Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/OzozRxeqvICXh7106zKIjRDl-VA.roa
File: OzozRxeqvICXh7106zKIjRDl-VA.roa (raw, json)
Hash identifier: 5C2GWK9uzTctTSbskbDzyeM0lBB+Z1tqF7bwA2xM20o=
Subject key identifier: 3B:3A:33:47:17:AA:BC:80:97:87:BD:74:EB:32:88:8D:10:E5:F9:50
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018CED94CB50C5641E0B4CB6D45E16B2EB0C
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/OzozRxeqvICXh7106zKIjRDl-VA.roa
Signing time: Tue 09 Jan 2024 09:36:40 +0000
ROA not before: Tue 09 Jan 2024 09:36:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.113.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 11 Jan 2024 19:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:94:cb:50:c5:64:1e:0b:4c:b6:d4:5e:16:b2:eb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 9 09:36:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b3a334717aabc809787bd74eb32888d10e5f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:9e:27:17:30:83:8e:9b:e0:88:a3:96:15:
ba:22:3f:1e:b6:b9:66:63:63:14:41:37:5c:23:38:
a1:4c:e6:53:33:d1:65:ff:99:dd:97:af:1f:83:91:
9b:04:66:d9:ca:c6:ed:41:d8:4e:44:5a:e4:5d:8a:
d1:c2:2a:e3:9f:e2:d2:ce:5e:4a:db:8f:57:f3:dd:
84:6d:f7:ba:50:13:dd:16:84:ca:9d:2b:53:94:c4:
e2:0d:6c:8c:4f:a5:a3:a8:4f:06:5b:57:47:71:85:
04:33:74:ad:8e:4a:25:b0:5a:ae:b0:c4:d1:87:93:
1a:fb:10:19:a3:86:a4:11:4d:d2:c8:95:5e:d5:87:
6a:95:4b:03:8d:3b:65:b9:18:11:13:93:b7:be:c5:
d8:64:96:34:f5:b0:d5:67:29:7c:b7:53:e0:a5:9b:
fb:47:5a:d6:23:08:dd:2c:8f:98:82:96:7d:cc:25:
97:21:73:3d:66:85:39:74:2e:12:5e:a6:21:1a:b3:
a4:3e:10:10:ef:2b:b3:a5:9f:ae:0e:39:4e:de:88:
2e:1b:e9:33:f9:36:e1:16:a7:b3:87:42:cf:13:02:
1f:db:58:a2:d2:8b:60:09:6c:ca:3c:22:33:e9:c7:
06:f6:5a:30:61:cc:ac:c0:74:3d:21:de:9f:60:32:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:33:47:17:AA:BC:80:97:87:BD:74:EB:32:88:8D:10:E5:F9:50
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/OzozRxeqvICXh7106zKIjRDl-VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.64.0/23
Signature Algorithm: sha256WithRSAEncryption
82:f4:26:4c:be:ff:42:23:3c:ab:05:21:eb:6d:ff:07:c0:d6:
57:1f:65:b0:36:88:f8:d4:66:77:88:71:c2:59:af:00:7e:31:
09:59:2f:b2:02:38:d4:c5:27:66:b9:47:aa:1b:3f:b6:96:03:
fe:53:af:18:65:a2:44:c4:da:f6:fb:d7:2e:7e:81:c7:7e:c3:
db:b3:06:1f:80:f1:2c:72:3d:26:16:b7:67:36:39:d0:f7:3b:
ed:b8:2e:6b:b6:5a:89:e0:fd:fe:91:fd:a7:95:7f:d8:a0:f8:
a1:b4:9f:57:13:99:b2:55:11:ef:1a:72:3c:e2:cc:be:fe:19:
f2:c5:47:03:a8:a0:2a:46:f7:e5:47:03:b2:48:aa:de:1e:d6:
b9:db:a2:00:b0:dc:b1:43:05:fe:00:b9:1d:2e:27:96:71:50:
09:96:91:18:96:4d:25:75:90:bc:c6:f3:b4:05:28:9c:84:b7:
69:9d:60:90:99:3a:cf:85:5f:03:bc:13:33:e7:cb:69:a1:4d:
dd:ea:72:9e:e1:60:f5:0c:18:65:0b:3a:bd:4c:da:6b:df:34:
d5:9f:31:0f:bf:5b:b7:81:4e:1c:c0:25:92:1e:a9:c6:ee:13:
9d:92:b8:b0:e8:19:6e:4c:86:08:3a:7b:47:eb:29:e4:97:3e:
cc:4b:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:26 2025 by rpki-client