Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/O9-v0TpYtPd4SRN-2BFJSFiIxdc.roa
File: O9-v0TpYtPd4SRN-2BFJSFiIxdc.roa (raw, json)
Hash identifier: LK7/ko6zON42Ge5tKoUzhxX3V1VVrUvX81Y3MzHdbXQ=
Subject key identifier: 3B:DF:AF:D1:3A:58:B4:F7:78:49:13:7E:D8:11:49:48:58:88:C5:D7
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 018712EC936C76B2F8A498F6507D66B4C255
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/O9-v0TpYtPd4SRN-2BFJSFiIxdc.roa
Signing time: Fri 24 Mar 2023 09:21:46 +0000
ROA not before: Fri 24 Mar 2023 09:21:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57227
IP address blocks: 185.110.44.0/22 maxlen: 22
81.163.63.0/24 maxlen: 24
176.120.192.0/19 maxlen: 19
81.24.85.0/24 maxlen: 24
81.24.88.0/21 maxlen: 21
185.59.244.0/22 maxlen: 22
81.163.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 04 Dec 2023 08:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:ec:93:6c:76:b2:f8:a4:98:f6:50:7d:66:b4:c2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Mar 24 09:21:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bdfafd13a58b4f77849137ed81149485888c5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:0c:a8:ff:09:34:8f:f4:8a:34:95:e0:ae:
58:09:15:d4:e8:6e:e2:fc:5b:4a:3a:ec:cb:3d:ac:
97:3c:95:f1:b0:cd:5f:8f:e5:cd:ff:0a:7e:e6:9a:
36:d4:1a:70:03:c2:6b:83:33:5d:62:db:da:d9:c9:
fa:12:3c:11:d1:3e:fc:d4:65:c7:d3:84:ec:03:75:
3e:c2:87:62:c5:7e:cd:64:66:1e:5f:c4:ef:b4:89:
76:45:8b:58:94:ed:4a:15:df:05:d1:11:0e:20:1e:
46:99:3a:ef:1e:53:3f:bd:7c:bc:da:c4:9e:56:9c:
8e:22:4b:48:d3:1c:d8:d3:fc:a2:d7:95:e9:47:37:
37:7f:ac:99:43:ab:0d:2e:87:91:33:c5:91:c9:a0:
29:80:cf:5f:91:0d:b1:7b:92:f6:29:d0:54:68:91:
da:06:f9:62:87:07:fc:53:4e:2e:34:2e:3d:cb:47:
81:e0:83:9e:17:ed:6b:7b:f0:75:ca:dc:3f:a1:a3:
79:be:35:13:ed:a8:33:63:18:2c:fe:1f:69:f6:b7:
ea:50:bc:6d:91:fe:09:3e:48:10:d7:37:89:d5:03:
8c:dc:7e:94:6e:51:46:91:32:3b:4f:7c:b0:54:e3:
1e:e9:58:84:84:d5:37:41:2b:d6:d5:a3:08:10:c0:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:AF:D1:3A:58:B4:F7:78:49:13:7E:D8:11:49:48:58:88:C5:D7
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/O9-v0TpYtPd4SRN-2BFJSFiIxdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.85.0/24
81.24.88.0/21
81.163.32.0/19
176.120.192.0/19
185.59.244.0/22
185.110.44.0/22
Signature Algorithm: sha256WithRSAEncryption
55:a7:82:88:4f:4a:8e:e9:0e:c4:00:91:d4:ac:46:f2:0c:a4:
a0:ef:84:8d:e6:24:a6:b3:a1:be:98:68:0c:d6:09:f5:2d:17:
53:00:19:ac:0c:b4:b0:f7:57:1d:3a:56:f0:83:f9:51:14:a7:
9f:c9:b0:a6:8d:51:0a:50:1b:81:3f:ce:42:3d:af:83:fb:ab:
f9:b5:29:35:e7:10:61:27:c6:08:d3:0f:54:ac:d0:16:7a:4a:
be:52:07:67:f0:dc:8a:0a:9e:9c:78:96:a5:7d:6a:60:48:39:
02:0a:09:61:ff:63:98:4a:c7:5b:5c:2f:78:18:03:89:a6:d6:
6c:ea:1f:3d:30:01:fe:23:1e:7f:ce:93:ae:fb:7f:7d:0f:79:
c4:64:53:44:1a:f8:a1:66:00:94:59:fb:e4:7d:b2:44:62:82:
a2:d0:3a:bb:eb:57:2d:4a:4b:7f:2a:3b:a6:b8:6c:45:f8:68:
16:d5:12:cd:23:c8:97:0f:dc:ec:b9:a7:fc:75:b5:3c:d4:57:
7d:a4:8e:3e:05:84:e1:5b:53:b2:b9:56:08:4c:35:ba:f8:51:
e6:97:ee:13:79:88:b4:ed:d2:b8:b9:31:b8:49:5f:17:19:55:
70:3f:04:26:a8:b2:0a:5e:73:03:17:4e:fd:90:51:84:5a:c4:
d2:be:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:21 2024 by rpki-client on console-ams.rpki-client.org