Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/OoO_wcix20fJi4T62bHD6ArC1Ro.roa
File: OoO_wcix20fJi4T62bHD6ArC1Ro.roa (raw, json)
Hash identifier: g8H3qE/rWg1tEQEX5lU+Y/1m/0be+kv0KYVZBp4raBs=
Subject key identifier: 3A:83:BF:C1:C8:B1:DB:47:C9:8B:84:FA:D9:B1:C3:E8:0A:C2:D5:1A
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018CE7C9C29C85611518E63EF23A505C4AD3
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/OoO_wcix20fJi4T62bHD6ArC1Ro.roa
Signing time: Mon 08 Jan 2024 06:36:48 +0000
ROA not before: Mon 08 Jan 2024 06:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.113.66.0/24 maxlen: 24
185.113.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 08:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:c9:c2:9c:85:61:15:18:e6:3e:f2:3a:50:5c:4a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 8 06:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a83bfc1c8b1db47c98b84fad9b1c3e80ac2d51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:93:a2:94:ee:bc:bb:99:59:9b:91:fb:03:
21:64:9f:da:1c:77:fd:d8:8c:e8:3c:4c:aa:a1:57:
85:a0:e2:87:6b:d3:95:35:c3:cf:0c:11:90:f4:4e:
74:4f:8f:41:af:37:c5:4f:91:c2:8a:24:44:9a:1f:
93:6d:79:0f:7f:e4:38:1b:13:c9:f1:1a:e6:c9:8c:
66:1a:67:c8:35:62:28:77:54:f6:17:e2:03:c3:3f:
78:25:0b:44:f8:43:8f:12:24:5e:b5:aa:96:2f:3a:
18:b4:67:6e:61:0d:1e:d1:13:6a:80:41:e0:8e:4a:
fb:06:b2:4e:b9:01:c8:ea:c1:4b:32:dc:5c:0d:33:
7e:97:8c:41:c3:12:c4:9b:53:53:3b:95:80:20:0b:
b0:bb:5b:cb:af:de:ed:37:86:b3:17:19:82:76:88:
e7:4a:34:71:77:61:58:49:5a:8d:c6:d2:cc:f8:95:
c0:d8:3a:55:10:4e:07:84:52:5a:a6:75:03:7f:60:
80:28:69:78:ba:02:d0:fb:cc:9f:eb:eb:a3:80:72:
26:21:d1:61:8d:b3:7c:c1:2c:de:26:1d:a0:52:cb:
c7:43:32:ca:66:a9:27:75:57:7b:37:a7:f3:48:67:
f7:47:ee:24:51:52:15:89:29:a9:eb:3c:fd:16:f0:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:83:BF:C1:C8:B1:DB:47:C9:8B:84:FA:D9:B1:C3:E8:0A:C2:D5:1A
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/OoO_wcix20fJi4T62bHD6ArC1Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:04:0b:6d:e9:98:ce:b5:77:97:62:9d:b3:fd:98:c9:ae:16:
ae:a8:b8:c7:86:e1:ab:68:a9:d4:7a:7b:08:6e:f0:10:02:8b:
ea:cf:1a:d3:67:c8:0c:e9:f7:31:d4:02:83:0e:06:88:5e:aa:
14:0d:86:52:ec:fe:6a:c5:84:ad:7e:03:7a:74:c8:81:16:e8:
bf:a5:2a:07:63:d6:1a:e2:93:23:28:97:fb:29:1d:f0:f2:56:
5a:a8:ac:54:11:2f:53:9f:39:c4:ae:61:d4:13:ea:97:9c:5a:
c0:4e:c1:83:0b:c8:c8:43:e5:e6:21:ed:60:bb:9b:3b:59:73:
61:32:b5:78:42:2d:ef:f4:4d:b8:86:74:29:ca:17:1b:2e:d5:
45:75:4b:20:0e:54:2d:fc:1b:e3:7b:19:b3:14:d1:f4:e3:31:
6d:b4:39:c0:e5:c9:67:d9:c5:40:c6:c8:3f:a1:cb:3f:6f:b0:
7d:5f:34:d7:91:79:ee:2f:13:b9:6a:3b:0e:1e:69:ce:1c:bb:
b7:5b:c9:6b:01:d0:6e:90:14:5d:b6:4a:86:28:11:1e:1b:0e:
58:ab:e1:d7:5c:60:d2:1c:c0:d9:20:f1:1f:fb:ef:91:a2:1a:
21:0d:17:b9:44:d5:50:62:90:0f:b6:6c:e3:6d:76:97:98:93:
44:86:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:16 2024 by rpki-client on console-ams.rpki-client.org