Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/0hvo9b97ae9AV78WLdo3eE2yH70.roa
File: 0hvo9b97ae9AV78WLdo3eE2yH70.roa (raw, json)
Hash identifier: GYlgGNnAubUwYBNsQmCm0WI1PVycJwXp4Do2TflWMPw=
Subject key identifier: D2:1B:E8:F5:BF:7B:69:EF:40:57:BF:16:2D:DA:37:78:4D:B2:1F:BD
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 01857230DF95B965F1092CDF1A073FB56673
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/0hvo9b97ae9AV78WLdo3eE2yH70.roa
Signing time: Mon 02 Jan 2023 11:14:43 +0000
ROA not before: Mon 02 Jan 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39591
IP address blocks: 185.98.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:df:95:b9:65:f1:09:2c:df:1a:07:3f:b5:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jan 2 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d21be8f5bf7b69ef4057bf162dda37784db21fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:d6:76:2f:59:8d:d9:48:cc:bc:ea:53:a4:
20:53:6e:83:8f:58:69:2b:0a:46:91:56:b4:24:8d:
c0:7d:f8:c3:3d:e4:95:dc:5b:9c:b3:ff:8d:3f:46:
b6:1f:6d:01:6e:95:60:96:ed:df:ff:08:1f:da:10:
c4:de:69:ed:7d:b1:da:1f:e9:e8:9a:75:c4:cc:54:
80:00:7a:2d:fd:72:2f:70:c7:f0:bc:14:8c:9f:86:
3e:53:16:81:3a:7e:bd:6d:1f:8d:3f:f1:e7:71:6e:
4d:3b:ab:b9:fe:64:61:b5:7e:c5:00:02:9c:19:2b:
a5:18:e6:49:b3:03:5d:99:60:28:c4:db:d3:06:e7:
59:be:f0:6c:0f:92:9e:5f:bf:58:07:bb:07:3c:15:
e3:d0:9b:d0:75:76:5c:96:e5:28:ca:f2:0f:2f:ce:
a2:65:7d:60:8f:fa:d0:cd:a6:d3:c2:bf:91:4d:28:
dd:ae:13:e4:ef:43:0f:bf:e7:42:8a:49:de:02:d9:
f4:c2:d9:1b:fd:1a:07:6a:5c:79:6b:39:9e:82:67:
9b:52:63:a0:45:27:ef:49:e7:71:12:30:cd:c4:1e:
21:60:87:fd:e1:9f:3d:57:d6:3b:7a:ea:0b:26:a0:
b4:b0:30:c1:54:06:66:7a:a9:01:5f:75:f9:a9:ef:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:E8:F5:BF:7B:69:EF:40:57:BF:16:2D:DA:37:78:4D:B2:1F:BD
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/0hvo9b97ae9AV78WLdo3eE2yH70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6d:b3:ac:9f:52:05:fc:c1:bd:32:36:48:94:87:b8:35:f0:
f1:2f:7b:61:8b:c4:c7:59:ae:a2:c5:9c:03:ef:af:26:2a:47:
9f:c4:da:15:51:f6:3c:ef:58:7f:cd:cb:36:20:03:46:41:ff:
97:5b:8c:4b:66:9a:d2:5d:a9:21:21:53:4c:ac:41:f9:5c:b2:
b3:93:db:a5:d2:b6:82:75:51:a5:e4:2a:a0:46:e5:f3:1f:31:
c4:20:a5:f8:f6:df:c1:01:34:39:86:1c:0f:a2:da:7f:4c:8b:
20:33:a8:24:a6:3b:c1:2b:df:50:37:c6:59:fc:2e:b2:e2:49:
10:de:66:ce:fe:31:d8:bc:9a:0f:15:5f:b4:87:a8:85:0a:79:
6b:52:e8:e7:9e:44:e5:f4:13:2c:61:d2:90:26:2a:73:7d:b3:
5a:ba:94:14:da:6b:5d:47:c8:be:30:26:8a:f1:68:09:15:41:
69:12:60:fe:71:f9:7c:8e:b1:6e:c6:62:31:df:b2:25:8d:d3:
14:7f:be:0b:05:aa:70:f4:28:73:56:da:a5:f3:eb:a4:93:cf:
f2:06:12:c4:ef:88:a9:86:e7:ae:c6:29:d8:38:31:e8:6c:7d:
47:fa:66:9b:ab:e5:62:2a:d6:ca:01:bd:24:03:fd:a9:60:17:
3f:f6:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-fra.rpki-client.org