Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/O0hIxwPdlI0IEX8LJHb-Mlxk6zo.roa
File: O0hIxwPdlI0IEX8LJHb-Mlxk6zo.roa (raw, json)
Hash identifier: uNO7DR7FrXdd6uhUEPC9Xnh/XZsVT+M4FyVUdqfQGDI=
Subject key identifier: 3B:48:48:C7:03:DD:94:8D:08:11:7F:0B:24:76:FE:32:5C:64:EB:3A
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 018B480F04124C98E394E16D884CC30BE0CD
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/O0hIxwPdlI0IEX8LJHb-Mlxk6zo.roa
Signing time: Thu 19 Oct 2023 13:10:25 +0000
ROA not before: Thu 19 Oct 2023 13:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201295
IP address blocks: 185.252.28.0/24 maxlen: 24
185.252.31.0/24 maxlen: 24
185.252.30.0/24 maxlen: 24
185.252.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:0f:04:12:4c:98:e3:94:e1:6d:88:4c:c3:0b:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Oct 19 13:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b4848c703dd948d08117f0b2476fe325c64eb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:03:c2:b1:4b:74:d5:e3:14:c8:4d:41:f5:
cf:c0:9c:25:a4:1f:06:74:3d:52:66:2d:3a:25:be:
5e:53:63:63:11:8e:72:dc:fa:eb:9b:48:ef:6c:06:
a4:66:81:7a:5a:9a:7f:24:68:5e:a9:04:37:0a:6e:
46:59:8d:2b:b2:3f:72:44:18:0f:4c:a6:58:19:1e:
91:2f:aa:d9:e5:a8:78:e2:35:84:93:3d:fe:51:ce:
e6:b6:41:e6:c0:57:ff:84:8e:c9:f3:70:30:a7:cc:
0c:08:d5:08:0d:4d:b9:6f:df:90:26:8c:e5:7d:b7:
4b:65:1f:f3:15:2a:d6:12:5f:2b:5f:62:6d:f5:82:
2f:5b:16:e5:f7:39:1a:07:a0:4b:71:39:6b:4e:ef:
c5:a8:2c:fe:c0:cb:2e:9b:52:ad:e6:f1:f8:2d:cc:
76:60:b7:0f:8c:cf:09:f7:d0:fa:13:a3:19:96:26:
6b:c5:c3:93:da:27:0e:b1:57:a0:3f:0a:71:5f:32:
b4:c2:4f:a7:ed:79:fd:97:0a:0f:3c:5f:95:81:4c:
b6:fa:c1:92:de:39:fc:37:27:a3:37:16:37:8f:f0:
10:02:eb:c4:24:c2:cf:9c:15:99:b3:ed:8e:e2:12:
9f:46:7d:23:99:c3:28:ff:49:fc:76:00:71:5f:2a:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:48:48:C7:03:DD:94:8D:08:11:7F:0B:24:76:FE:32:5C:64:EB:3A
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/O0hIxwPdlI0IEX8LJHb-Mlxk6zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.28.0/22
Signature Algorithm: sha256WithRSAEncryption
13:0a:ee:04:75:7b:38:9c:95:4e:be:ef:e6:ad:78:41:90:c3:
f9:e9:2d:f6:d9:da:01:8d:57:e1:1b:c4:ca:eb:5a:e7:f4:0f:
84:63:2b:d4:94:2a:89:ab:a6:a0:d2:a7:83:54:c6:c3:14:e8:
4b:6e:1a:ee:66:15:42:60:80:66:f4:cf:70:43:6b:cf:f4:12:
12:1d:ed:62:78:ae:9e:27:59:fc:fd:eb:79:83:a9:4c:30:af:
19:70:7f:7e:8f:dd:2e:5c:05:c3:fb:dc:57:bd:01:74:27:e3:
5c:f9:77:4c:05:f2:3c:f3:59:93:6f:6f:6b:ba:76:4d:5e:a3:
e4:13:3b:75:fd:f0:ec:7e:6b:71:bc:f4:51:df:f3:16:eb:36:
e1:55:52:1d:a2:bc:e8:7c:49:83:72:d3:3c:c4:e1:8a:72:e2:
76:b7:33:65:0e:a9:e4:1d:0d:23:16:87:78:67:70:74:d1:c7:
5d:5e:e9:01:b3:6d:4b:98:a8:46:40:57:f5:38:e9:f2:65:8b:
30:11:f3:85:45:5e:21:8d:af:78:7b:39:c6:51:44:79:27:57:
9e:51:e6:cc:9f:ac:07:bf:ad:76:c6:56:87:8e:d8:23:cb:ca:
d8:67:c8:83:31:b7:e8:7c:19:47:62:f7:58:ca:cd:c8:e5:32:
fe:94:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:34 2024 by rpki-client on console-ams.rpki-client.org