Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OF-EIxNPI39FQ0JyNo25yhuZwFc.roa
File: OF-EIxNPI39FQ0JyNo25yhuZwFc.roa (raw, json)
Hash identifier: p/2EpTBPH+/+0HKkzIENfqJW0pDBVy6Arh1KlP2CrcY=
Subject key identifier: 38:5F:84:23:13:4F:23:7F:45:43:42:72:36:8D:B9:CA:1B:99:C0:57
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185CA0F62EF30E4B5F321E03DA37E647397
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OF-EIxNPI39FQ0JyNo25yhuZwFc.roa
Signing time: Thu 19 Jan 2023 12:44:44 +0000
ROA not before: Thu 19 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 86.107.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 04:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:0f:62:ef:30:e4:b5:f3:21:e0:3d:a3:7e:64:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 19 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=385f8423134f237f45434272368db9ca1b99c057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:5b:54:cc:f0:77:c6:5e:88:88:12:f9:c3:
6b:07:a5:af:b7:c8:97:aa:67:4d:41:a3:7c:f7:9c:
4f:94:6a:86:18:84:77:5b:d4:5d:6c:3e:9e:37:0b:
30:60:09:bc:96:6b:b2:20:01:f1:27:d0:5a:a3:69:
01:9d:62:67:74:0d:fb:09:b7:61:03:38:ee:61:9e:
b9:0b:91:45:fd:27:2c:d9:ce:6d:7b:4a:4f:9e:53:
67:ee:82:cd:9a:bd:47:97:ed:17:0b:18:2a:de:1a:
e3:f7:f0:aa:6d:d4:92:bf:83:b7:95:e5:c2:36:13:
2e:89:37:3c:e6:99:5e:4f:d3:f2:1e:3e:f7:35:e7:
70:09:ea:f2:07:13:c0:d2:e9:a0:b1:5c:77:18:5c:
e1:cb:d0:65:c3:8e:0a:d8:9b:c6:a7:e6:8b:e3:4d:
67:b8:75:f7:6e:4e:09:0c:e4:6d:ea:7d:0f:72:3b:
a2:5d:3a:33:18:39:d5:73:41:74:dc:53:6c:4d:02:
7f:d3:c0:e4:cf:31:c9:7e:5e:05:06:61:b2:ab:3f:
09:f1:14:a2:a3:13:d4:58:a6:5c:32:a6:5b:9e:68:
12:72:b7:46:a1:03:f6:22:8b:b1:f6:61:4b:5a:b6:
81:fd:99:0f:f8:3f:f4:c6:7e:2c:42:96:2e:2d:5f:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:84:23:13:4F:23:7F:45:43:42:72:36:8D:B9:CA:1B:99:C0:57
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OF-EIxNPI39FQ0JyNo25yhuZwFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c0:61:4a:8f:ba:ca:cb:c6:3b:03:15:71:9b:bf:05:4f:54:
24:0a:55:f8:72:9c:2f:5a:17:b3:7a:d9:bc:86:c6:de:a7:ed:
7f:92:5e:df:5b:6c:e0:91:02:a0:ca:d7:22:c4:ef:9d:62:40:
1c:8a:87:5e:e1:62:db:c0:91:27:93:b7:fa:6f:af:b2:c1:b0:
d8:d0:ef:8c:14:0d:77:03:e0:ed:66:d7:a1:99:38:61:ba:27:
69:57:eb:95:53:92:55:e1:69:eb:f7:f5:53:e3:14:0f:33:bd:
4e:f4:e0:b0:83:f0:f8:fe:18:34:9f:69:39:e6:f9:e1:1e:0d:
d8:d1:19:d8:35:93:e4:86:6a:73:81:70:e9:91:9c:ec:e7:a0:
c8:f5:1e:31:44:3c:c9:ca:33:e2:fa:1b:49:af:e0:bd:11:74:
25:6d:94:c0:05:b9:38:e9:86:09:c5:0d:bd:88:b2:34:ce:fc:
9c:5a:f3:41:c9:aa:bd:2c:dc:ad:8d:4a:b0:02:92:99:9b:ce:
85:37:c0:5d:0b:59:dd:ac:64:31:a2:a9:c5:e7:33:a8:44:2c:
1e:4f:65:0d:8b:f9:7b:bb:a5:38:8e:58:7b:0c:bb:11:b3:f9:
7f:78:a7:0f:a3:96:89:3f:b8:50:fe:51:01:cf:b5:4f:05:6f:
d5:21:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org