Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oRCvveNgYPncbp2vKWeep3NWTQI.roa
File: oRCvveNgYPncbp2vKWeep3NWTQI.roa (raw, json)
Hash identifier: xqaJKJ3yYVNtKWxpvG/7brPoZc89LzH0tzPBNG7mZ1E=
Subject key identifier: A1:10:AF:BD:E3:60:60:F9:DC:6E:9D:AF:29:67:9E:A7:73:56:4D:02
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 018CC2DAF0025739D52D839120D6F5A847EA
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oRCvveNgYPncbp2vKWeep3NWTQI.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201322
IP address blocks: 91.186.70.0/24 maxlen: 24
91.186.71.0/24 maxlen: 24
91.186.68.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f0:02:57:39:d5:2d:83:91:20:d6:f5:a8:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a110afbde36060f9dc6e9daf29679ea773564d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:9f:7c:42:eb:4d:28:7b:fa:bf:16:e3:da:
90:65:d1:de:bd:d2:73:f1:9d:fc:e2:85:1e:82:30:
ae:9f:b4:36:cd:3b:a2:84:9b:a0:d0:6b:50:fa:66:
dd:e5:00:61:af:95:cf:af:a1:72:d9:a8:fb:a0:85:
c2:1d:04:a2:f2:85:f4:e0:b5:d3:74:41:22:e6:9b:
8b:27:52:56:a0:b9:b2:a1:44:94:75:c8:a7:84:24:
0c:ef:79:ae:88:04:25:37:8d:94:b2:a9:1d:55:b1:
8e:49:17:c0:c3:0d:eb:cc:dc:58:4d:50:6d:fa:7c:
4a:46:1d:cb:27:f7:f1:c5:43:09:81:99:2b:77:85:
c0:1c:0b:b6:d8:9e:21:ee:42:f9:92:7f:ef:c3:ea:
8c:4b:fb:99:5b:40:ca:43:98:a1:43:90:2e:ad:ef:
8f:ed:33:29:55:ae:bf:27:b7:46:f3:68:31:af:4b:
fd:6d:14:6d:2e:9d:8f:ba:e9:dd:b4:4a:17:53:91:
f8:9b:fd:0d:00:f9:c2:be:a9:e2:63:cc:7c:fd:fe:
c5:61:b8:41:58:19:27:4b:e4:cc:73:6f:fd:b2:ed:
00:c5:b4:6c:5b:72:e3:99:89:0f:17:35:12:2e:bf:
49:59:da:2f:86:3c:75:4c:38:35:88:02:e0:3c:91:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:10:AF:BD:E3:60:60:F9:DC:6E:9D:AF:29:67:9E:A7:73:56:4D:02
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oRCvveNgYPncbp2vKWeep3NWTQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:73:fe:d2:7b:e0:63:cb:78:fc:78:d6:64:74:26:5e:29:3c:
38:30:e1:9c:2d:e9:55:26:54:b1:23:03:98:38:c2:1f:1a:23:
8d:a9:16:24:2b:7f:1c:05:c3:15:2f:69:35:0f:7f:a0:24:e4:
59:c5:9e:0e:12:3c:b6:50:e7:a7:e3:ef:1b:dc:1f:92:8e:1c:
5a:b9:3a:9d:0e:e0:5b:cf:84:89:69:bb:ef:a9:36:dd:89:39:
8e:bc:54:2f:fb:d3:b8:e7:7a:77:aa:66:cb:05:e9:5f:35:61:
4e:b5:97:24:b6:78:5f:79:50:2e:72:88:3a:1b:e8:0a:0a:08:
dd:83:b4:9b:c9:22:7b:a3:c2:df:83:ed:72:9e:ae:72:c5:0b:
ea:63:24:47:03:6b:be:e0:5f:3c:3e:bb:e9:5e:81:9f:df:7f:
83:9c:28:f0:a9:9d:0e:ff:f5:62:2e:cd:4a:ea:15:be:6f:c9:
52:5d:db:39:81:11:71:12:a6:10:70:a2:4f:43:6f:e1:33:b5:
67:a1:93:89:f5:67:d0:a6:a5:d6:8c:48:bc:52:25:5a:c8:3b:
2a:1f:c7:f2:13:b0:63:58:fd:42:95:56:c7:0d:56:80:b3:4b:
e9:22:7f:fe:14:19:0b:aa:64:63:88:e3:1e:6f:e7:19:7c:07:
b4:3d:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:21 2025 by rpki-client