Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/OiAbLWz2o6e3oepy2uS_RSMU2VQ.roa
File: OiAbLWz2o6e3oepy2uS_RSMU2VQ.roa (raw, json)
Hash identifier: vup0XmY7F06GrCCQDvRrBhkf2o8a2aWpzbVrJirR7ok=
Subject key identifier: 3A:20:1B:2D:6C:F6:A3:A7:B7:A1:EA:72:DA:E4:BF:45:23:14:D9:54
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 018973B850B8FCDCD9F17E513B2F50580A8F
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/OiAbLWz2o6e3oepy2uS_RSMU2VQ.roa
Signing time: Thu 20 Jul 2023 14:33:26 +0000
ROA not before: Thu 20 Jul 2023 14:33:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 185.34.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:b8:50:b8:fc:dc:d9:f1:7e:51:3b:2f:50:58:0a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Jul 20 14:33:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a201b2d6cf6a3a7b7a1ea72dae4bf452314d954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:93:33:86:8f:1e:04:52:05:3f:8a:7b:ad:
12:3e:89:27:a0:50:49:76:50:b3:38:7f:d4:4e:03:
b4:7f:84:d5:6b:aa:bd:bd:77:b6:a0:d2:ac:ac:7b:
63:1c:f8:8d:a6:e6:5c:7b:24:95:5c:66:2b:f9:b6:
7c:dd:f8:f7:2b:3b:b6:30:6f:94:0c:a4:07:08:a3:
8c:e9:90:89:8c:93:7f:d0:a7:da:62:18:a9:c6:7a:
af:ab:1e:a0:57:b8:72:59:1b:64:01:89:6c:fa:f7:
c9:ba:29:aa:df:6a:d8:4a:c2:08:16:12:60:fd:f9:
33:59:c0:50:fa:95:28:67:91:47:f1:2f:91:36:8b:
c3:98:7d:71:d1:0e:1f:e8:64:ed:92:36:c0:2d:dc:
66:c8:44:3c:2f:94:ee:36:ea:e1:7a:fe:b6:83:d7:
3e:b4:f1:8f:48:14:e2:85:34:d9:d4:1a:c0:ba:75:
e6:72:fe:11:76:eb:e9:f1:9e:31:48:45:26:8b:3e:
49:50:86:60:ff:6f:87:64:ac:e6:a2:6c:c1:44:cd:
17:78:11:8c:c9:70:be:50:7a:3d:f4:2d:a5:70:e7:
df:05:a6:f1:3b:84:55:79:b9:1b:f0:3e:e3:b8:b9:
53:78:5d:6a:3c:40:6d:50:af:b8:e8:81:d8:fd:d9:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:1B:2D:6C:F6:A3:A7:B7:A1:EA:72:DA:E4:BF:45:23:14:D9:54
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/OiAbLWz2o6e3oepy2uS_RSMU2VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7f:11:48:df:20:56:69:45:8a:c3:76:4c:7b:03:cf:5b:63:
04:2e:5b:a7:71:7d:bf:87:cb:71:ed:b1:0e:5d:60:79:15:7f:
8a:42:be:ab:08:6a:5f:3b:16:37:0c:59:02:4c:93:ec:00:f7:
ea:af:c1:61:72:db:a9:98:64:fa:04:06:e7:fe:3d:82:5d:7d:
50:03:8d:ed:98:69:6a:59:3a:a1:a4:e8:ee:af:61:69:ce:28:
f8:e2:2d:13:6d:c9:49:5c:81:ce:36:1d:5a:75:71:a0:52:bc:
b4:19:52:00:55:15:c5:22:c8:e4:20:a1:8b:2c:86:5d:8b:f7:
bb:a8:20:8f:6c:b0:6b:14:d1:fe:a5:32:72:a1:a5:1a:73:a3:
eb:0f:6b:a0:59:76:75:70:ed:61:fb:70:13:d1:43:6b:b0:67:
dc:d4:8c:93:ea:98:98:13:0b:2f:cd:c8:8f:ea:aa:4d:30:f2:
36:a2:cd:12:69:9b:32:9e:99:98:62:72:ab:b3:a5:b8:0b:ad:
5a:8d:4c:18:d2:ed:d3:ef:95:40:9a:c3:30:eb:55:10:92:55:
c0:bc:3f:f5:ec:08:7e:59:69:35:45:b6:76:fd:27:dd:90:df:
65:67:7a:8c:5e:8b:db:54:71:51:86:d2:1a:87:a9:2d:b0:fc:
0b:c3:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:32 2024 by rpki-client on console-ams.rpki-client.org