Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/_ofz025LHU_WC8pp6sbldBxc4Ho.roa
File: _ofz025LHU_WC8pp6sbldBxc4Ho.roa (raw, json)
Hash identifier: 4JBYKYM5597JO6xHj5+sMmxrDbdwOSeMQpAkgWk5XPE=
Subject key identifier: FE:87:F3:D3:6E:4B:1D:4F:D6:0B:CA:69:EA:C6:E5:74:1C:5C:E0:7A
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 0189FED47B6CA05CD770E99992F8CBEB26B8
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/_ofz025LHU_WC8pp6sbldBxc4Ho.roa
Signing time: Wed 16 Aug 2023 14:51:25 +0000
ROA not before: Wed 16 Aug 2023 14:51:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.162.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:d4:7b:6c:a0:5c:d7:70:e9:99:92:f8:cb:eb:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Aug 16 14:51:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe87f3d36e4b1d4fd60bca69eac6e5741c5ce07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5c:d5:c1:7a:34:3f:3c:9b:e2:7b:ce:85:9d:
1c:1a:dc:2f:61:a2:37:4c:2f:ee:55:80:46:bf:72:
ef:fb:97:d9:88:fa:58:f7:20:43:81:f2:2c:96:5e:
79:8c:99:cc:74:19:0a:9d:ff:dc:bd:f5:7c:cc:ed:
62:27:66:7d:5e:9a:6c:e4:a9:28:3a:a0:90:1a:11:
c9:ec:fb:6e:41:4c:27:fc:a5:56:ad:6d:79:80:04:
aa:6d:5b:1a:0e:85:62:c4:39:0b:6b:db:e0:25:9a:
26:2c:4d:e2:42:51:ae:5d:d7:4c:10:55:49:c3:c4:
f9:21:40:ac:b2:33:78:95:59:89:59:2c:f4:7e:8a:
cb:5c:2d:19:65:7f:98:73:1f:c8:91:6f:39:f7:92:
b0:65:62:30:c6:f6:54:61:b0:21:49:bc:c1:ac:cf:
2d:24:3d:c5:d5:ef:15:f6:99:f2:7e:55:e5:b3:a5:
77:eb:c6:f8:2c:01:f0:9d:1c:b9:24:3a:7a:79:87:
83:ea:a1:06:d6:84:64:3d:41:52:be:c3:cc:ba:59:
b3:6a:22:bb:09:63:ee:22:70:e7:a4:ea:89:2a:b0:
72:e3:d1:34:2f:ce:55:a1:54:28:10:3a:00:98:63:
00:02:ae:7f:85:a2:52:3b:05:8d:d8:28:7a:30:c3:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:F3:D3:6E:4B:1D:4F:D6:0B:CA:69:EA:C6:E5:74:1C:5C:E0:7A
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/_ofz025LHU_WC8pp6sbldBxc4Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:98:6c:4f:00:25:da:8b:56:1e:61:2c:7b:cf:e3:37:7a:b6:
80:af:32:58:b7:a8:4d:31:46:48:23:db:97:2e:7c:c6:bd:cf:
ea:84:a6:72:6b:8d:a7:ae:9a:93:89:58:1c:8b:37:d7:da:8e:
11:c4:a9:5c:87:26:ba:44:ea:17:f3:74:1b:bc:33:6f:1b:16:
28:37:f9:7d:7b:2c:da:ce:7e:44:ef:8e:2b:e0:29:b6:c0:65:
66:06:e3:1f:ad:a7:87:2c:56:76:d3:f2:60:55:49:ff:b4:60:
a3:71:09:e9:c0:6c:0e:7a:d3:76:e4:bd:b2:66:b1:e6:20:3e:
80:ad:65:f7:81:89:95:ec:db:63:b1:38:93:85:bc:dd:ec:8d:
78:10:43:ff:0e:08:db:87:e9:b8:84:fe:14:47:b8:be:c7:6a:
2d:d1:c1:71:b7:9f:b0:1c:36:df:ec:a0:14:59:12:e2:65:69:
7d:42:2a:18:6d:1c:f3:80:61:e7:02:fd:ef:ff:9d:51:8a:af:
d5:6a:5e:ff:75:13:49:e9:7b:69:f6:55:78:e7:99:57:87:c9:
c7:f3:60:77:a5:23:56:27:41:e5:15:7c:97:3a:20:dc:87:50:
bb:44:69:b1:50:2d:c8:9e:77:9c:ae:f1:0f:c2:ba:d9:f3:28:
68:c8:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org