Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/oMlUDViPLvFAQ5klz5ydmVuBRjE.roa
File: oMlUDViPLvFAQ5klz5ydmVuBRjE.roa (raw, json)
Hash identifier: NVfMP+fzRjhbHPxlaZYDO/Is+zZYe8VCmpF8VmQ47cY=
Subject key identifier: A0:C9:54:0D:58:8F:2E:F1:40:43:99:25:CF:9C:9D:99:5B:81:46:31
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CFA43435839B6EF20E8369214882D72FA
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/oMlUDViPLvFAQ5klz5ydmVuBRjE.roa
Signing time: Thu 11 Jan 2024 20:42:41 +0000
ROA not before: Thu 11 Jan 2024 20:42:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.86.142.0/23 maxlen: 24
185.86.140.0/23 maxlen: 24
37.218.208.0/21 maxlen: 24
37.218.216.0/21 maxlen: 24
188.215.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 19:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:43:43:58:39:b6:ef:20:e8:36:92:14:88:2d:72:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 11 20:42:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c9540d588f2ef140439925cf9c9d995b814631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:20:0d:b0:e0:eb:cf:b4:d7:88:34:cf:88:
ff:a4:1d:c3:9f:c2:01:47:ef:72:20:69:08:09:ee:
7e:02:37:c6:c6:0f:92:0e:b7:73:1c:a4:48:9d:59:
79:46:fb:15:35:1c:c7:26:44:1f:5b:e0:7f:56:63:
1d:af:74:9f:73:56:fb:95:d5:d0:81:d3:01:bd:fb:
d6:c6:05:a9:de:46:e6:03:bb:b1:2f:5b:59:4d:c3:
1d:b8:a1:61:93:6c:2c:85:79:a6:93:ab:ce:60:4d:
b7:58:33:e7:91:4b:36:fc:a2:61:78:6b:90:67:ec:
1c:8c:60:f0:3d:6b:5d:60:4c:71:1d:32:66:36:8b:
aa:29:da:bb:82:e6:da:be:8c:61:b4:a5:cb:e8:d5:
cd:db:55:c9:8b:04:b6:4c:d3:00:9c:7a:e2:3c:9a:
e1:30:18:82:af:83:9a:d0:22:5b:0e:c4:55:a3:31:
ad:3b:49:2c:22:fb:1a:d1:3d:17:39:c2:65:0d:c5:
08:c8:ef:49:44:4c:13:7c:d4:29:91:de:14:24:77:
9a:46:9a:5a:93:a9:9c:e5:25:3b:ce:14:d1:21:dd:
ef:c9:63:87:4d:78:b5:20:ed:09:8a:6b:fb:9a:5b:
2b:5b:cd:49:12:74:45:50:7c:b7:4d:06:c8:bc:01:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:54:0D:58:8F:2E:F1:40:43:99:25:CF:9C:9D:99:5B:81:46:31
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/oMlUDViPLvFAQ5klz5ydmVuBRjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.208.0/20
185.86.140.0/22
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
12:78:8c:d3:6a:71:e4:a4:16:ee:cf:1c:12:48:ad:1e:3d:bb:
28:f1:f1:22:20:3b:ba:88:0b:6a:b4:bb:bc:a4:c9:bb:72:32:
62:f9:92:5b:f5:1f:fd:06:95:29:63:5a:15:86:b2:38:9f:a2:
c2:e8:7f:c8:b0:bc:10:f9:79:7f:59:85:09:22:d5:9f:b9:d0:
c4:b8:e1:58:8e:58:51:25:c8:d3:28:c4:72:04:f3:66:63:d3:
d2:97:17:d2:32:8f:25:2b:be:b5:1a:3e:0f:cb:ba:4d:5b:d2:
d6:41:99:1a:5a:e9:d5:ec:90:53:1b:81:c6:50:43:7d:e1:3e:
18:0d:fc:63:63:65:98:02:fc:a9:41:ed:34:8b:e8:ea:6b:ae:
8a:ca:23:c1:3f:c1:89:ce:5c:18:a5:3c:74:2f:eb:a4:1a:97:
c8:44:d4:a7:de:1e:e0:f6:e1:02:db:d7:2f:3a:18:f3:73:7d:
95:7b:eb:6c:26:3b:e9:75:df:bc:4d:0e:3c:ff:76:9d:51:fb:
2d:fe:87:7e:0f:db:05:d1:59:eb:e1:0d:b3:bf:e5:bf:a3:41:
77:46:f8:43:0c:24:58:2c:67:fd:11:f6:87:c5:1a:50:2e:d7:
d8:d5:97:49:2a:b5:4b:a4:ae:01:e3:e8:fa:85:fe:a7:dd:60:
0b:74:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org