Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oXOpeer4g3bSw9ny7g_CIJFuEbw.roa
File: oXOpeer4g3bSw9ny7g_CIJFuEbw.roa (raw, json)
Hash identifier: nqJzPJ42xIrE2dkpmGTXWrH5VkfansmQDcjayL8pgok=
Subject key identifier: A1:73:A9:79:EA:F8:83:76:D2:C3:D9:F2:EE:0F:C2:20:91:6E:11:BC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2340E995B91F88327B9E964FEED4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oXOpeer4g3bSw9ny7g_CIJFuEbw.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41537
IP address blocks: 93.115.58.0/24 maxlen: 24
85.204.123.0/24 maxlen: 24
77.81.181.0/24 maxlen: 24
31.14.221.0/24 maxlen: 24
31.14.220.0/23 maxlen: 23
31.14.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 09:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:23:40:e9:95:b9:1f:88:32:7b:9e:96:4f:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a173a979eaf88376d2c3d9f2ee0fc220916e11bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:38:27:60:fc:39:ed:5f:1e:d5:0a:94:17:
6f:8d:6b:a0:27:fa:7d:12:64:df:74:07:1e:74:67:
89:27:a6:f8:f6:6b:02:74:aa:1c:8f:98:71:30:b0:
13:a7:d7:a1:ac:52:89:f7:72:55:1a:ac:64:5a:26:
a2:bc:e0:0a:20:75:ae:10:f1:ad:18:ed:fd:5b:fd:
7b:64:ff:b3:94:d4:c3:01:18:02:20:02:67:6d:79:
0d:a5:22:ef:7c:6a:c7:05:2b:cc:e8:e7:db:28:91:
9a:36:b4:19:49:34:ed:da:45:bd:c5:7b:69:08:73:
e7:e5:a6:ae:12:af:88:c6:2f:85:00:2a:93:65:9e:
8e:85:63:9c:53:ce:7e:bd:b2:17:92:c8:a4:a1:8b:
ca:1f:71:72:a4:06:0a:f6:ec:2f:8d:a4:5a:7f:81:
44:d8:d3:28:d4:4d:f5:1e:ae:dd:f0:df:03:69:6e:
5e:bc:88:44:3a:e7:ea:75:d9:d0:31:e7:04:11:24:
24:57:95:9e:90:3d:98:e7:ba:46:87:7e:10:ec:7a:
fd:2f:03:b1:cd:69:3f:16:bc:c9:7e:c8:70:a4:7a:
c8:6b:cd:35:80:ae:a8:7b:ba:78:3f:7a:ee:43:64:
75:47:e7:87:d3:1c:9c:99:d7:de:2d:c7:f1:c2:f9:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:A9:79:EA:F8:83:76:D2:C3:D9:F2:EE:0F:C2:20:91:6E:11:BC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/oXOpeer4g3bSw9ny7g_CIJFuEbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.220.0/23
77.81.181.0/24
85.204.123.0/24
93.115.58.0/24
Signature Algorithm: sha256WithRSAEncryption
60:62:47:bd:32:e4:03:3c:3c:6d:d1:c1:f5:5e:38:8f:3b:96:
b2:02:a5:db:3d:53:e5:c2:4e:5b:f2:f2:7e:1c:12:86:91:b3:
38:47:9f:ab:c4:86:73:dc:1c:41:67:7d:99:f5:b7:30:f2:fc:
74:4d:53:20:8a:6b:f5:8f:69:83:a5:c3:56:70:d7:c1:3e:3d:
fd:c9:e6:31:13:46:cf:f8:e3:9e:b0:d3:44:f9:fa:19:ac:63:
c6:c8:a4:0f:bc:ca:f2:77:ce:0c:8a:7e:fb:1c:91:18:7c:45:
ef:60:c1:79:46:ac:e5:0e:af:a1:f4:67:e6:d6:59:29:a8:e4:
bc:e5:7e:c0:15:e1:2d:0d:65:37:9e:72:52:39:95:4d:ab:f3:
60:69:1e:08:92:75:37:c0:55:d1:9d:bb:c3:c2:8c:07:d5:3c:
41:d1:d9:5c:5b:38:b5:d3:4c:4a:f2:c6:6b:9e:95:0c:47:45:
2a:f9:ea:76:6d:cb:29:d1:ea:e3:f1:6b:89:44:91:9f:28:10:
e5:2b:e8:52:f4:9d:87:f4:c5:95:b2:cf:9b:65:9f:76:f3:27:
9d:fa:30:5d:b4:98:92:68:07:e6:4c:68:c1:00:69:c7:c4:15:
bf:06:fa:05:73:42:91:a5:08:c8:2f:84:ee:e9:b4:b8:71:29:
93:80:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org