Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OlGufD8ePl5bsMSAWcuf8dzxZyo.roa
File: OlGufD8ePl5bsMSAWcuf8dzxZyo.roa (raw, json)
Hash identifier: JvN3Xj3W/2Kt3RYXPVXnzaRfoTLAJHUjzDxlOljh0xE=
Subject key identifier: 3A:51:AE:7C:3F:1E:3E:5E:5B:B0:C4:80:59:CB:9F:F1:DC:F1:67:2A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B1E22C0BB5FF5BFBA74035CB7C5D5FD97
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OlGufD8ePl5bsMSAWcuf8dzxZyo.roa
Signing time: Wed 11 Oct 2023 09:47:55 +0000
ROA not before: Wed 11 Oct 2023 09:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 185.223.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:22:c0:bb:5f:f5:bf:ba:74:03:5c:b7:c5:d5:fd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 09:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a51ae7c3f1e3e5e5bb0c48059cb9ff1dcf1672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:fb:4b:6f:36:fc:49:13:7c:f3:41:84:7f:
f8:c3:6b:ae:7c:65:e9:e0:fe:30:1e:0c:c0:0d:d2:
f5:b4:4e:8b:66:34:26:3b:71:8e:66:59:e6:51:7e:
f4:12:58:27:1a:fe:62:b7:a7:3a:72:96:3f:42:85:
72:0d:97:9a:b6:89:96:28:b2:78:50:a6:53:ba:a1:
4c:98:7a:1a:48:ca:2a:2c:b6:6f:ee:f9:b9:91:69:
be:08:fb:06:20:4a:b6:eb:91:72:b4:6c:a5:22:b7:
e9:4f:09:86:77:e6:9d:53:b5:92:07:62:6a:d3:4f:
10:09:9c:47:70:57:e1:b0:dc:6a:13:9b:e1:2d:85:
62:d7:0f:ba:af:84:ba:0e:36:07:e5:e8:40:27:6c:
a5:51:51:93:1e:ad:59:f7:97:85:70:a8:40:47:32:
32:d1:d7:05:31:0a:16:f1:92:82:5f:25:9d:89:c9:
0b:df:dc:d5:65:98:71:54:83:41:2f:27:34:0e:ca:
bc:5a:76:44:6d:d6:d6:1c:ee:f8:3c:08:cc:3b:4d:
ab:b9:6a:76:44:bc:75:f6:15:49:71:6d:27:f6:41:
89:c9:bb:06:5b:05:64:78:f1:2d:a5:4f:36:aa:35:
68:9d:f3:08:5f:51:1b:ed:8e:63:ef:53:ce:7a:2e:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:AE:7C:3F:1E:3E:5E:5B:B0:C4:80:59:CB:9F:F1:DC:F1:67:2A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OlGufD8ePl5bsMSAWcuf8dzxZyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:39:10:bb:9a:4f:89:84:4a:94:44:57:e7:ba:dc:2a:99:71:
40:dc:43:e5:68:8d:f0:38:e2:b9:a7:c1:57:4a:7b:22:24:3f:
0e:cb:fc:60:a9:d1:9f:35:f2:be:71:42:c7:7b:9a:fc:f5:2a:
81:c5:61:b9:a9:7a:51:7b:ba:b9:e3:b0:ad:8a:40:eb:a2:d8:
fd:6e:36:16:12:25:00:74:99:cd:46:8f:15:b1:3c:e1:82:13:
9c:7d:77:51:58:44:07:75:e8:58:9d:36:81:a0:ce:38:70:77:
af:de:35:54:d7:a4:b9:7d:ee:29:05:f4:a3:ac:7c:ef:8b:6d:
74:99:97:4b:dc:4d:02:42:3e:b7:df:06:ed:1d:4c:4d:27:fe:
21:de:5c:af:77:58:da:9b:1f:68:24:25:0d:51:b6:e6:0c:4d:
72:ac:8f:93:3d:cd:e1:2e:03:25:72:a1:1f:53:fa:75:cf:55:
a7:c1:e2:2c:7e:a7:ee:e6:43:31:ed:af:c4:7d:e1:34:27:49:
07:d7:9e:b4:02:f1:90:d4:95:c6:e1:f5:4c:6a:a6:bd:f7:7a:
93:26:d3:e7:f4:36:36:ca:83:09:aa:03:e6:12:ba:59:d9:c5:
64:f6:35:1a:8f:86:37:c0:9b:7d:a2:6a:73:d9:6a:39:7b:d6:
96:c8:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org