Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/0OQYQwwWpYCHRSYhWvCV1YnhC_k.roa
File: 0OQYQwwWpYCHRSYhWvCV1YnhC_k.roa (raw, json)
Hash identifier: HidTJVbPlzqxwkRvyDqNvRJTtlrjcIcYHTttyEedKiI=
Subject key identifier: D0:E4:18:43:0C:16:A5:80:87:45:26:21:5A:F0:95:D5:89:E1:0B:F9
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 018B188DC508E7A5CDE057A5F1652C8593EF
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/0OQYQwwWpYCHRSYhWvCV1YnhC_k.roa
Signing time: Tue 10 Oct 2023 07:47:06 +0000
ROA not before: Tue 10 Oct 2023 07:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202787
IP address blocks: 185.137.10.0/24 maxlen: 24
185.137.8.0/24 maxlen: 24
185.137.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:8d:c5:08:e7:a5:cd:e0:57:a5:f1:65:2c:85:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Oct 10 07:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e418430c16a580874526215af095d589e10bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:8e:96:37:ea:8f:54:8d:f1:89:1e:c2:0a:
68:28:a0:fb:78:23:20:4c:8e:f7:80:5e:95:fd:ea:
63:45:f2:a3:9f:10:53:b5:73:10:dc:80:32:76:e5:
01:73:eb:a0:98:c1:d3:1b:00:d1:37:bd:65:ab:c2:
9e:8b:bc:20:ab:6e:5d:6e:fe:6f:ca:fa:ff:11:1f:
93:f8:33:fa:b2:f5:60:3c:43:94:5e:a6:be:97:91:
6f:da:e5:3c:ae:9f:6b:3f:c7:6a:8f:fd:97:27:e1:
71:df:99:6a:8c:0b:2c:9c:a3:6d:d8:8d:b4:a3:d5:
01:bc:42:32:ad:9d:53:13:7e:0b:7b:2b:16:20:f6:
44:4b:4c:2f:e0:69:5f:d9:ab:f1:d9:13:ff:7f:22:
aa:18:20:4a:b0:10:a3:64:a4:1d:6e:60:92:c0:ce:
2d:58:9c:8c:0f:f9:45:9a:07:0e:f9:15:e9:2a:a2:
63:4b:15:af:07:6f:0f:00:87:45:cb:2d:7d:c3:0b:
59:26:f2:b7:f6:f5:a5:80:14:44:97:44:4a:f2:1d:
9d:37:20:c7:d5:3c:c9:5e:60:4b:bb:e4:a6:25:ea:
1c:b6:77:b0:2f:8b:3e:78:42:22:8a:e7:e0:ba:87:
22:71:d6:90:02:fa:ae:2a:d6:60:64:96:3b:15:00:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:18:43:0C:16:A5:80:87:45:26:21:5A:F0:95:D5:89:E1:0B:F9
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/0OQYQwwWpYCHRSYhWvCV1YnhC_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.8.0-185.137.10.255
Signature Algorithm: sha256WithRSAEncryption
77:54:1b:b4:5a:21:52:63:27:c3:52:25:81:5d:b4:3b:46:6e:
c8:72:ee:59:54:60:c0:76:68:6a:f7:12:99:44:c3:bb:bd:47:
a9:4d:55:ea:7f:e3:2a:13:60:6b:1d:d5:1e:6d:8a:f7:1e:aa:
7b:4d:09:81:9c:5c:f9:84:63:2e:1a:5c:5b:25:de:d9:36:e6:
29:72:5e:af:0d:0b:60:a9:61:e2:9d:ee:b7:d5:f4:ae:34:1a:
76:ad:1e:02:39:03:56:8c:f9:e9:d0:07:21:4e:10:b7:f5:85:
ae:98:da:19:3b:3c:ad:41:02:8b:fb:cf:27:7b:af:57:a6:f2:
02:73:33:a0:74:99:5a:b0:ac:7a:50:9e:0d:b9:a5:3d:ab:2f:
fa:cc:b1:a1:a4:d0:1f:39:2f:60:e3:86:7f:bd:14:93:9e:6d:
9e:f4:ef:82:6e:78:bd:2c:cd:a0:41:04:d0:44:3c:ae:ac:8f:
89:63:9d:5b:c2:d0:d2:cc:0c:e4:fc:ff:18:63:9c:8c:9c:97:
d2:d9:62:e5:39:42:03:ba:fb:41:e6:95:ac:4c:3a:48:a2:23:
64:71:6d:92:c4:a6:80:1d:c5:e6:aa:81:e1:7a:de:34:55:24:
79:61:99:6e:90:76:b2:54:d9:b7:d3:66:da:b1:de:ea:20:3f:
2f:65:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:27 2024 by rpki-client on console-ams.rpki-client.org