Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/OHEAhqbued_iL5WbPJ84kbshf2k.roa
File: OHEAhqbued_iL5WbPJ84kbshf2k.roa (raw, json)
Hash identifier: OtJt+AKLCigRvb8YHpI5eAj73ol3nhitHtL75Cwl4VA=
Subject key identifier: 38:71:00:86:A6:EE:79:DF:E2:2F:95:9B:3C:9F:38:91:BB:21:7F:69
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0185707973579D34519B6948E4B0DD2255D9
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/OHEAhqbued_iL5WbPJ84kbshf2k.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 185.44.244.0/22 maxlen: 22
185.240.112.0/22 maxlen: 22
185.225.220.0/22 maxlen: 22
2a01:77e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:73:57:9d:34:51:9b:69:48:e4:b0:dd:22:55:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38710086a6ee79dfe22f959b3c9f3891bb217f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:fc:fe:4a:3c:4e:11:53:34:62:96:c9:22:
1c:28:c2:39:5f:70:71:dc:01:56:fd:7c:0b:cc:9d:
ef:5c:4f:cc:c9:24:0e:73:8c:6b:a3:53:6d:34:28:
97:20:df:3f:72:3e:a7:2f:35:9e:a0:68:b8:93:db:
8e:d3:4d:0d:6c:ac:df:98:3f:e2:97:ed:f3:90:b0:
db:4d:b7:62:93:c6:97:16:c3:4c:cc:fd:20:27:29:
46:46:9a:0c:48:d9:fb:74:43:94:3b:ea:af:08:d4:
40:b1:e5:d9:41:8d:96:a3:ac:37:2d:1f:59:6e:5f:
6d:71:de:62:89:07:49:d6:87:e0:7a:07:75:30:aa:
7f:77:10:b7:01:21:43:14:be:ac:0c:3e:9c:17:b9:
27:3c:12:a3:ce:40:a6:21:e7:a2:62:44:97:de:33:
3c:33:60:95:87:5d:6a:66:ef:80:87:d3:07:67:be:
cd:5f:e0:ba:2f:38:20:5c:6b:f1:5a:57:22:38:98:
60:27:0b:4c:65:2d:7c:63:98:27:90:ee:05:fa:de:
00:97:ea:8a:df:13:96:dd:1f:81:e1:ad:0b:0c:87:
b9:3f:0d:17:49:61:37:b5:5b:ed:46:c8:30:92:80:
8a:8e:54:83:e6:27:1f:a0:a1:b7:08:92:01:18:f7:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:00:86:A6:EE:79:DF:E2:2F:95:9B:3C:9F:38:91:BB:21:7F:69
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/OHEAhqbued_iL5WbPJ84kbshf2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.244.0/22
185.225.220.0/22
185.240.112.0/22
IPv6:
2a01:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
53:6f:51:2e:e4:08:ac:79:52:3c:ab:44:9e:3e:75:ba:2c:f1:
c5:c3:21:77:e7:51:7d:35:31:89:03:0c:e6:41:7c:f6:c8:b7:
ef:ac:2d:03:e2:bc:ce:5e:ba:c7:08:7e:fd:0a:3f:38:50:28:
9e:c4:80:6d:f4:33:31:10:10:71:83:5b:ec:b6:32:b4:25:5b:
be:7f:76:c2:21:c1:9c:eb:2e:d5:d3:68:9e:39:27:13:a2:ae:
9d:be:62:01:57:fa:73:f5:0c:9e:1a:bf:f8:6a:3d:66:1f:ff:
0f:4a:b7:ba:5e:af:52:25:0a:43:84:ee:5a:26:1a:b4:61:5b:
2b:a3:d8:c0:1c:fb:df:45:19:b7:6e:e7:23:b9:4e:ce:4f:45:
75:07:1a:ee:54:fb:0e:f5:82:67:a3:c2:fb:af:99:3c:e1:cb:
fe:64:cb:77:99:a5:fa:cd:b9:79:00:af:5d:13:a5:f9:c5:38:
00:cb:21:10:18:cf:9d:68:71:ce:95:cd:56:00:ab:e7:e2:25:
4b:55:f2:25:44:79:f0:ab:ca:d1:5f:62:cd:95:47:34:5b:9c:
2c:ff:27:2a:d6:a8:fc:cf:b4:c9:e5:96:31:6a:ad:a1:5f:b4:
eb:90:37:8e:94:f5:35:69:b9:00:75:71:db:f3:49:cd:2e:a9:
1e:8a:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:49 2024 by rpki-client on console-ams.rpki-client.org