Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/ojuTwqqYAWVQzHOi-dzf22HgOoM.roa
File: ojuTwqqYAWVQzHOi-dzf22HgOoM.roa (raw, json)
Hash identifier: pkoaw0F9qnYP3iCHX0FquUav652YyYrf1SxfrEKpfsQ=
Subject key identifier: A2:3B:93:C2:AA:98:01:65:50:CC:73:A2:F9:DC:DF:DB:61:E0:3A:83
Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial: 018CC7273AF6DB28B3E31F158E5BE6F9D629
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/ojuTwqqYAWVQzHOi-dzf22HgOoM.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200186
IP address blocks: 185.144.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 18:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3a:f6:db:28:b3:e3:1f:15:8e:5b:e6:f9:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a23b93c2aa98016550cc73a2f9dcdfdb61e03a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:8d:9f:9e:ca:d4:b7:a9:7a:3a:d0:db:80:
f1:41:25:b0:46:b4:4b:d4:e6:2c:cb:07:8e:e5:88:
47:c6:78:df:3a:4a:00:fb:40:cf:46:10:5c:5d:c9:
46:1f:c5:f4:03:fa:0d:d9:88:6f:64:d1:d6:cd:6d:
8b:4b:89:4f:fb:ee:10:d1:e4:51:83:c3:d8:94:c8:
05:d4:68:44:c1:e7:fa:2f:31:94:10:18:81:f6:d2:
5a:14:3a:03:11:9e:1d:e9:4e:f9:46:a8:3e:79:d4:
ef:3e:af:ca:35:c1:02:4a:a0:39:ce:21:bf:b1:55:
03:01:99:00:ba:62:ff:bd:55:92:7d:ee:72:bf:13:
1c:a2:4b:f5:24:fd:f8:9b:0b:5e:1d:c1:6f:c4:e4:
c8:60:c5:4b:8a:68:f9:8e:28:8a:bf:a2:51:9c:ec:
59:6d:b5:7b:75:19:d6:79:a3:cc:29:e9:41:38:7a:
a0:d2:49:79:b2:d1:14:06:31:01:44:0f:e1:3c:60:
64:b9:0c:3c:f6:8d:55:f1:2e:9f:50:63:2e:55:23:
42:31:eb:46:e5:ca:d7:b3:29:4f:d6:77:d7:0c:7e:
86:e3:fb:0e:87:ec:70:f7:ed:b9:1e:fb:60:41:c6:
0f:84:08:44:12:ed:26:fb:70:55:20:39:76:6b:82:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:93:C2:AA:98:01:65:50:CC:73:A2:F9:DC:DF:DB:61:E0:3A:83
X509v3 Authority Key Identifier:
keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/ojuTwqqYAWVQzHOi-dzf22HgOoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.97.0/24
Signature Algorithm: sha256WithRSAEncryption
af:75:6e:ef:42:71:99:e7:08:2c:ef:ce:ff:80:79:49:4f:4f:
59:87:df:59:dd:fe:7c:69:25:cf:7c:18:1a:be:91:d4:2c:02:
7d:c5:de:35:d1:3a:42:2f:09:ca:41:29:74:08:a6:56:7e:be:
ad:44:83:b0:8c:38:44:be:2f:a0:6c:d2:6b:03:95:c5:5f:e1:
43:e3:ed:2a:73:7a:88:90:db:28:ab:da:1a:03:6c:6d:c1:bc:
b9:49:77:c8:8e:56:07:a5:88:17:22:15:cd:99:ab:2a:fd:53:
69:b3:cd:47:55:1d:4e:24:f5:f9:67:0c:c5:75:c8:79:34:ab:
26:96:30:df:8e:02:57:17:e2:ae:f9:e3:05:97:e4:a0:e7:b7:
96:27:7a:b1:f1:bb:eb:43:c3:3e:ef:96:49:b4:a7:5a:3d:48:
ab:63:2e:a4:29:6a:45:16:6c:41:d8:ce:70:a1:f5:20:1f:9e:
b0:e4:a2:11:d2:e0:8b:b6:67:bc:50:58:b2:3b:8c:b5:55:b3:
83:c3:ee:c5:a2:31:53:24:29:2f:eb:9d:77:13:df:c4:6c:1c:
f4:ae:93:b8:2b:b1:67:65:f9:aa:60:2b:69:9d:f8:eb:0a:ad:
2d:2c:0e:3c:8c:21:fa:c4:e1:eb:20:8a:20:e5:a6:ab:ac:1a:
44:a4:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:53 2025 by rpki-client