Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OCZtL2z0T9knx3Sz06CMQINEBaQ.roa
File: OCZtL2z0T9knx3Sz06CMQINEBaQ.roa (raw, json)
Hash identifier: dUGJ5Zlok/64Wk/lnhwh6hB4E/oX5AnS4Y+pZNW+KtM=
Subject key identifier: 38:26:6D:2F:6C:F4:4F:D9:27:C7:74:B3:D3:A0:8C:40:83:44:05:A4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A02FF11CC0956DC53397BAD5877ED8CC4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OCZtL2z0T9knx3Sz06CMQINEBaQ.roa
Signing time: Thu 17 Aug 2023 10:16:25 +0000
ROA not before: Thu 17 Aug 2023 10:16:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49532
IP address blocks: 185.218.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 11:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:ff:11:cc:09:56:dc:53:39:7b:ad:58:77:ed:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 17 10:16:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38266d2f6cf44fd927c774b3d3a08c40834405a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:74:6d:bd:81:e8:61:3c:50:de:0b:5d:90:
74:08:df:a3:b5:82:66:2f:4b:b6:ae:be:a4:fe:04:
24:53:22:7e:44:89:db:93:b2:0a:ca:0e:8c:6b:3d:
24:8b:b9:0c:c2:dc:c2:39:e1:b1:39:7d:ec:12:75:
9b:c5:ed:6a:f3:70:0f:c7:cb:79:37:d8:26:1f:ce:
77:17:43:eb:a3:98:2c:cb:fa:92:61:d4:63:ad:d3:
e6:d3:6c:40:6b:52:cf:16:2c:55:fc:9b:82:e4:a3:
1e:16:35:67:33:62:1e:b4:20:50:8d:e7:71:3d:33:
0a:f0:12:20:9f:fe:5c:7a:b1:dc:83:80:48:0f:a6:
cd:74:92:5e:50:70:07:2b:4e:51:aa:10:81:b2:a2:
31:87:36:51:67:71:69:50:82:9f:ea:b8:2f:8a:1d:
28:9f:6b:b1:4e:fd:e0:49:d6:df:fe:91:41:97:78:
db:97:32:49:19:d9:98:c9:a8:d9:1b:24:d3:f5:38:
31:f2:46:a1:13:40:c8:8f:34:b0:93:87:25:83:57:
c8:98:57:8e:4a:aa:a7:5f:49:57:e6:26:3a:d9:46:
d1:c9:4f:7a:13:2b:80:22:aa:66:3c:fc:97:c2:85:
94:91:6b:db:8a:16:6b:db:a3:6d:42:ae:1b:4a:0c:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:6D:2F:6C:F4:4F:D9:27:C7:74:B3:D3:A0:8C:40:83:44:05:A4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OCZtL2z0T9knx3Sz06CMQINEBaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6a:0f:27:31:18:08:f2:22:bf:04:d1:93:1d:e5:c6:9c:2a:
9d:61:2a:9e:af:cd:b4:ce:36:93:72:ec:92:99:e4:1b:d2:0c:
27:c6:56:54:fd:0e:74:9b:05:de:ab:f0:6e:90:0a:20:fa:d0:
90:81:f4:af:cf:29:dc:fe:52:41:6c:b4:86:cd:b6:c8:4e:76:
13:8e:71:71:36:62:03:8d:46:5b:49:59:17:0c:ed:ad:81:f6:
fd:43:04:9e:cd:cc:2b:55:48:29:54:b8:90:86:4a:ea:48:56:
92:01:43:6f:96:92:ce:16:c5:f1:21:f0:bc:16:a4:4c:8a:a0:
8a:7d:4a:26:d0:5e:72:b4:0c:65:5e:56:17:8a:52:4a:13:e6:
8d:ed:e9:63:c2:48:f1:aa:20:b6:34:b0:27:e0:76:9c:cd:ef:
fa:02:f9:9c:1d:7f:70:ac:cc:44:53:1b:d6:c6:b0:9a:b3:93:
8b:d2:cf:44:1e:dd:96:0a:c0:04:47:1c:a7:10:4a:a1:51:20:
69:c9:8c:78:a1:12:5a:48:fc:42:aa:fa:fe:f9:75:4a:32:ed:
61:ac:fd:46:93:18:d7:a9:ef:40:fd:83:6a:d0:32:38:7e:54:
db:67:f6:a0:09:dd:19:b0:cf:e6:e5:48:5f:f4:a6:2c:2c:5a:
d5:d2:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org