Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OgxL_4pOB-AeNILYicBKUi4a3ro.roa
File: OgxL_4pOB-AeNILYicBKUi4a3ro.roa (raw, json)
Hash identifier: RtOH06/rLSGA50Zi1jsXDkrGypklxuwQ77EpLLh2JMU=
Subject key identifier: 3A:0C:4B:FF:8A:4E:07:E0:1E:34:82:D8:89:C0:4A:52:2E:1A:DE:BA
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018779AB986ACB1D51C3B3B24765D2615A14
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OgxL_4pOB-AeNILYicBKUi4a3ro.roa
Signing time: Thu 13 Apr 2023 08:11:41 +0000
ROA not before: Thu 13 Apr 2023 08:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205675
IP address blocks: 37.18.24.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 09:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:ab:98:6a:cb:1d:51:c3:b3:b2:47:65:d2:61:5a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Apr 13 08:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0c4bff8a4e07e01e3482d889c04a522e1adeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:0d:30:46:ce:bd:bf:e1:29:6b:03:54:c4:
5f:28:1c:77:62:a5:14:ec:28:a2:69:d8:f3:5b:35:
a2:1f:c8:de:ea:da:3f:43:a2:92:18:9f:e6:f2:c6:
1f:92:d5:16:5b:f6:24:7f:4c:d4:33:f6:9f:7d:8c:
2c:bd:d1:11:a7:71:40:c8:d0:fe:9f:c2:83:2e:9c:
26:66:9c:13:68:d0:7d:a5:74:83:0b:10:ac:8a:d4:
37:fc:61:a2:9c:fe:54:e2:5b:58:10:ef:ef:ad:33:
f7:5f:0f:d1:9b:41:a6:48:62:d2:c6:9c:06:5f:66:
35:42:24:91:6e:0a:19:92:b1:ea:04:94:1e:eb:13:
36:98:73:21:0a:1e:30:11:47:ad:fb:49:c7:e1:54:
c7:73:72:5b:98:01:44:2e:2d:8d:c8:f4:fa:92:c7:
c5:b7:cc:fd:7a:42:e9:85:fe:d8:dc:98:b3:72:36:
33:e6:57:1e:c7:52:f8:87:dd:7d:3f:c7:5b:b1:5c:
ea:b0:13:22:d8:c6:bf:08:81:ee:29:22:8c:bb:25:
9a:c3:d4:48:51:40:f8:6f:ef:58:b1:77:67:f9:06:
d7:6f:38:70:71:fb:41:1e:66:18:40:ce:c8:59:f6:
82:73:96:74:a8:9f:9a:2c:8c:76:df:dc:d0:1e:1d:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:4B:FF:8A:4E:07:E0:1E:34:82:D8:89:C0:4A:52:2E:1A:DE:BA
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OgxL_4pOB-AeNILYicBKUi4a3ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.24.0/24
178.170.172.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:73:82:51:56:08:5d:16:23:5e:e3:b6:91:0c:a6:dd:48:ea:
3c:2b:04:bc:47:d6:ff:b9:8b:ac:95:5b:e2:d6:83:cb:3e:7a:
00:b4:b2:91:6c:b7:b0:c8:4c:28:53:e3:c4:38:98:62:f1:f0:
05:b4:29:d6:fe:2b:4e:df:8f:93:16:f4:d3:88:90:52:69:71:
db:f3:e3:77:69:73:27:f9:32:d3:dc:bf:6d:7e:99:07:19:28:
41:1a:00:fe:e9:1f:1f:0e:3a:68:3c:e5:e5:1b:9b:52:8f:0b:
c8:60:e3:3f:b9:e4:dd:95:00:7f:d4:04:34:c1:7b:13:25:5e:
df:c3:04:a4:01:70:fb:54:e3:2a:de:20:c8:f7:81:74:02:28:
4c:c9:69:d3:e1:4a:d0:5c:b8:03:f3:43:d9:89:af:15:9f:07:
94:e2:16:26:82:b5:02:fd:b3:f9:96:e8:e6:5f:40:ee:78:2c:
5c:b8:4e:64:50:35:f7:80:2b:97:77:c4:88:f8:cc:11:27:00:
e1:6c:e7:5f:43:05:42:3e:bf:45:8a:66:b7:25:b1:05:51:ed:
27:fd:f1:16:9b:89:ec:01:ad:00:30:ed:97:cf:20:9f:a6:94:
91:19:e5:e3:35:4f:89:5e:b3:bc:8c:0f:34:96:61:9a:e1:2c:
d5:b2:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org