Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/ohhla1nBJ8-H1Qf9bNTTYm0DQuk.roa
File: ohhla1nBJ8-H1Qf9bNTTYm0DQuk.roa (raw, json)
Hash identifier: J74gdfqHchsz9vfRPzQ5DRCsy3HVSKa9a8m8x84WqqQ=
Subject key identifier: A2:18:65:6B:59:C1:27:CF:87:D5:07:FD:6C:D4:D3:62:6D:03:42:E9
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 018CC94E2317D40F7D76C9054D25EB2B5473
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/ohhla1nBJ8-H1Qf9bNTTYm0DQuk.roa
Signing time: Tue 02 Jan 2024 08:33:10 +0000
ROA not before: Tue 02 Jan 2024 08:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200286
IP address blocks: 185.59.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:23:17:d4:0f:7d:76:c9:05:4d:25:eb:2b:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Jan 2 08:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a218656b59c127cf87d507fd6cd4d3626d0342e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:0f:e0:1e:ef:98:f4:73:5c:9d:5f:d6:81:
45:9d:fc:a5:c5:6b:14:76:29:ce:ec:38:f3:8d:f1:
e1:19:98:55:be:d8:ab:c3:b6:a1:82:28:d4:96:f6:
70:fc:a6:26:27:b8:7e:f8:5f:1d:d6:01:ca:ac:d3:
47:a7:4b:5b:d4:0a:80:ea:4a:ae:5a:2e:24:c4:e2:
02:8c:27:8f:0e:71:d3:9c:cf:97:de:f3:e6:5f:9b:
d7:60:2e:6c:2f:eb:bd:a5:18:15:8d:fb:ee:b0:e6:
99:de:5c:ca:1b:23:78:c5:4e:36:ae:d2:4a:44:13:
ef:a5:0c:89:7a:8f:9e:5c:9b:98:c7:9e:ec:0e:c4:
9a:5b:3a:4d:46:3f:27:9d:c3:47:82:68:c2:fc:18:
87:3b:67:d3:4a:1b:4e:f8:79:fc:87:43:07:9c:aa:
cb:18:64:a2:82:6b:9b:f6:4e:a3:41:97:b1:f7:f8:
dc:20:95:0b:c8:06:5a:32:0d:7b:67:ab:b3:cf:00:
84:0e:7c:a6:85:45:92:fc:38:89:53:21:3b:36:ac:
05:1b:9f:da:71:40:c5:61:a9:27:6d:a3:41:e0:63:
4f:5e:7b:42:1b:42:fc:01:68:e8:bc:85:73:2c:58:
87:ca:c6:58:ce:a6:2c:bb:3c:3f:99:bf:81:66:1b:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:65:6B:59:C1:27:CF:87:D5:07:FD:6C:D4:D3:62:6D:03:42:E9
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/ohhla1nBJ8-H1Qf9bNTTYm0DQuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:4c:aa:c6:86:03:dd:6b:c4:56:82:de:65:61:f3:9c:1f:79:
79:07:f0:67:da:4f:fc:6e:23:d3:79:6c:8d:2d:24:00:cb:fc:
e6:1f:30:44:2d:5b:d5:1a:f3:5f:bc:c4:cc:82:ba:36:5a:e2:
21:da:89:ef:87:6e:54:3f:46:cf:93:ee:a4:9c:01:5d:fa:64:
f0:e3:97:c1:cb:cd:1b:04:92:12:13:0e:5b:d8:83:98:46:86:
58:67:32:7a:86:68:a4:06:53:7b:8a:c0:ba:fd:b1:41:b8:ca:
70:3a:83:c2:c8:a8:6a:27:ec:1a:70:f9:7c:9e:47:ae:35:32:
46:aa:f5:1c:36:1e:7f:b2:69:07:91:ae:0f:3b:ff:2d:6e:92:
9f:ed:9f:c5:23:13:c3:aa:aa:50:87:23:fb:2f:b0:b4:13:b2:
3b:38:fa:04:64:c6:ce:06:db:f8:17:ae:9e:e5:15:d4:c2:fe:
15:62:58:d1:0a:92:3c:e1:50:58:af:8b:7a:aa:5d:ee:98:0c:
f3:35:d5:19:67:74:bf:de:17:2c:96:88:23:d1:cc:af:2c:80:
13:90:09:ff:f8:57:77:09:97:d4:18:6e:ff:0d:e6:15:c4:01:
16:67:6e:79:cd:c9:af:65:82:57:a5:d0:95:3e:ed:42:dc:08:
db:9e:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:21 2025 by rpki-client