Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/3OORcdj9PSAzVYau5SqZeatnvOM.roa
File: 3OORcdj9PSAzVYau5SqZeatnvOM.roa (raw, json)
Hash identifier: kNuStUekdpkC+1rwh6M88wo0fvzeDVpjEHd7amyvHho=
Subject key identifier: DC:E3:91:71:D8:FD:3D:20:33:55:86:AE:E5:2A:99:79:AB:67:BC:E3
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC72773D81767F0BE56F95A9394C5E3B0
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/3OORcdj9PSAzVYau5SqZeatnvOM.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12389
IP address blocks: 82.137.176.0/21 maxlen: 21
82.137.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 11 Feb 2024 13:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:73:d8:17:67:f0:be:56:f9:5a:93:94:c5:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce39171d8fd3d20335586aee52a9979ab67bce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:8f:e7:8c:14:53:7e:a5:96:c1:f7:85:f8:
27:ea:88:99:e5:38:10:58:09:b4:f3:61:23:05:9c:
6c:36:4f:a0:f4:f6:67:4b:3d:fa:9d:89:53:a4:be:
40:60:1c:7f:be:ce:ba:95:8b:7a:4b:87:e8:06:85:
0b:0d:ce:72:70:db:d7:46:0c:a9:42:8c:e1:f7:7b:
e3:80:b1:3c:ed:2a:b4:f4:f0:b6:ef:1e:9e:87:74:
fa:d5:f1:80:a7:5f:f3:89:b3:8e:3a:4b:17:e8:c1:
5e:da:d1:27:c3:2b:7b:0f:06:56:55:83:7f:71:67:
b9:63:16:23:ef:a7:ee:cf:af:bb:96:67:fa:51:22:
4a:67:a6:c0:c4:d9:39:d4:a7:95:c5:1b:10:7b:3d:
c1:07:ad:da:06:76:29:f3:7f:23:a0:83:3c:ce:53:
9f:ca:6a:8e:dd:e8:b4:3e:39:e4:c1:9c:1b:77:7c:
ba:f1:e4:b1:ec:3e:8d:dd:de:0d:c7:16:5a:95:0d:
ac:24:26:3c:a4:26:78:95:fa:dd:b5:61:b0:a8:3e:
33:ab:01:9b:2c:96:08:0f:34:43:42:0d:5c:04:37:
54:ff:d6:da:cf:b0:de:50:fb:b6:f8:e7:28:37:99:
2a:23:a5:65:e1:1c:4b:b8:e9:12:14:53:2f:f1:55:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:91:71:D8:FD:3D:20:33:55:86:AE:E5:2A:99:79:AB:67:BC:E3
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/3OORcdj9PSAzVYau5SqZeatnvOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.137.176.0/20
Signature Algorithm: sha256WithRSAEncryption
39:2a:68:67:d6:a5:11:71:fc:8c:21:14:ba:81:de:cf:43:f3:
d8:36:ae:2a:2a:70:7f:6b:7c:a7:94:ad:4a:c4:6d:02:06:e0:
f8:16:cc:13:df:44:cc:59:1e:6f:ec:f7:27:b5:2d:b4:fe:05:
86:35:6e:16:c1:e3:bf:ff:3a:1f:90:b4:89:52:75:57:a4:33:
ac:39:dc:59:76:97:36:69:ef:97:d4:94:54:6e:68:84:0a:99:
5d:c9:42:3e:a2:53:e2:b9:3f:24:ba:04:67:c3:44:2e:a2:91:
4a:81:ad:90:d5:62:2b:6b:f1:c9:13:ea:8b:09:9d:32:d3:89:
e6:48:09:b3:97:ab:18:b4:d2:6e:a5:09:2e:39:9f:f8:b1:58:
d9:b4:c3:b1:bf:fd:4b:1d:12:2d:5e:04:f4:76:c0:dc:d9:96:
91:8a:dd:97:6c:26:dd:ce:a9:89:54:7d:59:8a:e9:a4:b0:cd:
ff:a1:b7:10:89:a6:1c:35:43:23:1a:07:84:50:b8:24:ac:e7:
4e:d3:05:e5:b6:ac:0b:66:a5:62:bd:e6:84:16:df:75:66:2c:
93:27:dd:0a:58:f9:d4:ed:7e:0e:d4:16:ea:37:cf:d1:4d:5a:
e6:83:fe:ac:10:13:74:af:2e:06:ae:4d:33:3a:3d:fe:fa:ac:
8d:b3:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org