Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/O0k-j34nmSqgvqvpzFNqbXhllUk.roa
File: O0k-j34nmSqgvqvpzFNqbXhllUk.roa (raw, json)
Hash identifier: 33V4VVNFEtgszzBU6Rhsj3na6vRwFHDSsk9c4etxALw=
Subject key identifier: 3B:49:3E:8F:7E:27:99:2A:A0:BE:AB:E9:CC:53:6A:6D:78:65:95:49
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D242A5FA010C03FD9B9C572C1643B6
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/O0k-j34nmSqgvqvpzFNqbXhllUk.roa
Signing time: Thu 28 Dec 2023 14:26:58 +0000
ROA not before: Thu 28 Dec 2023 14:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21325
IP address blocks: 87.246.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:42:a5:fa:01:0c:03:fd:9b:9c:57:2c:16:43:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b493e8f7e27992aa0beabe9cc536a6d78659549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:e2:74:f8:dc:a5:c5:95:a0:0e:1e:94:3f:
f6:fc:70:93:37:dc:f9:e5:19:d9:1e:4d:fe:23:ef:
0e:4b:39:99:1d:ac:af:63:d2:ba:84:8e:f4:9f:f3:
2b:ae:f9:bd:51:51:c8:ef:0b:28:47:51:4b:11:cb:
6e:ce:24:5b:cd:c9:59:46:2d:c9:e5:5d:d4:24:05:
dd:3d:54:86:b0:d4:d6:bc:d9:63:5c:59:63:4e:c1:
ff:40:1e:e0:11:73:c0:6b:38:9d:f9:f7:ee:74:4a:
fb:6e:c0:36:ad:ca:a0:d9:b0:95:98:ce:c2:30:d5:
ef:7c:5d:76:96:14:29:18:a5:8b:24:7e:1e:f4:2c:
9f:02:fc:17:2b:b1:46:c8:8e:e5:bd:6b:1d:1f:ec:
32:99:a9:75:dc:5d:5e:3c:48:77:c9:30:61:2f:4e:
7d:8d:e6:79:54:7b:4b:90:4d:58:fc:d1:51:02:37:
6f:27:19:b7:8f:86:e7:6f:33:c6:24:06:7f:00:d8:
bc:7d:47:0e:78:f8:de:a6:1d:f4:a1:f6:4e:f0:dc:
e3:7c:38:44:e6:b9:66:c4:00:c8:25:22:45:82:72:
90:d1:e3:ba:37:72:58:e3:5a:bf:ba:7c:19:c5:c7:
79:d2:ee:d6:e8:bd:1a:58:d2:c6:1f:4e:ee:af:ae:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:3E:8F:7E:27:99:2A:A0:BE:AB:E9:CC:53:6A:6D:78:65:95:49
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/O0k-j34nmSqgvqvpzFNqbXhllUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
86:37:e9:a0:b5:62:7c:2b:21:40:8b:ad:34:ac:27:a8:17:8b:
b5:db:93:99:8b:51:6a:30:06:cb:36:8f:aa:8b:ca:4a:8b:2a:
c4:2d:46:74:4d:a1:2f:ae:22:b8:8b:88:91:bf:5d:18:9d:4c:
4e:a5:11:a3:b9:66:91:f7:20:1c:a5:65:e6:8f:d9:f3:96:28:
91:75:47:77:dc:d2:bc:f3:a1:70:6e:70:62:c2:98:3c:fa:9d:
9b:bf:9f:25:a1:83:77:98:b5:86:d2:f1:b9:b2:ac:98:f2:7a:
cf:f3:39:50:6a:d5:82:f9:a5:c7:22:8a:b6:86:ed:13:1f:7c:
c2:17:db:dc:e5:b1:d3:82:2a:c7:6e:40:8e:58:49:ce:09:a9:
94:05:21:51:1c:6c:96:20:bc:02:58:8d:20:04:03:fb:c5:c7:
ee:6e:8d:b4:0e:d0:c5:09:fc:05:c2:58:b3:5e:f5:d1:a0:92:
33:f2:a7:35:0f:69:bd:5e:5b:64:a2:16:03:46:c1:bd:3d:99:
70:c5:db:f2:cf:94:08:34:fa:7b:91:ed:f6:72:0f:49:41:2b:
fd:21:99:5c:2b:72:34:51:7f:67:0e:5d:cb:09:81:98:b3:06:
60:63:79:f8:30:8d:b0:e9:61:e9:3b:2a:85:b9:1a:99:5b:3d:
c0:6e:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org