Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/OMsApnLwbRJuf_oGJYzQ4IFIRV4.roa
File: OMsApnLwbRJuf_oGJYzQ4IFIRV4.roa (raw, json)
Hash identifier: NRiwjzCwIQJKluTo9VCiVhGtNuRH5BIZMuwMIunJmjw=
Subject key identifier: 38:CB:00:A6:72:F0:6D:12:6E:7F:FA:06:25:8C:D0:E0:81:48:45:5E
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 018A2C652009F7E09E838131D793F69FF7D3
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/OMsApnLwbRJuf_oGJYzQ4IFIRV4.roa
Signing time: Fri 25 Aug 2023 11:12:19 +0000
ROA not before: Fri 25 Aug 2023 11:12:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.187.104.0/24 maxlen: 24
185.187.105.0/24 maxlen: 24
185.187.107.0/24 maxlen: 24
185.187.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:65:20:09:f7:e0:9e:83:81:31:d7:93:f6:9f:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Aug 25 11:12:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38cb00a672f06d126e7ffa06258cd0e08148455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:b6:7f:dc:56:1a:93:cd:9b:24:d2:b2:6f:
15:2b:bc:49:d9:7e:36:62:5f:d3:f0:a1:c4:19:a3:
3b:08:af:5b:a1:9e:48:41:b1:eb:9e:e8:b1:db:3b:
d1:81:16:86:59:f1:0d:fb:02:39:47:3a:b8:7a:75:
bf:b4:16:e5:3c:b0:38:86:42:09:2a:69:14:2c:ea:
f7:f6:35:7a:b8:84:35:a0:b4:93:96:55:85:7f:79:
dd:99:8a:45:ea:47:6b:c1:41:36:37:75:98:cc:5b:
df:cf:21:7d:b2:df:04:ac:54:2a:9a:08:cb:70:3c:
51:3c:67:f2:58:78:75:fa:39:2f:5d:3d:cf:b0:39:
75:6d:3c:f5:a8:1c:e5:fb:5b:89:20:94:00:2a:8e:
d2:0a:08:94:9b:77:37:c6:0b:91:ba:f3:eb:89:08:
ec:62:43:27:7f:57:a4:ee:b6:21:9f:75:7c:b9:f9:
3f:81:aa:16:70:14:68:62:c6:ce:2d:d9:cc:7b:85:
3c:47:e4:61:b9:0f:89:96:95:7b:b7:0b:0e:31:5d:
db:bc:b2:a2:0a:e2:68:0c:ba:e9:9c:95:c3:39:bc:
62:de:7c:1e:d0:86:c9:87:50:2c:2c:a6:c7:4f:67:
1d:2d:99:e4:a4:77:20:21:fe:8e:57:71:16:17:e4:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CB:00:A6:72:F0:6D:12:6E:7F:FA:06:25:8C:D0:E0:81:48:45:5E
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/OMsApnLwbRJuf_oGJYzQ4IFIRV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.104.0/22
Signature Algorithm: sha256WithRSAEncryption
54:3b:c3:24:ab:bb:9b:10:b3:c9:b8:04:d5:0b:13:e3:6c:20:
ce:3d:28:45:0d:ac:2f:5a:a1:a1:21:06:4c:26:7b:a5:ed:ab:
0e:8e:f7:a9:dd:61:b9:85:04:22:09:49:da:70:9f:bf:a3:4a:
34:98:1a:3a:8b:99:a1:68:cf:74:70:5d:5e:97:34:05:a4:3b:
b3:d2:dd:3a:08:49:9d:5e:9a:e5:97:c2:a1:1f:e4:7c:e8:e8:
36:e5:d9:20:3e:61:18:90:bb:cb:d9:8e:44:d8:95:80:a6:f2:
84:55:1b:bd:14:cc:fa:5a:07:9c:ae:69:47:ed:36:65:49:23:
11:0f:23:8e:f9:21:88:7e:3e:fd:86:3f:48:e9:03:a4:54:77:
20:1e:fa:f4:b3:b1:27:fb:8b:b0:3e:05:7e:ba:db:13:e5:4e:
b0:a4:a3:82:c3:32:ce:d4:ec:c1:31:c4:cf:6b:c4:ca:5e:c5:
e8:3a:73:8e:e9:aa:ea:45:26:54:12:4c:34:c8:c5:83:a3:a5:
96:58:93:5a:05:cb:81:5c:4d:97:42:1c:69:cf:34:bf:3d:02:
6b:8b:7e:8d:d9:58:e2:8e:86:01:46:cc:1c:6b:db:6b:dc:40:
00:68:78:13:bf:70:2d:54:d8:b3:d2:6b:74:e1:ef:78:8b:43:
04:ab:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:03 2024 by rpki-client on console-fra.rpki-client.org