Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/o1szJj9NlTSnM9TohOrWjwRIJKU.roa
File: o1szJj9NlTSnM9TohOrWjwRIJKU.roa (raw, json)
Hash identifier: 96sOqOqXM9vigQzAhg6CVFUHXh22FjBEcMsngoOAMpg=
Subject key identifier: A3:5B:33:26:3F:4D:95:34:A7:33:D4:E8:84:EA:D6:8F:04:48:24:A5
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 01856D4AC6A3BFDDEB3C9F5FBB1163C9744F
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/o1szJj9NlTSnM9TohOrWjwRIJKU.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.176.100.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
185.176.101.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c6:a3:bf:dd:eb:3c:9f:5f:bb:11:63:c9:74:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a35b33263f4d9534a733d4e884ead68f044824a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:39:17:24:74:f9:f9:9e:1f:30:00:fa:e3:
58:e6:25:aa:eb:36:a1:cf:84:73:8d:48:87:a6:8f:
ef:05:c1:64:52:70:0a:1b:39:9c:40:2e:43:68:01:
e5:c3:2f:9a:d9:b0:7e:1b:64:0b:cd:9a:1f:46:91:
27:6b:fe:93:a3:bd:df:72:97:ae:50:48:57:38:d3:
48:a5:08:d8:11:a5:de:29:cd:3b:be:e1:1a:e5:f8:
8a:85:72:2e:62:2c:39:88:51:8e:2b:41:c1:e5:8b:
ce:78:a7:e9:5c:af:e2:40:7a:9b:f4:6d:02:3c:b5:
ce:4b:24:ff:b4:92:53:c7:fa:e8:19:2b:46:93:96:
0e:2c:f5:58:22:05:26:a4:e6:6f:1b:c6:e3:c2:de:
99:e0:8b:5a:6f:21:22:8c:93:87:19:e5:55:62:2e:
27:3d:64:51:2c:7d:8f:2a:7c:f2:39:3a:b4:ca:d5:
a4:cb:62:4a:e8:5b:d2:0f:71:a1:6f:00:51:4b:14:
ce:31:95:8f:cd:2e:92:e6:de:61:19:6f:46:8f:99:
3c:10:81:38:2f:2c:21:ca:da:be:b4:62:db:e6:57:
44:90:e4:9d:c7:2b:38:61:a9:45:3c:6f:08:ec:6f:
73:5b:cd:6b:4b:c9:5f:25:22:9e:67:de:db:a8:9e:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:33:26:3F:4D:95:34:A7:33:D4:E8:84:EA:D6:8F:04:48:24:A5
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/o1szJj9NlTSnM9TohOrWjwRIJKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
Signature Algorithm: sha256WithRSAEncryption
90:fc:19:1c:76:10:37:23:43:58:53:ef:4c:53:c0:d2:ca:41:
4f:35:69:12:c7:3f:a5:fa:62:32:13:19:6d:49:60:e8:41:e0:
b1:14:40:38:2f:9d:65:48:05:eb:37:82:33:f7:87:ee:02:9c:
c5:6a:55:9b:ab:7f:2b:14:88:2e:de:f2:a4:26:2d:71:02:47:
84:ba:1b:25:49:07:42:97:00:c9:16:14:64:79:d1:a4:a3:ca:
ca:bb:24:91:68:f7:75:7c:43:e4:c0:1d:1f:de:d3:44:da:c3:
b5:4e:49:d6:13:5a:2a:de:04:67:b1:77:20:fc:88:55:05:ce:
9b:a2:f2:5f:98:6e:c8:f5:20:ea:62:87:12:23:7d:28:3c:3d:
9b:90:cb:62:1e:aa:f0:ca:85:8a:92:5f:85:df:26:63:da:1d:
84:7f:8b:e2:39:4f:ea:5a:99:68:f1:d6:78:e0:cc:19:cd:c4:
dd:c7:ab:58:a9:bd:8c:33:f2:0a:a5:f8:51:a0:7e:af:54:a0:
6e:90:bd:f1:9f:f9:8d:ba:92:3e:af:0b:7a:99:68:22:67:61:
9c:ff:74:ae:d1:eb:ac:a9:d7:f0:a7:5f:10:a1:96:1a:10:54:
2f:ca:98:44:b1:3a:a6:4d:00:74:92:22:38:71:77:f6:b2:e4:
63:4c:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org