Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/OcMCjWFb44dGzhhL8bwreJadzYE.roa
File: OcMCjWFb44dGzhhL8bwreJadzYE.roa (raw, json)
Hash identifier: 5LNWxedu6U1IJUF+RDJuMZyZA2x7cS60+bnMmjt59Zc=
Subject key identifier: 39:C3:02:8D:61:5B:E3:87:46:CE:18:4B:F1:BC:2B:78:96:9D:CD:81
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01918E2C22DF0EAC28C57E47D595DFCE6451
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/OcMCjWFb44dGzhhL8bwreJadzYE.roa
Signing time: Mon 26 Aug 2024 10:12:22 +0000
ROA not before: Mon 26 Aug 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58232
IP address blocks: 185.49.105.0/24 maxlen: 24
185.118.12.0/24 maxlen: 24
185.118.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 12:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:2c:22:df:0e:ac:28:c5:7e:47:d5:95:df:ce:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 26 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39c3028d615be38746ce184bf1bc2b78969dcd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:d7:7a:fa:11:71:35:cb:36:de:de:4e:94:
60:a0:bb:44:e8:94:44:fd:57:ff:49:ed:0e:f9:ff:
54:e9:3a:a3:04:ef:e7:72:85:3c:70:cc:bb:5b:cb:
5a:58:b5:fe:57:3f:ed:68:32:56:7c:65:0e:52:8a:
54:a4:5e:da:3e:aa:c8:b5:8b:c3:8e:7a:7e:85:6e:
b0:1b:7e:68:4b:76:9d:3e:3e:c2:ab:19:ae:04:f9:
9f:50:43:99:fb:47:46:7d:12:ac:88:af:4e:01:9a:
b6:ed:06:54:a4:f5:f0:9f:44:9a:94:ea:35:dc:4f:
a5:23:f9:b0:56:ee:5d:56:13:92:c4:36:bb:90:70:
ab:dc:e7:d2:92:d8:e4:6f:af:10:1b:fb:a1:5b:61:
bc:71:4b:a9:b2:ba:5b:e1:3f:84:91:3e:f2:1d:f1:
c5:83:cd:06:2c:4b:8e:83:72:29:dc:02:60:c6:7c:
12:65:c6:03:8f:17:6b:1d:40:d0:80:e6:21:d5:6a:
db:aa:5d:93:62:a4:16:87:33:92:0e:cb:39:9b:df:
6b:4a:71:40:a3:a3:2d:bc:6d:ad:85:e3:58:7a:d0:
05:7f:1a:1e:ca:e6:36:93:48:fd:9b:19:cf:15:69:
fd:4e:a6:f3:c8:37:29:6b:d8:75:a7:67:e2:e2:fa:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:02:8D:61:5B:E3:87:46:CE:18:4B:F1:BC:2B:78:96:9D:CD:81
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/OcMCjWFb44dGzhhL8bwreJadzYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.105.0/24
185.118.12.0/24
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:ea:b1:ee:f2:93:e0:59:b6:43:18:59:17:8a:c5:b3:a4:
a5:41:19:b1:b1:6c:ba:8d:a1:ca:30:82:bf:e9:fa:3f:e2:af:
a4:c5:9d:e4:0d:9d:b4:8f:56:ed:0d:96:62:eb:46:36:92:ce:
0d:8a:62:f5:37:f5:b8:bb:0a:83:3c:bb:ae:64:ca:77:c2:25:
24:6b:3e:7c:96:39:12:a7:57:5a:c5:2c:13:52:59:fb:1a:82:
ca:a3:2f:ed:bd:33:24:92:e8:50:80:6b:3b:08:26:dc:10:81:
bc:97:0c:66:64:c4:32:03:50:0e:af:cf:98:d2:e1:5d:c7:b1:
83:b6:56:5d:44:f7:93:e7:9f:a5:4e:91:26:33:a6:30:53:16:
61:eb:e3:ec:e2:95:54:f0:7c:18:09:20:f7:5b:e1:ac:e8:f3:
49:c4:6d:08:b8:b9:7b:24:25:b1:56:70:0d:d4:8c:66:3f:a3:
d3:00:f7:34:0c:91:6d:f8:49:b8:f9:74:9e:88:98:36:75:50:
47:bc:47:f5:0c:af:54:db:a1:b6:8d:ca:c3:fd:c8:68:55:04:
64:1e:45:a1:a4:0a:e0:69:5e:4e:97:4f:a8:75:f5:c4:76:75:
f2:6a:6a:9c:e5:29:8c:2d:2e:55:a6:7c:4d:09:bd:18:11:cc:
51:33:20:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 27 16:34:31 2024 by rpki-client on console-ams.rpki-client.org