Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ojkdv0To4a-OHQjrEA3eO8NhS3s.roa
File: ojkdv0To4a-OHQjrEA3eO8NhS3s.roa (raw, json)
Hash identifier: vbwdcJuvFLhV4bIiSLY/DE2wgIhfa7J2g1nwIYETSPc=
Subject key identifier: A2:39:1D:BF:44:E8:E1:AF:8E:1D:08:EB:10:0D:DE:3B:C3:61:4B:7B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F0B0D9D9832B9F3FF32FDEDAC751
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ojkdv0To4a-OHQjrEA3eO8NhS3s.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207879
IP address blocks: 85.187.45.0/24 maxlen: 24
185.242.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f0:b0:d9:d9:83:2b:9f:3f:f3:2f:de:da:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2391dbf44e8e1af8e1d08eb100dde3bc3614b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:b8:df:b7:3b:c5:71:bd:a2:12:15:13:2b:
11:ad:6e:fd:e0:9d:da:94:d5:8c:aa:5c:44:f9:7e:
ce:dc:c8:e8:18:a0:5c:a2:84:76:17:c1:73:05:bc:
e9:a7:0d:a2:81:52:22:7f:85:5d:43:43:08:7d:65:
eb:0f:9e:09:79:d8:ac:f6:ab:e8:fe:6f:f7:6e:cf:
73:a4:3c:00:df:22:f7:5c:3c:67:69:44:90:e1:53:
f8:34:28:94:f8:29:47:15:ff:b6:b5:a0:6f:88:3e:
28:f2:97:d6:8b:ab:28:da:79:ff:2f:e4:5d:e5:f0:
77:ec:cc:01:4e:c5:d8:c4:c4:21:c3:3f:ca:17:1e:
c8:8a:53:73:37:0c:ab:30:9a:2e:1d:8c:dd:20:d2:
98:30:71:1c:76:2a:ba:06:51:ad:2a:ca:21:2e:82:
e1:06:73:3c:ad:b2:0e:1e:98:f6:1f:19:10:20:df:
dd:98:ee:6c:45:98:f0:11:eb:1a:fc:58:29:45:85:
0e:9d:b5:e6:7d:16:f5:be:4f:5e:2f:02:98:53:20:
c3:d4:1e:b8:fb:2c:e4:0b:6f:ea:e7:bd:70:39:43:
0e:1d:a2:d0:06:be:ac:ae:61:4c:6f:90:7d:04:07:
85:d6:68:64:e9:25:2a:3c:02:68:04:1b:36:f9:24:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:1D:BF:44:E8:E1:AF:8E:1D:08:EB:10:0D:DE:3B:C3:61:4B:7B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ojkdv0To4a-OHQjrEA3eO8NhS3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
185.242.171.0/24
Signature Algorithm: sha256WithRSAEncryption
19:87:15:87:1c:55:00:36:d6:89:b7:12:ef:71:e5:7a:b2:1b:
ad:d1:eb:e1:00:c3:ab:10:03:6c:64:44:d2:5c:0a:d9:f3:08:
0c:e0:19:bb:f5:57:cd:2c:83:d1:8e:1b:8b:cd:d2:91:21:b3:
a2:b5:a1:0f:0a:75:ea:2f:ab:b4:ad:80:25:9e:a6:f7:b5:b9:
b1:53:45:dc:9e:9c:9d:3b:fe:5e:99:e0:30:52:47:81:04:95:
7d:b3:81:e1:9d:6a:91:7d:2a:c6:a3:e3:a7:af:d7:47:f0:89:
c1:d1:56:fc:5f:1c:02:fc:a1:ec:89:17:3a:1d:10:dc:80:63:
64:24:14:f2:89:f1:bc:51:1f:c1:19:99:72:cd:c8:ea:5d:60:
e4:b7:bf:94:97:c2:76:56:b2:95:5c:63:d4:21:31:fc:12:b8:
97:ac:28:56:d2:5a:cf:7b:0d:11:38:ff:45:d3:7c:42:5c:49:
a9:7a:ec:b7:f2:b1:38:bd:cd:2e:7f:2a:27:fd:7a:3e:87:bc:
bc:0b:7a:6e:32:67:0a:49:a3:80:18:7f:f2:4a:c2:0d:0b:f4:
f1:cc:be:2b:b3:a7:2d:ec:55:bb:c6:9f:fa:8a:2f:d5:8d:b7:
7d:00:eb:80:0e:80:6b:19:79:80:b5:d6:12:b5:e1:08:db:e8:
82:40:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org