Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/oCs_9mJYi61A1diJsqo1ME5QKeU.roa
File: oCs_9mJYi61A1diJsqo1ME5QKeU.roa (raw, json)
Hash identifier: c8MveVVQ+xUqy7RNUU326LLrML5TF6cJ5LdZ0NtNr/g=
Subject key identifier: A0:2B:3F:F6:62:58:8B:AD:40:D5:D8:89:B2:AA:35:30:4E:50:29:E5
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CFF816C75F09A172EA6A8598CD85EA92D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/oCs_9mJYi61A1diJsqo1ME5QKeU.roa
Signing time: Fri 12 Jan 2024 21:08:41 +0000
ROA not before: Fri 12 Jan 2024 21:08:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 185.125.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 16:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ff:81:6c:75:f0:9a:17:2e:a6:a8:59:8c:d8:5e:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 12 21:08:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a02b3ff662588bad40d5d889b2aa35304e5029e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:9b:f0:88:a5:82:71:10:9e:3d:54:6e:00:
c3:23:3e:bc:37:28:33:8d:e7:fc:1a:36:e3:e6:50:
4f:f8:5d:84:27:a3:f5:af:46:48:7b:fc:bd:a3:a3:
32:37:d5:44:5f:1c:6d:be:df:e3:8f:8a:31:bf:bf:
77:06:df:34:a0:e5:1b:c3:39:ff:4c:31:8b:18:32:
4e:54:21:d2:9b:c2:4d:cd:5d:0e:63:3e:3a:0d:3e:
6b:2e:ab:ed:2b:94:c8:3f:b9:fe:fd:3b:a5:69:15:
8e:6b:fa:fe:b3:0e:d0:7e:0e:17:5b:9c:30:d8:b7:
31:a5:73:ba:6b:30:0e:e1:1e:66:36:51:d5:ae:39:
15:68:17:b4:f0:34:66:8f:64:04:6a:0a:82:39:77:
89:6d:8a:78:73:cf:7b:4d:08:66:47:10:d8:b9:b6:
84:aa:31:8d:2f:c3:41:2b:56:fb:64:f4:0c:b4:f3:
7f:51:7d:b4:c0:1a:52:74:aa:f1:3d:97:7c:50:6d:
2d:54:b3:98:7e:5f:6f:84:2c:8b:9b:e5:d9:d9:da:
d0:7b:91:ff:36:f9:33:e2:e5:da:2e:fd:16:bc:cc:
f2:df:a4:ca:3d:83:5e:2f:0e:70:32:d4:d6:6e:f5:
54:8e:14:6a:2e:21:53:86:39:21:75:6d:78:9d:94:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:3F:F6:62:58:8B:AD:40:D5:D8:89:B2:AA:35:30:4E:50:29:E5
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/oCs_9mJYi61A1diJsqo1ME5QKeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:5d:25:42:4e:85:bc:f9:f9:01:63:96:e2:a2:e6:76:dc:76:
29:65:80:f4:a7:93:c8:dc:93:9c:b0:25:be:e4:db:fd:2e:d7:
cb:bb:cd:89:27:7b:cc:ca:e2:c6:76:b0:fc:55:a0:e6:ab:43:
99:61:04:93:99:b6:f9:22:0c:81:d7:5d:b4:48:16:d7:88:15:
c8:27:59:a1:00:fb:41:ff:a6:38:1b:a8:b6:2d:86:3f:b9:14:
ca:6b:18:ba:c8:3d:6f:b1:f9:d1:fc:50:92:0d:50:70:52:ed:
97:39:33:44:62:07:e1:b8:76:5a:ee:1b:a2:61:ac:22:40:1c:
17:e8:f9:82:f4:45:a2:29:9a:fb:13:4c:d6:e7:5d:69:5a:a3:
80:c1:99:03:0e:1e:db:4d:f2:f3:c9:b2:b8:c2:f9:5f:c7:7d:
96:54:09:12:ea:2d:66:f2:dc:2a:22:f7:cf:bc:61:04:cb:28:
83:fe:0f:79:48:dd:e6:7f:14:0f:a3:26:bf:1a:cb:45:b4:e2:
72:92:45:ef:1f:9c:e9:40:f9:e8:5d:ec:60:15:89:ed:88:76:
b2:56:82:1a:54:d9:bb:3c:c4:ae:0e:0c:94:cc:42:74:05:54:
d2:34:6d:64:93:ab:76:6d:1c:a4:cb:8b:ad:ed:8d:bb:fb:92:
ed:4f:45:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz/gWx18JoXLqaoWYzYXqktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTEyMjEwODQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDJiM2ZmNjYyNTg4YmFkNDBkNWQ4ODliMmFhMzUzMDRlNTAyOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZmb8IilgnEQnj1UbgDDIz68Nygz
jef8Gjbj5lBP+F2EJ6P1r0ZIe/y9o6MyN9VEXxxtvt/jj4oxv793Bt80oOUbwzn/
TDGLGDJOVCHSm8JNzV0OYz46DT5rLqvtK5TIP7n+/TulaRWOa/r+sw7Qfg4XW5ww
2LcxpXO6azAO4R5mNlHVrjkVaBe08DRmj2QEagqCOXeJbYp4c897TQhmRxDYubaE
qjGNL8NBK1b7ZPQMtPN/UX20wBpSdKrxPZd8UG0tVLOYfl9vhCyLm+XZ2drQe5H/
Nvkz4uXaLv0WvMzy36TKPYNeLw5wMtTWbvVUjhRqLiFThjkhdW14nZTOZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKArP/ZiWIutQNXYibKqNTBOUCnlMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvb0NzXzltSllpNjFBMWRpSnNxbzFNRTVRS2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX0yMA0G
CSqGSIb3DQEBCwUAA4IBAQC1XSVCToW8+fkBY5biouZ23HYpZYD0p5PI3JOcsCW+
5Nv9LtfLu82JJ3vMyuLGdrD8VaDmq0OZYQSTmbb5IgyB1120SBbXiBXIJ1mhAPtB
/6Y4G6i2LYY/uRTKaxi6yD1vsfnR/FCSDVBwUu2XOTNEYgfhuHZa7huiYawiQBwX
6PmC9EWiKZr7E0zW511pWqOAwZkDDh7bTfLzybK4wvlfx32WVAkS6i1m8twqIvfP
vGEEyyiD/g95SN3mfxQPoya/GstFtOJykkXvH5zpQPnoXexgFYntiHayVoIaVNm7
PMSuDgyUzEJ0BVTSNG1kk6t2bRyky4ut7Y27+5LtT0Vy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org