Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/OQwH-Ic8S-uL1szI-zgAZjRiHOU.roa
File: OQwH-Ic8S-uL1szI-zgAZjRiHOU.roa (raw, json)
Hash identifier: qRIjRbc3ZIpLIHpgGo6WIoOjg8WuZfQTv4OoNotRRwc=
Subject key identifier: 39:0C:07:F8:87:3C:4B:EB:8B:D6:CC:C8:FB:38:00:66:34:62:1C:E5
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 0189034C92BE2BC42A8C04193FE5AE6A24E9
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/OQwH-Ic8S-uL1szI-zgAZjRiHOU.roa
Signing time: Wed 28 Jun 2023 18:38:17 +0000
ROA not before: Wed 28 Jun 2023 18:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213081
IP address blocks: 148.222.248.0/22 maxlen: 24
91.194.139.0/24 maxlen: 24
147.78.194.0/23 maxlen: 24
185.203.114.0/23 maxlen: 23
2a0a:e5c0::/29 maxlen: 48
2a09:2940::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:03:4c:92:be:2b:c4:2a:8c:04:19:3f:e5:ae:6a:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Jun 28 18:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=390c07f8873c4beb8bd6ccc8fb38006634621ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:75:fe:a1:28:fd:60:4e:f4:10:1c:97:69:
43:5c:12:39:22:02:45:69:95:1a:ef:2c:11:a5:76:
f4:1a:d4:2a:2c:e2:cc:86:69:de:61:68:f3:98:f3:
2d:ff:ef:eb:a4:e5:e2:75:09:44:ea:30:5a:22:a9:
f9:32:93:5e:1a:63:e7:9e:f2:d2:4a:9a:61:02:43:
99:6e:cb:ce:36:fc:63:9d:53:dc:fc:fe:7c:83:43:
d3:ef:ae:ad:93:be:ab:2a:fd:5f:1b:84:a7:63:5e:
3f:d0:db:a6:18:af:66:de:9e:e6:84:38:a8:4c:8d:
c5:e6:73:f2:37:8d:d9:1b:36:df:83:6e:1f:21:05:
b5:38:84:30:74:38:c0:c7:4e:94:55:97:e6:26:1e:
72:1d:90:fc:f8:46:b7:88:95:61:e3:9a:3f:6e:06:
64:b8:de:38:13:1d:f2:2e:8b:15:9e:3f:18:0b:b6:
d8:e4:14:fc:80:9b:f5:6f:df:42:b7:85:ee:40:91:
ba:9c:67:20:41:02:1b:8b:e3:2f:45:07:70:ac:4b:
01:c6:64:82:7b:13:85:de:d7:1b:ca:23:c8:4c:28:
7f:c7:c4:d5:8f:74:0a:14:93:57:db:32:11:8d:5e:
84:42:3a:72:21:15:af:74:84:5a:4c:30:77:ed:70:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0C:07:F8:87:3C:4B:EB:8B:D6:CC:C8:FB:38:00:66:34:62:1C:E5
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/OQwH-Ic8S-uL1szI-zgAZjRiHOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.194.0/23
148.222.248.0/22
185.203.114.0/23
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
12:fb:07:98:ee:fa:ad:57:48:dd:c2:32:a8:e0:9c:0d:26:b2:
63:53:c8:08:29:0f:e8:5f:ba:cb:e2:7c:31:20:0b:9b:92:13:
0b:9a:ba:11:6f:3b:a8:5e:05:c7:0d:b4:26:48:35:c9:9e:84:
dd:46:f7:4f:11:ca:b5:c9:58:60:eb:3c:60:18:6f:ad:e5:29:
b6:a3:5e:c9:12:ec:33:03:cc:a2:b2:3d:b2:df:8a:99:3a:04:
8a:7a:70:50:20:eb:94:04:bd:b5:52:da:29:f8:65:5b:9c:cf:
39:83:a1:ec:eb:fd:dd:db:5e:24:bd:76:19:fb:78:48:12:38:
13:b9:70:54:53:11:1d:af:b4:be:ba:4c:7c:df:46:e8:4e:b7:
25:89:f6:8f:56:48:9c:ac:c7:cf:ae:7c:17:13:9e:a3:ee:1e:
1c:ee:09:69:f0:b9:33:1c:e3:02:44:50:5d:97:fb:01:36:37:
45:d2:11:9a:a1:99:86:70:f5:42:ef:d3:b4:f8:d7:b6:69:a2:
6b:81:42:42:bb:cc:36:f6:93:0e:f6:ef:63:89:9e:d2:b8:09:
25:fd:fc:c7:2f:a6:54:66:20:e4:70:3f:79:36:81:e5:6e:de:
66:02:47:c6:2f:1a:58:96:9a:7c:d3:bd:51:3e:66:c4:2a:aa:
14:95:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:34 2024 by rpki-client on console-ams.rpki-client.org