Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ONg6fkKz9eqVEIbNUpBx5jIRFF0.roa
File: ONg6fkKz9eqVEIbNUpBx5jIRFF0.roa (raw, json)
Hash identifier: 47Lf1C+aT8DXGABMh9dt6vQwjgSlFDOeVOjqLZFsXS0=
Subject key identifier: 38:D8:3A:7E:42:B3:F5:EA:95:10:86:CD:52:90:71:E6:32:11:14:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187235A58E4DC450388924A4DAA6DA8C1E9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ONg6fkKz9eqVEIbNUpBx5jIRFF0.roa
Signing time: Mon 27 Mar 2023 13:55:36 +0000
ROA not before: Mon 27 Mar 2023 13:55:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 93.113.171.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 03:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:5a:58:e4:dc:45:03:88:92:4a:4d:aa:6d:a8:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 13:55:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38d83a7e42b3f5ea951086cd529071e63211145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:9a:86:a6:bf:e0:f7:4a:c1:8a:5f:03:b6:
0d:26:b6:ef:f4:96:b1:1b:2d:c6:a6:62:ec:29:0b:
ca:4b:00:4e:41:2c:6b:b5:59:1f:45:61:cc:bf:d0:
b4:7a:b0:a6:93:7f:73:e2:83:9a:46:09:e6:62:0e:
26:7c:a6:c6:e8:db:a1:72:d3:e4:1c:82:64:bc:de:
ac:22:8f:c3:6c:67:a8:4c:8b:05:09:4d:af:2a:6b:
35:49:c9:ea:be:36:af:6f:42:5f:ad:80:f2:6f:b5:
f6:bc:02:1d:ec:2f:8e:b3:23:70:8f:88:d9:83:b5:
59:2f:b9:97:a0:da:24:57:72:1a:f2:1b:de:53:7a:
e4:bb:bf:ef:4d:08:37:3b:e0:d3:b4:5a:84:61:62:
55:8e:7d:38:cd:20:59:f5:74:f3:ff:12:95:9e:e0:
9f:0c:f7:40:35:fd:79:a6:8a:b9:6c:8e:86:fc:a7:
e9:5f:12:39:59:ab:3c:8c:12:fa:a7:01:28:6b:4c:
a9:42:34:9e:f1:57:eb:db:e2:2e:2d:e9:a8:09:ac:
ce:26:03:6d:75:fd:4d:d7:04:b8:69:c4:eb:ee:ba:
b9:d1:63:ba:a3:fa:a8:39:f7:d1:e8:29:2e:74:e5:
a0:cd:2e:30:25:50:cb:a4:1e:76:06:af:9d:80:f1:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:3A:7E:42:B3:F5:EA:95:10:86:CD:52:90:71:E6:32:11:14:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ONg6fkKz9eqVEIbNUpBx5jIRFF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
93.113.171.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e7:8b:0d:b5:19:09:41:9d:b0:22:6b:74:9b:bc:90:39:4f:
52:21:ec:d6:1d:24:63:1e:d2:73:6a:4d:3f:ee:10:0b:1e:f6:
31:a9:73:a0:c8:3f:c3:b5:08:7a:2f:33:0b:d0:63:2d:5d:7c:
e6:b3:71:40:86:3f:2e:8f:08:c5:86:5f:43:94:fc:47:00:fa:
5b:28:fe:7e:ae:69:92:90:8c:68:8c:81:a9:97:4e:f6:5f:94:
a4:2f:59:8e:4c:f0:2e:82:62:00:92:58:85:3a:38:17:bf:64:
0f:f0:68:95:4c:22:a5:ef:40:34:33:e4:18:91:4b:db:4e:02:
24:e3:77:05:4f:19:ba:dc:64:84:f1:4b:d2:8d:b1:a7:cd:ab:
d6:09:02:18:c2:c8:66:ac:35:8f:1c:bd:8c:32:92:a6:ff:2f:
2d:da:c2:de:10:9c:f2:21:91:e3:b2:d6:2b:48:8d:bc:64:99:
0d:93:53:7d:1e:56:dc:6d:11:b5:cc:52:37:34:61:3c:30:30:
03:81:67:f3:8f:97:e4:02:02:4f:42:2b:81:f7:4e:c0:ba:42:
60:cd:27:da:d7:a1:60:73:7d:a2:86:05:f2:f0:b8:1c:80:75:
96:80:51:ad:ca:06:4c:55:e9:4e:ff:58:4a:a2:a7:43:35:3d:
7a:40:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org