Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/OwlOQQgCoNQage2hmIM-qyugkSo.roa
File: OwlOQQgCoNQage2hmIM-qyugkSo.roa (raw, json)
Hash identifier: 1Xy2DqfJw084PDtGOM1Lw+yUPngTQc814JkYDFpB2zY=
Subject key identifier: 3B:09:4E:41:08:02:A0:D4:1A:81:ED:A1:98:83:3E:AB:2B:A0:91:2A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0188E6E091A45DEB3C484BB82692F543F626
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/OwlOQQgCoNQage2hmIM-qyugkSo.roa
Signing time: Fri 23 Jun 2023 06:10:57 +0000
ROA not before: Fri 23 Jun 2023 06:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202723
IP address blocks: 185.79.138.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 13:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:e0:91:a4:5d:eb:3c:48:4b:b8:26:92:f5:43:f6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 23 06:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b094e410802a0d41a81eda198833eab2ba0912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:fc:04:94:a8:0d:93:2c:22:50:05:02:5a:
8c:c6:3b:89:8a:0f:ed:99:b3:bd:ce:c0:6a:b3:f3:
b7:88:ca:0b:0d:77:a2:ce:87:97:06:d1:a4:cf:d8:
3d:18:5d:1a:3a:b8:0d:3d:87:c8:f9:df:88:7d:61:
78:51:ac:26:c4:59:27:bd:4f:c0:3f:a6:26:6a:08:
43:58:50:0c:89:66:61:5e:0c:65:f3:82:c3:3e:0c:
61:cd:b9:e5:55:e5:e4:c8:21:3e:0e:3f:58:39:31:
c4:de:96:80:1e:35:90:9b:96:ad:9b:09:c2:c4:11:
15:69:83:7e:30:4f:13:74:bd:a6:f9:3a:a3:c3:a0:
d2:4d:9a:e9:bf:5a:e0:62:1b:7a:e3:99:68:d4:73:
14:cc:5b:18:93:46:af:6a:4c:5e:dc:1f:9e:f2:49:
40:97:c3:b1:94:0b:64:7a:4d:b1:5d:cb:58:56:f9:
af:66:b7:c7:43:6c:8f:7a:9e:3d:a9:e0:58:82:1f:
b7:8a:7b:27:36:2d:a5:82:d5:e5:be:c7:3f:30:24:
ad:c4:bd:1b:f1:91:54:3b:44:97:96:46:13:f7:fd:
97:e5:95:f7:be:b4:d2:54:7c:93:35:ec:bb:e1:3c:
63:a5:37:19:1b:a7:09:a5:0c:c5:4d:e0:2f:44:8b:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:4E:41:08:02:A0:D4:1A:81:ED:A1:98:83:3E:AB:2B:A0:91:2A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/OwlOQQgCoNQage2hmIM-qyugkSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.134.0/24
185.77.138.0/23
185.79.138.0/24
Signature Algorithm: sha256WithRSAEncryption
30:39:52:66:bc:a8:87:7e:0e:6e:05:bb:9c:68:2b:a5:06:9c:
56:71:ee:0b:21:5d:f8:a6:d1:74:53:aa:86:03:7b:6a:7c:21:
57:07:b7:be:9d:9d:7d:68:1f:11:e3:d3:3b:60:03:48:99:ed:
41:b1:28:cb:a1:1d:18:b5:5d:b4:2f:d7:a6:b8:c6:32:2d:a6:
64:29:a9:35:eb:0b:c1:dc:38:74:8a:16:52:86:d8:39:09:bc:
1e:1d:98:26:93:0e:c0:b3:67:31:c3:35:68:69:7d:e7:bb:eb:
0a:99:15:c9:0f:4e:f7:9b:de:dc:19:99:5a:17:22:91:03:ae:
5c:d3:c3:88:39:84:7f:7b:8c:85:75:52:21:4d:5d:e9:61:fd:
ca:f3:99:92:d7:f2:4e:fc:08:9c:7d:15:dd:44:32:ad:3c:a9:
57:e7:f9:fc:17:13:1e:24:d0:41:1e:fe:f5:a9:0f:90:62:1c:
87:8c:fc:f2:ce:57:82:c5:03:b1:6b:ac:21:c1:89:8e:ae:9f:
01:85:b0:dc:98:87:ba:01:cb:d0:a2:de:2b:5b:63:d9:3d:61:
d9:01:16:f1:b0:a1:0d:12:75:c4:46:a3:7a:39:12:0f:f1:79:
4e:e1:3b:06:dd:ac:0a:2f:12:2d:74:f4:94:50:3d:c1:43:66:
49:1c:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org