Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OHtZ7l82WtYLLndi533eogvYOlY.roa
File: OHtZ7l82WtYLLndi533eogvYOlY.roa (raw, json)
Hash identifier: PhDytLDswa/+5DpjT626O03hdizx1OS0HGrzztAG158=
Subject key identifier: 38:7B:59:EE:5F:36:5A:D6:0B:2E:77:62:E7:7D:DE:A2:0B:D8:3A:56
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018ABE1AAB91317494D210A722B5D2DB4B06
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OHtZ7l82WtYLLndi533eogvYOlY.roa
Signing time: Fri 22 Sep 2023 18:15:33 +0000
ROA not before: Fri 22 Sep 2023 18:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.222.29.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.194.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Sep 2023 10:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:1a:ab:91:31:74:94:d2:10:a7:22:b5:d2:db:4b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 22 18:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=387b59ee5f365ad60b2e7762e77ddea20bd83a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:2c:26:fd:d9:63:2d:d9:7f:05:7e:af:ff:
1d:ed:04:7f:5e:7d:b6:00:4c:81:9b:51:0e:bf:0a:
bf:97:84:f4:c9:15:01:88:31:bf:be:3d:bd:c7:83:
50:7c:fb:2f:1e:29:a1:77:c9:7d:c1:99:64:29:d8:
e4:f1:83:fe:67:16:4d:38:7a:17:c2:e5:98:59:ba:
7e:7a:37:eb:59:08:2c:60:b9:cf:49:86:c1:99:9f:
e3:ee:7c:83:05:35:c4:d1:40:2d:f9:f5:96:e8:64:
53:9e:a0:1c:24:9a:32:cc:4d:51:38:75:82:f8:9f:
3c:77:31:fb:62:25:39:ca:65:f5:39:dc:09:8c:19:
65:3d:91:b7:c0:d8:7a:58:aa:32:bd:47:d0:59:83:
f6:d6:26:47:10:e2:da:9e:b6:56:28:8c:19:c5:eb:
1e:a9:2f:3b:a6:e3:05:81:eb:71:3e:29:a5:36:ab:
b3:d1:df:1c:bb:2f:72:f5:64:31:24:9e:75:e0:fd:
9b:80:21:7a:2d:bf:66:ef:8d:73:21:33:f3:62:bb:
2f:27:d9:a5:3b:bb:c0:cb:34:ae:de:f7:3a:a4:59:
63:cb:2a:36:eb:08:13:62:9a:83:51:71:39:47:88:
b3:95:6d:76:83:44:13:02:63:80:e6:78:6a:a4:f4:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:59:EE:5F:36:5A:D6:0B:2E:77:62:E7:7D:DE:A2:0B:D8:3A:56
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OHtZ7l82WtYLLndi533eogvYOlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.73.0/24
185.222.29.0/24
185.246.112.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b8:6f:b2:2d:14:5d:1d:99:5e:bd:2b:79:33:b7:b6:7a:fb:
62:c0:01:d1:6d:65:c5:53:51:92:8f:05:ae:30:82:a7:df:96:
80:82:25:98:f8:c6:93:16:99:e6:a5:a9:fd:b0:44:f3:d2:4c:
e3:78:21:85:10:ab:b4:8a:30:86:d5:af:49:3c:a7:60:8b:16:
ba:07:21:44:35:5d:ae:f0:a5:32:2a:06:84:3a:0e:f7:fe:8d:
a5:32:b7:d1:27:6c:8b:05:b5:e2:65:1d:e8:4b:2f:6a:2b:60:
eb:66:29:b9:63:e9:23:b9:6e:0a:41:43:e8:2f:20:97:bb:1b:
39:fb:f3:ff:9d:ff:73:2f:28:6b:37:43:a4:0c:78:e9:20:b7:
d8:07:7e:a0:a7:f8:a3:51:8e:a6:ad:df:fd:2b:3c:e4:72:1c:
5e:f1:81:2e:ec:7b:9a:46:90:b5:f2:b0:37:42:be:b1:78:f5:
1b:e4:cb:7a:4f:49:10:a1:ed:78:f4:e0:2d:52:6d:d4:e6:ad:
43:de:7f:bc:3a:7e:cf:f6:36:04:bd:b7:d0:cc:0c:4c:92:52:
0a:07:8b:df:e8:9e:74:3d:7e:78:e4:40:a4:43:4e:bd:5b:cc:
c0:26:03:94:9d:c1:d5:5f:bc:e9:26:1c:24:fa:e2:0a:26:42:
6d:ae:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org