Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/ol7EU-jOXYb6HMi4cT7WJ_MNab8.roa
File: ol7EU-jOXYb6HMi4cT7WJ_MNab8.roa (raw, json)
Hash identifier: ml0TKZaXM506SNC6TzZFWTGlotwPYQG9M4MYCmSvKF8=
Subject key identifier: A2:5E:C4:53:E8:CE:5D:86:FA:1C:C8:B8:71:3E:D6:27:F3:0D:69:BF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 018CC6B8FC68C171BBDC610A7DAE44B8B3FB
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/ol7EU-jOXYb6HMi4cT7WJ_MNab8.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205057
IP address blocks: 185.231.94.0/24 maxlen: 24
185.231.95.0/24 maxlen: 24
185.231.92.0/22 maxlen: 22
185.231.92.0/24 maxlen: 24
185.231.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fc:68:c1:71:bb:dc:61:0a:7d:ae:44:b8:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a25ec453e8ce5d86fa1cc8b8713ed627f30d69bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:d2:43:10:ff:d2:1c:ec:99:5b:ff:c9:eb:
ed:e7:3a:b1:35:ee:a6:62:f8:ab:f6:75:ef:46:09:
90:82:2a:31:4d:ab:d5:3a:d3:dd:8e:86:41:0c:6f:
48:ff:75:4d:c7:f8:fa:23:e6:e4:2f:9e:e9:67:06:
91:29:03:11:f1:42:36:ff:08:d1:b2:03:ff:1b:f1:
79:e9:3f:93:c7:77:34:f3:a9:37:3a:44:cc:5b:62:
cf:d2:f1:68:e3:23:c3:95:a6:19:45:44:39:5f:e5:
cb:8a:0e:5a:f0:df:ff:5a:ba:eb:21:80:c3:d0:91:
fb:c8:bc:67:b1:6d:89:e4:c3:c8:73:24:64:4d:bc:
41:25:7b:5c:e6:04:71:8f:cb:c0:32:40:91:25:60:
fb:96:90:c1:9e:7f:c9:ab:5b:9d:a8:17:c2:89:ca:
af:14:32:53:2f:ec:dc:9f:99:ad:8f:89:48:ff:37:
1e:03:1d:7c:a2:fb:5f:cd:e8:dd:26:2f:d6:1f:cb:
3c:08:25:6b:3d:f7:19:6c:ae:f9:d6:5e:10:05:94:
7e:dd:ae:b9:dc:97:01:9e:58:3a:5a:fd:a8:81:a8:
3b:22:b5:3e:ec:7b:2e:c0:8e:42:34:50:53:60:a0:
fa:a2:e5:0d:6e:9d:19:d5:98:7c:f2:f1:b0:42:04:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5E:C4:53:E8:CE:5D:86:FA:1C:C8:B8:71:3E:D6:27:F3:0D:69:BF
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/ol7EU-jOXYb6HMi4cT7WJ_MNab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.92.0/22
Signature Algorithm: sha256WithRSAEncryption
53:bc:bb:ab:ec:91:38:ef:fd:8d:8d:e7:23:d9:11:14:f2:8a:
c8:22:f8:8e:7c:e1:92:9a:93:8e:48:1c:c8:a9:28:74:bf:5e:
a0:3f:34:b0:0c:86:05:f7:8a:61:8e:f5:3a:7d:74:65:9d:09:
8a:1e:f9:38:1d:ff:e5:8e:9c:eb:47:d3:81:4e:3e:38:04:a9:
8c:e0:02:2e:20:b5:4e:b1:07:30:ca:a9:a1:5b:ed:56:ef:2d:
33:67:5d:a6:cc:74:b5:b4:7b:a2:46:82:73:da:e1:f1:fe:db:
60:5b:2d:ff:4a:11:64:03:9a:54:d0:a5:61:04:d5:0d:1a:ca:
f5:83:55:f4:a8:e3:a1:27:2a:e9:f0:32:36:4e:56:cb:03:b5:
cf:68:a7:5b:6d:66:14:25:29:4c:94:2f:38:9a:f8:ff:17:dc:
f9:65:37:ac:b2:ae:7a:d5:df:23:23:ac:4c:99:88:72:79:65:
e3:b4:7b:fb:62:e7:ec:26:84:ca:b5:14:6b:90:00:c6:71:f2:
81:b7:5b:94:70:20:a8:b3:2c:0a:02:61:05:e8:ce:83:a8:7e:
f9:07:aa:b9:18:a0:ea:c0:74:2e:dc:e5:26:fa:d5:02:21:56:
7a:0d:25:a8:de:4a:cb:db:38:c7:eb:e0:5b:73:75:58:53:38:
0c:e4:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:35 2025 by rpki-client