Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/OJHC8ndaZESDCHuGLyaQBUGdIic.roa
File: OJHC8ndaZESDCHuGLyaQBUGdIic.roa (raw, json)
Hash identifier: 8qkktRHAxJXyg/4RottvrBW8Fb27JARfo7YLme5Bna8=
Subject key identifier: 38:91:C2:F2:77:5A:64:44:83:08:7B:86:2F:26:90:05:41:9D:22:27
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 019481E9213395906A9F70D374CC1F8AB0F0
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/OJHC8ndaZESDCHuGLyaQBUGdIic.roa
Signing time: Mon 20 Jan 2025 04:12:06 +0000
ROA not before: Mon 20 Jan 2025 04:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197911
IP address blocks: 188.120.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 06:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:81:e9:21:33:95:90:6a:9f:70:d3:74:cc:1f:8a:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jan 20 04:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3891c2f2775a644483087b862f269005419d2227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:8f:d4:d3:ce:32:8b:e5:5f:28:19:27:99:
45:86:c0:ea:c4:8f:eb:0d:64:2f:ec:a7:4f:ac:9f:
04:65:95:c6:e9:4a:a8:fa:3b:cb:13:30:e8:3a:f0:
99:a8:93:9e:50:b3:eb:a7:ee:14:c8:7a:f6:ca:52:
83:2b:b1:83:73:f5:17:2c:59:43:46:a1:31:ca:09:
8e:c8:62:7e:67:9c:c6:a9:6a:3f:47:26:c6:3a:73:
91:97:1f:3f:ae:fb:b1:5d:e8:f3:eb:1f:e6:32:3d:
be:96:66:d2:2e:b4:6d:4d:34:12:f2:4b:d3:09:c0:
70:86:11:7f:ce:dd:d3:13:31:be:50:52:c3:43:c9:
0c:de:21:4a:23:a4:f7:bb:bb:f2:25:29:9e:13:b9:
93:bf:ec:59:c6:77:58:d1:a0:73:63:87:f3:96:19:
ba:03:04:00:ca:1d:aa:6c:0a:58:9c:22:c1:96:02:
26:a0:3c:55:b1:c8:48:18:0b:45:10:89:43:ed:64:
e6:d5:4a:f7:a0:a6:60:cc:92:6c:de:97:09:d8:c3:
e3:fc:d4:2c:9e:79:73:5e:2d:35:e9:04:30:c7:d4:
02:f7:bc:d4:99:48:af:4c:15:80:77:a4:3b:1f:21:
26:c8:86:ee:6d:06:cf:82:cf:5b:05:1d:58:77:ac:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:C2:F2:77:5A:64:44:83:08:7B:86:2F:26:90:05:41:9D:22:27
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/OJHC8ndaZESDCHuGLyaQBUGdIic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ad:bb:f4:0e:4d:55:d5:b2:cc:e2:f8:9b:e7:77:0e:d1:82:
0b:b5:33:95:cb:13:a0:d5:89:3a:e1:f2:74:8c:37:8e:1f:e2:
69:40:77:3d:e6:77:4d:fb:c0:c4:dc:d8:31:80:4f:7a:14:f2:
7b:04:1c:3e:23:6e:42:ae:2b:34:8e:0f:f9:bf:ab:18:74:18:
96:6a:e8:93:d7:67:d3:05:19:56:b2:3d:ac:73:59:ad:a6:6f:
0e:b3:92:e4:cb:c6:2c:b5:bf:bd:52:19:f6:37:35:83:4a:06:
1f:91:7b:71:cc:a1:19:b5:02:42:a0:1c:a8:1b:7e:e6:81:05:
3b:2b:cf:ec:e4:87:fe:53:63:84:da:2c:03:76:9d:be:39:10:
91:e4:6e:13:f1:20:a1:2a:52:fd:07:a9:b1:6b:b5:66:a3:7e:
bf:ab:80:5a:09:b1:1c:6e:59:f6:8c:02:69:c3:22:8f:5e:3d:
ea:04:70:1b:b9:02:0b:7c:f8:34:16:14:c0:9a:58:b7:c7:e6:
e3:40:a5:a9:e6:7f:57:6a:5c:8d:f5:2c:24:33:82:cc:87:e6:
74:2d:7b:c6:d8:35:04:6e:75:6e:ed:24:25:2f:6a:61:10:51:
fd:78:ef:73:cf:4c:57:52:44:4c:ca:f3:0a:ba:2e:db:a6:a4:
ea:96:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:10 2025 by rpki-client