Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ovaLBwwnpcTQ2-kZDqltP78PeJw.roa
File: ovaLBwwnpcTQ2-kZDqltP78PeJw.roa (raw, json)
Hash identifier: gl9quu/UJ3D849rKiXBsJPk/xAefsVmzb1ShGAxmpXM=
Subject key identifier: A2:F6:8B:07:0C:27:A5:C4:D0:DB:E9:19:0E:A9:6D:3F:BF:0F:78:9C
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E13F43382EEB9D909128F66BF350EB0BD
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ovaLBwwnpcTQ2-kZDqltP78PeJw.roa
Signing time: Wed 06 Mar 2024 13:29:14 +0000
ROA not before: Wed 06 Mar 2024 13:29:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 84.53.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 11:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:f4:33:82:ee:b9:d9:09:12:8f:66:bf:35:0e:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 6 13:29:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2f68b070c27a5c4d0dbe9190ea96d3fbf0f789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:60:36:f1:44:91:43:fc:7f:54:c5:0b:b2:
31:7f:c8:8a:a4:8f:c2:95:9c:2d:e5:6b:1d:d2:ca:
e4:ee:64:de:18:7f:e0:63:3c:a0:ac:cc:7c:bb:c7:
76:54:a2:d9:3f:02:18:9e:61:56:dc:e3:21:81:d7:
ae:f0:02:9c:e6:af:6b:6c:4d:94:c5:65:91:7b:bf:
89:01:bb:5e:e4:87:a4:ed:0d:c3:54:85:f9:f6:ac:
23:64:06:ca:b9:05:af:6a:44:5f:e6:7b:25:2f:f6:
ee:22:12:88:c2:ad:47:e5:f9:c5:1d:7b:76:64:51:
69:63:b4:bc:01:d5:32:d4:9a:51:9a:b8:ad:22:8d:
01:3d:09:f0:d2:0a:26:71:28:d9:10:a6:55:da:2f:
dc:85:c4:ac:89:3d:5d:86:d6:b8:21:c5:50:2f:e5:
7b:b2:10:34:04:b8:1c:c3:bd:83:df:43:17:0b:cf:
9a:cd:01:25:d9:2a:43:f2:60:76:85:56:e6:c5:f1:
86:ac:c2:37:7f:af:92:ba:c8:f3:f7:cb:09:a9:01:
b8:8e:87:94:2a:c2:3f:e6:87:57:99:8c:df:2f:d8:
e0:e2:60:e2:d8:7d:22:86:4a:17:f7:b8:a0:7b:8d:
6e:2a:92:13:a9:05:af:78:15:f0:e1:72:76:04:24:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:8B:07:0C:27:A5:C4:D0:DB:E9:19:0E:A9:6D:3F:BF:0F:78:9C
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ovaLBwwnpcTQ2-kZDqltP78PeJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.53.184.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c9:07:81:3b:91:d6:26:0b:a9:91:a8:47:42:71:6b:89:6f:
ac:c4:33:7c:f7:57:71:6c:30:54:d1:1a:db:ff:1a:51:63:ef:
30:46:d2:e7:99:df:87:63:a3:2b:f4:39:bb:5f:14:2e:ac:0d:
ff:8f:f5:fa:1c:d2:7b:c7:e5:9f:ab:98:26:c4:e6:56:7f:e0:
da:e4:9f:cd:c2:37:f8:8d:d0:fc:c9:67:1a:cb:3a:b3:9d:bc:
73:fa:62:4a:7d:84:4f:7c:0b:f7:70:c5:32:b9:31:85:31:24:
b6:eb:88:57:98:52:43:b6:62:9c:7c:e3:af:10:0f:09:f8:42:
95:6c:18:41:8e:2d:28:50:b1:39:e7:dd:1c:ce:98:43:2d:4c:
79:24:ff:9b:cd:42:60:d3:cd:78:49:3b:e4:09:11:fe:a1:1e:
2d:f2:f8:6c:13:db:a7:2f:f7:9e:71:ba:9b:b8:10:d8:df:63:
e5:ad:0c:8b:81:95:74:fa:8d:28:40:4d:1e:f2:39:b0:ea:c3:
20:35:02:8a:9e:a1:d0:20:44:af:84:0b:ff:8b:53:12:ff:a1:
c2:b6:62:07:07:60:fe:13:28:a8:c2:5c:cd:89:8d:9b:88:6b:
a0:c8:1c:59:98:95:43:69:64:b6:9d:54:71:eb:b2:1d:43:e6:
41:7a:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 14:21:19 2024 by rpki-client on console-fra.rpki-client.org