Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/OujF6KrZMDjIayh8q3qdPzPGAIw.roa
File: OujF6KrZMDjIayh8q3qdPzPGAIw.roa (raw, json)
Hash identifier: Amhy25jcZruUqRtvRFVB0my39ZzzJ8IQ164ThenZIVk=
Subject key identifier: 3A:E8:C5:E8:AA:D9:30:38:C8:6B:28:7C:AB:7A:9D:3F:33:C6:00:8C
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 0185E3A4F7B35045874C889C49C3A5317D00
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/OujF6KrZMDjIayh8q3qdPzPGAIw.roa
Signing time: Tue 24 Jan 2023 11:58:37 +0000
ROA not before: Tue 24 Jan 2023 11:58:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205107
IP address blocks: 185.230.156.0/24 maxlen: 24
2001:678:570::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:a4:f7:b3:50:45:87:4c:88:9c:49:c3:a5:31:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Jan 24 11:58:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae8c5e8aad93038c86b287cab7a9d3f33c6008c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:a9:f8:98:0f:86:42:4e:fb:5f:bf:01:ea:
64:83:16:a3:92:ad:dd:d4:93:87:13:8f:a9:7b:96:
8b:90:91:3a:a8:1b:dd:4d:60:af:10:de:94:c8:df:
79:05:c5:78:de:7e:6b:60:e8:83:81:53:00:7d:3f:
15:e2:aa:dc:f6:b4:61:4d:78:9f:c9:eb:4c:ef:02:
17:fb:7f:f9:e3:b3:cd:6a:76:36:26:32:4c:a0:57:
3c:f8:a0:f5:9f:ae:1f:e5:de:53:e4:26:be:ce:31:
3d:77:c9:ee:a2:36:03:ba:09:2e:03:23:83:be:a9:
a2:fe:39:90:12:9e:b4:44:2a:27:5f:c7:59:67:37:
67:30:89:19:5a:c0:fb:95:d6:29:94:28:af:64:6d:
c1:39:2f:f6:89:84:97:3f:58:45:13:24:d5:42:c6:
d9:8a:4a:ec:cd:5a:3a:f7:01:fd:e9:99:3b:be:20:
c0:ef:c6:66:d8:26:78:26:d2:cd:20:cd:0a:f7:73:
8a:cb:05:f8:1b:92:05:0d:37:56:9f:84:9e:f6:87:
57:c1:d4:9b:4b:4d:15:ec:82:78:81:d9:87:54:90:
a5:e3:a1:04:27:19:a6:ec:9e:4a:35:1e:f9:de:f1:
6f:c2:06:7b:89:48:48:b1:a4:56:b4:29:7d:73:cc:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:C5:E8:AA:D9:30:38:C8:6B:28:7C:AB:7A:9D:3F:33:C6:00:8C
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/OujF6KrZMDjIayh8q3qdPzPGAIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.156.0/24
IPv6:
2001:678:570::/48
Signature Algorithm: sha256WithRSAEncryption
57:59:2d:58:95:9e:89:78:51:18:f0:ea:20:51:5e:dc:83:f4:
60:8f:c4:80:15:d7:ac:41:c7:7d:92:c4:d4:34:7a:7f:16:bf:
72:74:47:4f:47:d4:70:0e:50:5d:46:de:f2:00:bb:2d:2b:9f:
e1:ff:d5:cb:9b:e7:15:21:42:c2:3d:51:6c:11:8b:2c:91:1c:
68:af:8a:4f:59:fa:08:f5:b4:4c:e2:ae:63:9a:d6:c8:29:95:
77:c1:d5:14:fc:03:66:7b:60:49:b2:5f:82:bf:7a:07:89:3b:
01:5c:3d:f2:da:a5:9c:fd:e0:f1:ab:9f:52:74:e1:f5:d4:c0:
a4:63:0e:a5:08:b0:4f:6c:d9:fe:84:f5:26:1c:c8:97:bf:06:
22:f5:c0:6b:4c:3b:e4:03:d3:fc:b2:3e:f0:c1:f4:42:58:c8:
ba:7c:d2:56:00:df:95:d4:74:05:4f:19:9f:ff:a0:c5:d2:cf:
66:ec:11:3c:bd:c5:2b:3f:30:9b:07:e6:c6:00:ea:be:39:57:
94:7c:12:fe:5f:9a:e0:ca:54:cc:4f:0c:7a:b8:20:4d:01:7f:
4d:4d:8a:b8:a4:31:f3:27:49:5c:48:24:ff:56:03:8c:cb:07:
e0:ce:c3:cc:3a:37:7e:5a:0f:0d:2b:34:fb:c5:c8:9c:da:8d:
95:2f:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org