Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/OoCSEfrLkddcEcBFtwPj0qTUIxw.roa
File: OoCSEfrLkddcEcBFtwPj0qTUIxw.roa (raw, json)
Hash identifier: rKnO6bdmPPQYrdg8G1as93dPwmAav2AQD9OsaGOUecM=
Subject key identifier: 3A:80:92:11:FA:CB:91:D7:5C:11:C0:45:B7:03:E3:D2:A4:D4:23:1C
Certificate issuer: /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial: 01856DE6759BE57AF4B1505C4BE62BE707F4
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/OoCSEfrLkddcEcBFtwPj0qTUIxw.roa
Signing time: Sun 01 Jan 2023 15:14:57 +0000
ROA not before: Sun 01 Jan 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56552
IP address blocks: 185.71.67.0/24 maxlen: 24
185.71.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:75:9b:e5:7a:f4:b1:50:5c:4b:e6:2b:e7:07:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Validity
Not Before: Jan 1 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a809211facb91d75c11c045b703e3d2a4d4231c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:2c:72:b6:78:98:dc:64:83:8e:c2:15:81:
0f:79:0e:5b:a4:2e:ec:6a:72:7e:d3:7f:28:f7:15:
65:bd:5d:1f:d2:f1:bd:98:76:2a:00:f9:5d:25:45:
6c:09:35:d9:3c:66:ff:72:07:a3:09:07:5b:77:a2:
d0:b6:e4:47:f1:9a:78:ee:08:3b:70:2c:7c:56:20:
0b:07:92:c0:8b:b0:d3:a2:99:1e:cc:a1:89:d3:d8:
ff:62:e0:e6:9e:2b:e9:24:45:c7:ab:70:22:83:92:
35:06:37:66:ed:53:d8:59:a3:28:1b:a2:cf:7a:fc:
15:a6:b7:d8:8b:17:0d:48:4b:61:37:db:03:be:f1:
aa:d6:d7:d3:2a:ea:17:d7:07:7c:81:df:93:2d:97:
1e:93:29:d4:66:85:8e:c8:97:e8:f3:94:46:70:e1:
19:e1:83:cd:68:9f:90:52:ab:5e:15:40:17:cc:58:
ef:dd:18:a8:d3:68:66:f1:90:5d:c5:74:b8:6e:02:
de:b8:2a:fe:28:62:d6:b4:f5:23:ee:78:cb:c9:35:
a1:24:22:ee:be:a7:cc:bc:8e:9a:9d:ae:58:1d:97:
73:8c:1a:1c:cd:1d:d3:bd:84:41:68:bf:11:cd:a8:
a5:0e:02:6f:c3:3c:35:ed:30:9d:8c:f8:5c:63:a1:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:92:11:FA:CB:91:D7:5C:11:C0:45:B7:03:E3:D2:A4:D4:23:1C
X509v3 Authority Key Identifier:
keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/OoCSEfrLkddcEcBFtwPj0qTUIxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.65.0/24
185.71.67.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d7:56:44:62:40:2d:41:e2:de:ba:cb:4c:6c:1f:92:bf:1a:
38:dd:c0:dc:c9:c2:d9:75:5b:ee:78:b5:d9:22:33:4a:e1:b9:
da:dc:b4:ef:f7:f9:f4:73:67:79:d7:05:32:ae:09:58:f3:8a:
98:72:35:19:7d:e6:12:21:c1:88:b0:e0:fa:4c:3b:c2:f6:8b:
c9:e0:9d:9a:04:c3:6c:f8:66:a5:dc:5e:79:93:74:79:de:57:
b0:19:79:72:f1:c8:62:5e:b6:f8:fc:e7:18:3a:dc:58:69:3e:
19:d6:24:b7:6e:88:02:0f:31:7a:c2:a9:a9:30:88:6e:57:74:
62:a5:96:df:6a:60:23:28:4a:f9:f7:d8:d3:b0:a7:a5:ef:cf:
cb:1d:d8:56:49:82:8b:39:23:69:f7:1a:40:d2:2b:d2:c6:e0:
ac:13:dd:6a:cd:31:59:5a:bb:30:fb:ce:ce:e7:9a:ca:04:a1:
4e:6d:65:85:0d:11:88:6b:61:b5:7a:9e:30:f0:47:bf:39:19:
76:75:6b:bb:1d:69:b3:1d:a0:81:f7:3b:f9:73:71:6c:1a:75:
a9:a7:d8:22:f4:3c:3e:e5:25:66:52:9a:66:c2:54:ee:dc:dc:
83:f5:a7:72:79:cf:9e:5d:da:78:b9:4d:64:7e:d5:99:c9:8c:
82:d3:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:55 2024 by rpki-client on console-ams.rpki-client.org