Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OjSPAli23pBYLbCa8rYJyBr-SdQ.roa
File: OjSPAli23pBYLbCa8rYJyBr-SdQ.roa (raw, json)
Hash identifier: md+32NlRXeoDFF/6d8cKswdEYAKQkMkYXZfaEosbmYo=
Subject key identifier: 3A:34:8F:02:58:B6:DE:90:58:2D:B0:9A:F2:B6:09:C8:1A:FE:49:D4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AE087079D984429DBCD18977168A07A38
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OjSPAli23pBYLbCa8rYJyBr-SdQ.roa
Signing time: Fri 29 Sep 2023 10:41:00 +0000
ROA not before: Fri 29 Sep 2023 10:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198246
IP address blocks: 194.26.100.0/24 maxlen: 24
185.230.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:87:07:9d:98:44:29:db:cd:18:97:71:68:a0:7a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 29 10:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a348f0258b6de90582db09af2b609c81afe49d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:fc:d2:74:ff:a1:ac:f0:ee:5e:c0:f2:94:
d0:1d:04:53:82:14:79:3d:2b:d1:33:22:42:ed:63:
14:55:18:e2:69:2c:f5:e5:9b:f7:2b:fd:a7:0b:54:
99:ce:bd:b2:cd:61:76:84:f5:14:70:c1:70:87:8f:
d0:2c:9b:49:d2:b3:f1:4e:81:1d:4c:3b:e6:ed:f0:
25:38:01:e3:62:6b:6c:66:b8:70:25:62:95:6b:85:
bb:e4:1c:72:b8:f8:9e:7f:f1:10:7b:2f:b8:44:c7:
95:81:ff:61:e7:fe:af:d5:7e:cf:41:d9:8a:7c:6c:
a7:9c:f7:33:d4:79:9c:ef:11:c5:76:f6:87:9f:6f:
a2:19:24:bb:33:0a:24:ed:ce:07:da:cf:80:f5:7c:
f0:6b:26:85:37:0b:d9:4e:d5:25:44:2c:b3:78:75:
f8:2c:5b:0b:2e:ca:5f:35:96:11:f6:e3:a7:af:20:
69:b4:a2:d6:e8:e9:2c:6c:26:3d:cb:d4:65:a7:11:
3d:48:d0:05:09:f6:df:37:aa:2d:48:8d:1e:a6:db:
10:df:b6:98:41:b9:2b:49:e1:2d:e1:3b:19:15:df:
56:09:77:f8:68:a1:a6:46:3d:6f:ad:19:0c:63:89:
da:46:bd:14:56:98:08:8b:b6:98:c0:61:ae:a0:a2:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:8F:02:58:B6:DE:90:58:2D:B0:9A:F2:B6:09:C8:1A:FE:49:D4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OjSPAli23pBYLbCa8rYJyBr-SdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.55.0/24
194.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:85:02:ea:0b:03:11:e8:42:7e:67:07:2d:f0:b6:1b:db:44:
59:24:fa:9b:bd:50:f8:21:cd:32:3d:f1:82:e5:10:bc:43:c8:
b3:87:84:21:52:13:12:16:e0:ab:e8:96:2a:38:21:4f:62:d5:
84:7a:2d:df:0a:4b:1c:63:7d:e6:e7:09:75:46:05:31:92:fc:
70:33:fa:0b:93:fd:8b:28:44:54:48:19:07:9b:a6:8c:d4:9c:
02:dd:e8:27:f5:73:a0:95:2b:32:12:f2:13:76:80:0c:e2:fd:
cf:f2:00:43:e4:2e:66:b6:96:19:b5:43:04:66:f5:c4:df:5b:
29:a4:f5:ae:1d:e9:ea:f2:8e:15:56:a3:5f:49:81:29:7c:eb:
93:b5:a0:90:d4:6d:5c:a0:9d:3e:13:2a:9f:0f:67:70:e0:79:
f3:69:1c:fa:ed:0c:c9:2c:43:24:d3:6b:f9:bc:1c:27:00:e0:
46:80:83:71:58:d3:df:5f:4b:27:15:7c:21:c8:78:5e:ae:90:
f7:a3:77:7a:6f:eb:d6:a4:68:83:16:41:c4:6a:4d:3f:03:3f:
56:00:01:68:b6:7b:62:d3:0d:0a:d7:b4:82:e0:96:04:66:a9:
5f:f6:6a:13:bd:ac:de:97:28:21:60:e4:7f:20:22:61:5e:2e:
d9:a2:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org