Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/OL3wjL7Okley_6DZqz_Nhc1jchU.roa
File: OL3wjL7Okley_6DZqz_Nhc1jchU.roa (raw, json)
Hash identifier: 6qRQpf7AoDU11RN9KXEzi2eba2MuhIfCE5/j3OwA0TU=
Subject key identifier: 38:BD:F0:8C:BE:CE:92:57:B2:FF:A0:D9:AB:3F:CD:85:CD:63:72:15
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 018AD5D42EBD6BE2537DC36EFFA788438325
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/OL3wjL7Okley_6DZqz_Nhc1jchU.roa
Signing time: Wed 27 Sep 2023 08:49:27 +0000
ROA not before: Wed 27 Sep 2023 08:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204528
IP address blocks: 81.199.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:d4:2e:bd:6b:e2:53:7d:c3:6e:ff:a7:88:43:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Sep 27 08:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38bdf08cbece9257b2ffa0d9ab3fcd85cd637215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:46:50:a1:f0:f7:1f:93:77:a0:e0:b8:af:
18:88:60:06:4c:77:23:77:bf:4f:23:a0:bd:46:1a:
44:a1:d3:35:62:6c:ff:52:15:4e:18:d0:56:a6:85:
64:75:d7:aa:ed:0b:17:5b:e3:da:fa:53:17:7e:68:
30:6d:06:77:aa:97:42:8f:f2:b8:72:0f:d3:f2:48:
1f:9c:32:b8:ac:3e:5e:22:2a:3a:d1:51:b2:3c:96:
26:1b:38:b3:65:a4:9d:2c:82:4c:76:d8:e9:8e:8a:
ff:16:8b:c9:29:79:54:2c:f5:a3:b2:af:e2:48:a0:
56:67:22:0b:09:d6:b6:95:37:f8:05:a6:7a:5e:0b:
03:ce:46:50:50:9e:31:23:7b:40:ff:78:30:37:14:
86:75:10:f9:f5:7c:7c:cc:b2:84:6e:51:4e:34:c3:
a1:d4:2f:18:c3:c7:0a:94:a4:04:c0:c1:1f:02:5a:
4c:54:5d:20:50:fe:47:3c:c8:73:44:d9:fa:60:11:
e7:93:d4:c2:55:a6:b7:aa:1e:81:01:70:37:c2:04:
4f:9f:fc:c9:02:fd:cb:85:b1:0f:b8:01:95:5f:dd:
85:78:d2:86:49:fd:36:2c:02:ec:2f:8f:8a:7c:cb:
44:d0:b6:83:f0:5c:20:ad:f5:dd:af:f1:4d:f4:4a:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:F0:8C:BE:CE:92:57:B2:FF:A0:D9:AB:3F:CD:85:CD:63:72:15
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/OL3wjL7Okley_6DZqz_Nhc1jchU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.94.0/24
Signature Algorithm: sha256WithRSAEncryption
38:78:f5:3c:28:77:ae:9f:d0:4c:8a:7b:7d:56:5b:c5:3e:1c:
79:45:13:29:ba:2b:0c:d4:34:11:53:09:f1:19:c0:b1:7e:fe:
0d:e5:97:24:d5:54:ca:f8:c5:11:2a:65:b8:99:db:6b:86:f0:
a8:a9:b7:78:47:5f:00:60:68:d7:57:ed:aa:75:0f:c0:ef:c5:
18:4f:9e:14:e8:95:62:77:48:de:12:d3:e6:1b:6a:2d:f9:ea:
59:64:04:8c:d1:fd:a4:2f:33:ec:07:ad:e7:64:ce:eb:2a:2d:
40:ea:e5:4a:c3:48:00:c0:e9:87:2c:29:87:64:70:ad:f6:55:
a6:3d:53:e5:93:7b:fd:63:db:34:7b:83:6d:83:2b:a6:e4:2f:
41:a2:26:a6:7a:2e:19:cc:2c:72:0d:67:b5:b3:7d:05:42:1e:
b1:57:77:5f:a6:a7:39:1f:66:0c:27:1d:65:2f:da:36:d9:27:
49:00:1b:c6:0c:33:c0:81:6b:44:de:c5:23:98:22:d2:29:77:
cd:4d:18:52:42:77:98:85:06:fa:71:7d:54:a6:d7:1f:e1:f9:
17:42:d4:8a:90:de:1a:e0:18:a6:ff:47:2b:b6:c8:43:c0:d7:
a6:7f:16:e6:57:8d:30:68:5c:97:ef:07:34:a1:96:95:bb:29:
a5:92:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org