:b3:21:52:
a1:ba:f4:65:48:64:e4:ab:c4:62:b4:4c:71:84:e7:05:20:30:
36:d7:64:56:9a:dc:89:bb:05:62:c7:e8:ea:bc:04:fd:e3:cd:
fa:f7:d0:c2:cc:4b:3a:07:51:2b:16:48:53:69:23:08:7c:0e:
7b:ac:1a:01:ae:f2:d5:cf:5b:63:cd:a5:d1:ba:f8:3e:fd:e1:
ff:f0:05:8b:cf:67:18:bb:2d:fe:ad:7b:e7:64:09:47:24:f9:
6f:1b:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org