Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OvuOpeyhXBykSMeBSXKvHhMug9c.roa
File: OvuOpeyhXBykSMeBSXKvHhMug9c.roa (raw, json)
Hash identifier: 6E+eolRHEvUpn8DqmcIhnAUs7PTRpM/vjPg7ILT7xiA=
Subject key identifier: 3A:FB:8E:A5:EC:A1:5C:1C:A4:48:C7:81:49:72:AF:1E:13:2E:83:D7
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0185A1221983643627664DBF9A77F1D6FD9C
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OvuOpeyhXBykSMeBSXKvHhMug9c.roa
Signing time: Wed 11 Jan 2023 14:00:44 +0000
ROA not before: Wed 11 Jan 2023 14:00:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57011
IP address blocks: 188.93.108.0/22 maxlen: 22
188.93.108.0/23 maxlen: 23
188.93.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 10:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:22:19:83:64:36:27:66:4d:bf:9a:77:f1:d6:fd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 11 14:00:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3afb8ea5eca15c1ca448c7814972af1e132e83d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:2e:d4:bd:da:3d:01:d4:e6:1a:8b:ee:b0:
41:30:d1:26:98:ee:80:6f:d8:fd:f3:6a:be:6a:33:
95:56:6d:06:5d:1f:17:6f:e6:5e:e4:01:97:22:a0:
65:b9:ed:2a:5a:4f:5e:66:63:25:f2:eb:8f:31:7e:
c7:49:05:e4:66:1d:e5:e4:04:4f:be:d2:c8:42:30:
64:72:50:a9:20:7d:30:4d:73:3f:e2:f1:3d:52:2b:
6a:22:97:c8:f5:7b:f7:e4:de:2a:53:67:c8:7e:72:
d1:21:e3:71:a4:40:9d:29:db:3e:c4:f4:1b:b9:d8:
e6:50:2f:a4:9d:88:cb:b1:6f:66:ef:b5:d0:24:e1:
6c:30:84:79:40:80:d0:d4:6b:5a:e7:0a:c6:31:f3:
54:69:2e:bf:ae:83:a3:06:ac:f4:f9:ea:f9:ad:37:
5a:11:c3:d2:35:11:0b:39:6c:fb:86:cf:c0:2c:1e:
01:75:ec:43:a0:4a:a9:d7:09:03:1a:9d:cd:5b:f4:
b3:9f:45:93:e0:3d:9c:4b:5b:f7:16:1e:79:2b:60:
65:7f:8a:ed:9e:b3:00:91:56:f7:7c:5d:5e:87:0f:
ae:03:2e:18:cc:0e:b9:34:c1:52:10:74:0c:f3:f5:
27:da:85:b0:98:2b:26:c8:4c:3f:9f:96:b1:ff:c2:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:8E:A5:EC:A1:5C:1C:A4:48:C7:81:49:72:AF:1E:13:2E:83:D7
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OvuOpeyhXBykSMeBSXKvHhMug9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.108.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ec:9f:e5:86:aa:f2:a6:61:5b:49:34:20:aa:53:53:67:f4:
ca:48:b7:07:f1:2d:76:bc:43:b8:66:ec:2d:01:b8:11:ae:2b:
8e:90:4c:3a:fa:86:87:c0:b6:5b:4c:b4:ce:7d:65:f6:84:dd:
0e:f5:21:22:39:33:cb:59:93:db:cb:95:61:b7:50:50:d4:39:
f6:c6:33:4f:f1:d6:d4:94:f6:89:ab:8e:7a:2a:1f:1b:73:1c:
a6:1e:e5:be:d3:22:51:b4:53:db:f9:4d:ac:df:29:76:73:10:
ca:87:ab:d1:af:bf:f9:6c:8c:73:c6:f2:38:12:53:7b:e2:a4:
7c:fc:c5:cc:b6:95:3f:9b:cf:89:96:3b:9e:47:81:88:02:e7:
0d:7f:bf:4d:7b:a6:91:bc:7a:3d:10:a7:ba:29:6b:07:c5:57:
c8:3f:b9:b7:ae:75:9c:24:bd:24:84:a1:f0:69:67:9d:3a:fb:
47:bc:e6:6f:21:30:25:a8:97:bd:8c:89:d9:28:3b:78:1a:80:
f4:aa:b9:7e:77:f6:1c:3b:73:a8:7e:94:d3:6a:82:14:ac:43:
36:a9:a4:96:48:8d:d6:90:26:74:0f:33:2b:59:ec:23:d0:45:
ed:76:f8:69:4f:6a:a4:58:54:64:1f:3f:74:e1:ca:e8:3d:37:
18:fe:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org