Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/OQjihFnkzCrHxq1Sur5ngLfAa-c.roa
File: OQjihFnkzCrHxq1Sur5ngLfAa-c.roa (raw, json)
Hash identifier: ftW+5+9i54ArtemzdhuEcB0qhrUOhp+IiBztvjDFuu4=
Subject key identifier: 39:08:E2:84:59:E4:CC:2A:C7:C6:AD:52:BA:BE:67:80:B7:C0:6B:E7
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 018630A1998F3160B9D7B1E79203163C6EFF
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/OQjihFnkzCrHxq1Sur5ngLfAa-c.roa
Signing time: Wed 08 Feb 2023 10:45:42 +0000
ROA not before: Wed 08 Feb 2023 10:45:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201073
IP address blocks: 185.86.206.0/24 maxlen: 24
2a05:bb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 28 Sep 2023 12:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:a1:99:8f:31:60:b9:d7:b1:e7:92:03:16:3c:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Feb 8 10:45:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3908e28459e4cc2ac7c6ad52babe6780b7c06be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:94:67:64:ad:7c:57:b7:1b:01:88:3d:f2:
4c:ae:6f:e9:24:10:65:ec:34:2d:81:51:3f:cc:22:
9e:63:76:77:ef:32:0b:03:56:b5:fd:66:8c:59:00:
fb:f7:48:18:47:cd:b2:2d:f6:b7:70:a1:56:3a:a1:
8e:04:d2:7d:f0:11:2c:d6:4b:20:6a:4b:7c:e0:30:
be:fc:c0:36:55:15:1a:f0:f3:94:b1:7d:ca:b4:7d:
31:5d:9c:90:c9:82:4f:a9:e9:9b:ba:53:ee:6a:78:
7b:47:a3:6f:9a:1b:bd:21:78:1a:a3:b7:0e:08:97:
74:5e:77:b9:87:fd:b2:53:c9:db:75:6e:50:8c:31:
51:63:bb:59:a5:e8:8e:f3:8c:25:6b:3c:06:0a:26:
51:59:95:b1:c9:0b:1e:a0:a8:b7:ee:14:93:91:34:
2a:1d:74:4f:02:9b:0e:7d:33:c9:42:d5:61:09:c5:
e3:4f:cd:15:fb:66:6c:4b:8c:51:af:86:1c:85:4c:
75:7d:ea:90:9d:79:ca:93:14:53:d3:f6:94:84:59:
2d:bf:83:e0:d9:db:20:81:64:c9:cd:74:b8:83:a9:
8f:d2:55:9d:70:35:1b:ab:c6:6c:d4:bb:24:3b:81:
25:74:ae:c4:ed:23:d7:fa:9e:da:05:d5:91:ec:c9:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:E2:84:59:E4:CC:2A:C7:C6:AD:52:BA:BE:67:80:B7:C0:6B:E7
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/OQjihFnkzCrHxq1Sur5ngLfAa-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.206.0/24
IPv6:
2a05:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:ee:6f:cd:1a:0f:6d:65:a7:7a:0c:21:dc:d5:ed:71:93:7b:
f9:61:96:a0:9c:f7:74:21:91:de:2a:f1:1f:9a:a6:6b:8c:8c:
a9:a8:02:4f:2b:77:5a:81:b1:54:6e:c5:4c:96:ef:f6:50:c9:
3c:d7:76:8e:f8:b6:c7:80:0a:04:12:a3:26:9d:f4:32:2d:f4:
e8:b0:0f:0c:a2:05:ba:58:49:22:b6:63:89:96:5c:48:3b:d8:
23:ac:13:e6:82:04:70:e6:10:7d:cd:f2:03:15:e6:9d:19:68:
f1:4a:8e:1e:19:c6:18:34:69:73:cc:6f:dc:00:72:f0:40:b9:
fc:16:1b:c3:06:f6:2b:38:bb:d4:79:39:e7:5a:30:19:87:76:
a9:49:58:d3:1f:80:24:da:51:40:d5:b4:2f:93:35:35:f6:27:
a1:d8:9b:1f:8b:3f:51:7b:bf:4d:ba:46:3e:c9:3a:f7:9f:34:
47:ba:ea:97:6f:29:ab:83:fe:78:80:ba:32:6f:08:60:68:d3:
45:47:01:ef:08:d1:be:9c:40:ea:f6:3f:5a:8f:fc:46:08:bd:
0d:b1:6e:aa:e1:78:b7:f7:58:6e:f9:4f:15:9f:f4:bb:f3:c6:
46:ab:ef:63:b7:f1:d5:8f:31:01:6b:bc:53:5a:71:fb:94:f9:
19:63:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:53 2024 by rpki-client on console-fra.rpki-client.org