Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/Oulr-S1MbutyuRmZiCKfn6Ubyrs.roa
File: Oulr-S1MbutyuRmZiCKfn6Ubyrs.roa (raw, json)
Hash identifier: 2zLooOVd7ypCBHduP144HWxlyfLhKvyECi1swO7K+Ls=
Subject key identifier: 3A:E9:6B:F9:2D:4C:6E:EB:72:B9:19:99:88:22:9F:9F:A5:1B:CA:BB
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 018AB2E2B8A8573E8AAAE004D8E2F3BA656A
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/Oulr-S1MbutyuRmZiCKfn6Ubyrs.roa
Signing time: Wed 20 Sep 2023 13:58:37 +0000
ROA not before: Wed 20 Sep 2023 13:58:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207003
IP address blocks: 185.188.30.0/24 maxlen: 24
2a12:d940::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:e2:b8:a8:57:3e:8a:aa:e0:04:d8:e2:f3:ba:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Sep 20 13:58:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae96bf92d4c6eeb72b9199988229f9fa51bcabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:69:b8:6f:a0:fd:1b:99:7f:76:f9:da:ff:
91:8f:07:45:6c:2a:23:95:a3:55:12:74:6f:2d:9a:
50:81:38:8e:75:9e:7a:0c:14:27:83:40:bd:9f:a4:
be:e2:86:30:e2:a3:bb:80:fa:e2:7b:7e:38:53:45:
a0:0a:3e:27:b8:ac:e7:79:9f:6c:fa:b6:d5:2b:24:
a3:24:fe:86:a8:50:9f:21:31:de:c4:26:29:dc:72:
3d:f8:a7:7c:c8:99:33:dd:91:33:1b:be:f8:0a:3e:
55:9d:d6:1d:8f:95:e4:d4:ff:f5:e8:dc:31:f5:47:
5c:4e:53:3c:07:4a:fc:61:72:3a:61:71:ed:50:75:
77:71:15:15:3a:38:f8:d9:a9:68:b3:7b:f4:d5:35:
4f:d3:2b:0d:7d:27:80:12:4d:1a:f6:0d:3e:4e:30:
da:9c:c3:06:e8:23:9a:ba:ea:20:0e:bb:c2:99:6d:
d6:86:fb:7f:de:69:0d:fb:92:26:4e:47:76:86:03:
c5:d8:4d:71:57:0e:1b:e1:33:4f:4c:ae:9a:8a:08:
a2:30:bb:fd:ce:1f:96:91:7c:61:a2:10:e7:58:f2:
1b:e2:fd:8b:51:eb:d8:9b:fe:2f:c5:03:c0:da:39:
e5:2b:22:00:1d:a5:6c:57:c7:96:da:e4:73:98:96:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:6B:F9:2D:4C:6E:EB:72:B9:19:99:88:22:9F:9F:A5:1B:CA:BB
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/Oulr-S1MbutyuRmZiCKfn6Ubyrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.30.0/24
IPv6:
2a12:d940::/29
Signature Algorithm: sha256WithRSAEncryption
07:0d:a4:65:54:d7:46:a9:d5:5b:5d:20:e7:ee:94:2c:c5:57:
ca:45:34:0f:dd:37:28:3a:7d:d6:0a:da:00:98:17:4b:1f:33:
ab:bf:81:91:93:bc:95:b4:de:56:44:2b:d7:4a:1c:78:7a:ba:
1d:34:3f:03:44:96:ae:06:59:21:b3:2f:2f:e1:f0:b6:3f:21:
23:87:90:b3:de:2c:12:8c:f2:c2:ab:63:33:04:0b:c9:44:1d:
cd:c3:a1:b6:b2:65:dc:2a:c1:19:2b:d4:d2:68:79:7c:33:c1:
3c:7f:c6:4a:16:ba:02:f4:71:75:b3:2d:d1:06:07:a5:79:ce:
58:a1:48:c0:e1:06:a1:e0:5c:03:e3:bc:28:ad:10:64:c2:27:
4e:e2:73:3e:d0:63:43:42:ea:59:e4:0f:7e:41:e3:5d:9f:be:
d1:7b:cb:71:0a:c1:b8:21:b9:39:ee:62:4a:18:82:11:a6:85:
15:cf:68:b5:b0:64:be:83:b8:ba:e0:99:e7:6c:35:3e:b7:50:
03:6e:b1:6c:87:6b:b6:67:b4:f3:11:e8:b6:c9:34:5b:a6:cb:
c2:06:f0:d1:ca:2d:bf:74:80:cf:ca:7d:a5:96:4a:17:76:58:
22:0b:fd:c6:df:dc:fd:3a:35:38:25:2d:0b:43:fa:47:9a:8d:
8d:71:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:50 2024 by rpki-client on console-ams.rpki-client.org