Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/OWLLX0ZJJ9kvqP5l-XtMY3RVwts.roa
File: OWLLX0ZJJ9kvqP5l-XtMY3RVwts.roa (raw, json)
Hash identifier: T8Ylr6GmUnt5/165Jr1AHryoWyC0EjGhXPNysAQ2rgo=
Subject key identifier: 39:62:CB:5F:46:49:27:D9:2F:A8:FE:65:F9:7B:4C:63:74:55:C2:DB
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01873C7EC9599AD41C45FDFBF3E233B8D131
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/OWLLX0ZJJ9kvqP5l-XtMY3RVwts.roa
Signing time: Sat 01 Apr 2023 11:05:54 +0000
ROA not before: Sat 01 Apr 2023 11:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201389
IP address blocks: 95.85.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:7e:c9:59:9a:d4:1c:45:fd:fb:f3:e2:33:b8:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 1 11:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3962cb5f464927d92fa8fe65f97b4c637455c2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:9f:22:ea:d7:c6:2c:98:02:5c:5c:a2:53:
b9:ae:27:02:18:d1:eb:72:61:cf:81:cd:1a:d6:6f:
5e:44:1c:6b:a5:81:c0:b7:91:3d:f8:f6:5b:85:df:
27:44:c3:8b:93:a3:5a:14:54:68:d0:3c:80:cd:0d:
bc:78:a6:77:a2:97:29:02:dc:24:eb:4d:7c:9d:4c:
16:82:12:20:7f:e5:d7:2a:06:eb:8c:c8:e8:f9:d4:
ad:4b:b8:3d:3a:d5:24:35:ab:18:19:e7:55:d7:18:
3b:6a:cc:b3:eb:aa:88:fa:c4:c5:ba:0c:8d:19:eb:
48:b7:3d:4b:3c:4f:13:e8:c7:5d:cc:c3:10:73:7a:
d6:4e:c6:34:8e:7a:cd:d2:f6:72:40:7e:8f:fd:36:
8f:ed:b7:eb:4a:aa:a1:a1:e1:12:2b:41:fe:d8:c3:
60:fb:f4:d7:91:fe:a3:36:cf:49:de:0e:d2:fd:10:
d0:6a:33:e9:e6:47:f4:6d:ad:22:f4:e1:d1:d7:7a:
b2:9b:6b:cb:9e:bc:aa:6a:c5:7e:33:4a:ce:b4:4b:
14:8f:58:56:1f:f2:37:24:df:15:af:d3:6f:3c:7f:
33:42:c6:5b:5c:17:36:f6:5f:07:06:1b:48:e8:30:
81:07:96:ec:d2:d5:2b:ca:b8:b7:81:35:90:98:da:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:CB:5F:46:49:27:D9:2F:A8:FE:65:F9:7B:4C:63:74:55:C2:DB
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/OWLLX0ZJJ9kvqP5l-XtMY3RVwts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a4:58:ab:ef:57:97:80:43:91:00:4e:9b:e6:fd:1a:3d:40:
c3:03:ca:90:29:ba:4a:d9:5e:eb:60:7b:ec:c7:bd:78:6e:f8:
fb:b1:ab:68:c6:02:d9:5d:61:b1:a3:36:9d:86:c4:7e:71:cd:
21:9f:4d:0e:d3:06:d1:54:ab:02:eb:9c:b1:2f:bd:ea:25:94:
f8:e7:98:0f:7e:43:ed:6c:11:e3:81:2d:df:88:90:f4:2c:0a:
53:9d:63:54:49:9c:fe:1f:03:36:f7:76:ac:2d:9a:70:e8:9d:
bb:c6:51:ec:31:05:3f:bf:36:13:15:1c:fe:d2:db:02:f7:67:
6a:2c:25:bd:76:c9:f0:33:12:29:99:61:e1:5d:5a:69:3d:ac:
3f:d0:d6:05:2f:d3:0c:d3:ae:98:b8:27:ec:a6:ec:c5:5d:4e:
98:72:97:98:ec:54:c7:9e:d0:1b:be:19:c7:09:7a:c5:75:2a:
c6:07:1e:a2:07:df:55:7c:eb:2a:79:49:55:b4:0f:42:22:82:
80:de:e1:c9:fa:9e:fc:b9:c7:a0:38:9a:ab:fc:9a:3f:1a:24:
7e:6c:27:c0:b1:3f:3b:21:06:63:3a:7d:67:45:09:a0:c0:3a:
ad:30:ed:18:03:43:a4:b4:57:09:aa:ec:16:4e:3a:a9:c5:b0:
6d:73:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org