Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ooPeGXTxBvb8fCi7Igf-Kwn4HNk.roa
File: ooPeGXTxBvb8fCi7Igf-Kwn4HNk.roa (raw, json)
Hash identifier: 0I9QaC+Nsi2yuOb6QiWgparHVYzcvJbxB+OkCodNC+k=
Subject key identifier: A2:83:DE:19:74:F1:06:F6:FC:7C:28:BB:22:07:FE:2B:09:F8:1C:D9
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018899F68D5C87053619C1E75A2AD4BC34F2
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ooPeGXTxBvb8fCi7Igf-Kwn4HNk.roa
Signing time: Thu 08 Jun 2023 07:44:12 +0000
ROA not before: Thu 08 Jun 2023 07:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41022
IP address blocks: 185.195.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:f6:8d:5c:87:05:36:19:c1:e7:5a:2a:d4:bc:34:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 8 07:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a283de1974f106f6fc7c28bb2207fe2b09f81cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:7f:e7:ab:1c:b4:e1:8d:50:aa:f3:97:c6:
b8:8d:1c:8b:58:e9:68:22:47:b5:75:c1:68:8d:f1:
7c:70:4e:39:8b:3b:06:aa:dc:a0:5a:5b:3b:cf:0c:
b3:7c:27:63:14:d3:fd:db:bb:4c:ae:1f:ef:26:43:
15:a7:23:4c:e1:3e:76:65:94:06:e9:d1:06:6f:c4:
a7:33:5d:0e:75:c5:cc:68:05:fc:e3:f0:6d:34:b8:
f9:bf:c2:8c:86:53:e9:2e:0f:85:48:75:2a:de:9d:
c7:49:88:b2:ba:5f:f0:79:57:8f:6d:bf:5f:9a:3a:
a0:69:00:8f:0c:0b:c9:8b:d1:48:f9:10:ca:84:f4:
41:d5:cb:24:7e:43:3a:4f:43:78:60:4f:6a:2e:0a:
cc:14:04:fa:53:12:cd:ad:9a:1e:17:6c:bc:5c:19:
8d:e1:e6:fc:24:d2:41:f4:1e:f7:76:78:90:b5:23:
cc:66:25:51:31:cb:42:9e:10:55:f3:54:80:87:4c:
70:b0:52:fa:50:7c:bf:8c:a7:90:b6:3b:fc:2d:0c:
71:ef:97:c9:1b:d8:b0:a7:9b:35:2f:81:ad:8f:15:
32:c4:6f:ea:cf:65:a1:d1:d0:a6:94:99:19:62:2f:
f8:99:d6:fc:c1:94:f0:88:95:79:fe:31:c4:9f:bb:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:83:DE:19:74:F1:06:F6:FC:7C:28:BB:22:07:FE:2B:09:F8:1C:D9
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ooPeGXTxBvb8fCi7Igf-Kwn4HNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e6:cc:28:8b:73:7d:e1:29:8b:98:64:08:a0:18:28:a9:57:
c9:55:07:c1:57:ad:c7:d1:c2:d2:f5:e3:14:3b:72:0f:90:27:
64:b4:ab:f6:63:1e:93:b5:c5:2c:ad:54:34:4b:33:10:af:da:
ab:24:31:a3:80:77:15:38:2c:c8:00:56:bb:73:1a:15:2f:76:
14:9c:4a:b8:b1:50:ed:45:b2:f4:3b:75:c0:63:d2:fd:24:27:
eb:fa:0e:c7:7c:63:35:4a:2b:6b:37:ba:ba:de:c6:61:d1:1d:
f4:91:00:38:3d:75:1b:a3:67:23:6c:c9:e9:91:27:04:23:2f:
31:f8:aa:b3:e8:ae:ee:89:d8:b6:57:1e:d4:c6:7d:71:09:18:
8b:96:08:c9:5e:dc:8d:86:66:c3:83:0f:33:35:d4:78:21:ad:
2b:76:a4:2c:5c:63:f2:8d:ac:87:3d:77:95:d3:96:d4:c2:0f:
e7:27:88:f1:c0:9d:7b:3a:59:db:56:f9:fc:f8:96:89:11:44:
69:02:19:6d:6a:49:e5:45:18:c1:0e:73:bc:2a:17:50:1a:3b:
4f:45:64:c8:a3:81:af:20:7e:98:be:30:94:1e:e4:48:51:c3:
67:e8:16:70:56:5d:38:87:f3:bd:78:a0:78:12:54:d7:ea:04:
a5:74:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org