Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/oPwQ61mFVg73aI1z8Vt9igPKbxY.roa
File: oPwQ61mFVg73aI1z8Vt9igPKbxY.roa (raw, json)
Hash identifier: edNwJb5rNBZYpllLapLLDcBcCTsWUB0c8PoHaDSMe/I=
Subject key identifier: A0:FC:10:EB:59:85:56:0E:F7:68:8D:73:F1:5B:7D:8A:03:CA:6F:16
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01856F301E71EAAEC172090B171E96F50041
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/oPwQ61mFVg73aI1z8Vt9igPKbxY.roa
Signing time: Sun 01 Jan 2023 21:15:02 +0000
ROA not before: Sun 01 Jan 2023 21:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206837
IP address blocks: 185.44.61.0/24 maxlen: 24
185.44.60.0/23 maxlen: 23
185.44.60.0/24 maxlen: 24
91.195.34.0/24 maxlen: 24
91.195.34.0/23 maxlen: 23
91.195.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:1e:71:ea:ae:c1:72:09:0b:17:1e:96:f5:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 21:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0fc10eb5985560ef7688d73f15b7d8a03ca6f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:62:25:8e:a2:ff:4e:37:6c:55:c4:97:b3:
3e:03:b6:f3:e5:93:1e:96:6b:2c:82:b3:13:d2:ea:
f3:98:c0:46:08:6e:b1:8b:67:0e:bf:30:6a:fa:12:
04:76:15:c1:dd:60:56:23:1b:4e:b6:3e:6a:d8:93:
dc:8e:43:13:49:8b:75:50:ff:c7:05:b5:ab:a4:24:
77:7e:e5:89:70:27:93:2d:d6:66:eb:87:af:43:27:
66:c8:8e:2e:03:ea:c0:3f:8a:b5:ce:5d:35:93:5c:
3b:ff:b9:06:57:2b:b0:43:2b:dd:37:7f:51:0c:3e:
87:46:44:e6:2c:a0:a3:90:08:3c:8b:34:f8:ee:71:
49:1d:f4:d0:e1:0b:85:32:1c:c3:61:92:bc:5b:86:
39:f9:e5:44:43:2d:56:7e:60:9c:b0:d2:bc:67:14:
a0:c3:8f:b9:d8:f5:72:91:d0:c4:5a:e9:74:e4:1e:
3d:5a:bb:66:36:27:06:57:27:02:f3:4a:2d:56:5d:
5c:0b:ab:4a:ba:66:85:57:d5:0a:05:11:90:7a:3a:
47:34:27:97:fb:55:16:50:42:76:48:42:e1:f9:54:
dd:91:36:ce:f4:f4:92:8d:ac:4d:f0:61:ca:55:33:
0f:20:e6:87:a8:67:59:17:49:18:13:9d:e6:d5:d8:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:10:EB:59:85:56:0E:F7:68:8D:73:F1:5B:7D:8A:03:CA:6F:16
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/oPwQ61mFVg73aI1z8Vt9igPKbxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.34.0/23
185.44.60.0/23
Signature Algorithm: sha256WithRSAEncryption
34:f6:14:e8:6b:94:3d:12:56:07:b2:2f:fb:b6:9f:95:ea:f6:
49:72:3f:f5:46:62:8f:b1:b1:b8:86:88:5a:2d:30:fd:c1:f5:
97:4e:f5:eb:f4:35:25:ab:d4:a5:10:95:04:1c:91:15:a0:5e:
ef:66:04:05:e8:e8:c5:17:9c:31:d7:a3:48:ea:da:4b:32:99:
23:db:f6:9f:3d:5d:9d:f9:84:db:cc:bc:27:e0:a8:7a:7e:a9:
fd:f3:4c:f5:9d:1e:2b:91:28:a8:bd:fb:20:a4:4a:63:9d:d4:
f1:3e:5d:19:c3:4a:77:51:6f:43:ac:82:d8:09:8c:e0:13:b6:
8b:d7:95:04:03:b1:02:8c:b3:b3:ed:c4:69:2d:42:f5:dd:e5:
74:17:b6:f0:ef:19:4e:30:ad:a3:10:af:24:20:de:30:58:bc:
84:7c:77:97:95:2e:ec:12:d7:dc:7a:bb:cc:d2:09:07:31:be:
24:1e:4d:4d:72:7c:51:f6:11:60:ae:1a:2e:fb:b5:e2:4a:a4:
aa:5a:58:35:76:0c:fb:d2:d5:0f:80:2d:6e:45:10:0b:3e:c1:
76:46:91:03:cd:55:2d:c8:28:b6:35:47:4d:d9:ea:bc:93:cb:
87:dc:17:35:7b:81:e9:91:83:b2:c1:21:b3:04:ec:3c:c5:51:
91:ca:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:32 2024 by rpki-client on console-ams.rpki-client.org