Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/OC4-Zo_4nfT5VHLw7QX9drIMQ9E.roa
File: OC4-Zo_4nfT5VHLw7QX9drIMQ9E.roa (raw, json)
Hash identifier: PIQ4EKsnIoUEBenZg7dizLKWCScFr7dq/QZ1SXwnhok=
Subject key identifier: 38:2E:3E:66:8F:F8:9D:F4:F9:54:72:F0:ED:05:FD:76:B2:0C:43:D1
Certificate issuer: /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial: 018CC34946046E5EB29EAC19B0C319DA558F
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/OC4-Zo_4nfT5VHLw7QX9drIMQ9E.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29695
IP address blocks: 185.197.211.0/24 maxlen: 24
2a0c:1bc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 14 Jan 2024 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:04:6e:5e:b2:9e:ac:19:b0:c3:19:da:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=382e3e668ff89df4f95472f0ed05fd76b20c43d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:ae:bb:f0:1e:1e:6d:f0:68:5a:06:b5:78:
78:4c:b4:d2:f8:86:d7:b2:32:31:53:44:ad:6a:01:
e9:a3:5b:c0:09:69:9b:05:f9:cc:a8:16:1e:f0:18:
8e:b6:98:ce:a8:f3:52:5e:94:45:e8:e1:44:67:7b:
d3:92:c5:15:b7:b3:57:52:24:00:75:cb:39:4e:61:
3f:e2:b8:36:01:ec:f6:97:66:55:15:cc:34:d2:38:
43:33:e9:99:1a:7e:e7:4a:49:83:22:47:a8:cb:40:
c2:2f:d1:0a:3e:3c:0b:82:2d:2f:34:7d:e3:3a:5d:
48:a4:08:eb:4e:84:81:d2:23:59:33:4f:9e:cd:c0:
cb:e1:ca:c0:80:b5:f6:83:7b:58:4a:05:db:1e:7e:
fd:cb:05:1a:69:fc:92:3c:b3:95:55:bf:fd:7d:47:
8c:11:7b:58:b2:23:42:35:dc:b9:f1:f2:72:f5:ee:
03:1b:76:f7:52:04:a1:67:8d:cc:b9:14:50:e9:c1:
8b:d1:b2:4d:53:76:32:ea:36:26:c3:71:56:64:4a:
dc:98:62:25:3a:86:a5:1b:71:3a:27:1c:4b:3b:d7:
8a:39:89:4a:22:8f:65:09:56:d6:2e:6a:f6:eb:dd:
de:dc:32:4f:7f:1b:9f:00:7e:8d:68:06:52:da:99:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:3E:66:8F:F8:9D:F4:F9:54:72:F0:ED:05:FD:76:B2:0C:43:D1
X509v3 Authority Key Identifier:
keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/OC4-Zo_4nfT5VHLw7QX9drIMQ9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.211.0/24
IPv6:
2a0c:1bc0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ac:ea:99:a9:a3:b2:16:15:93:87:be:b0:8d:00:f8:12:1b:
89:7f:fe:99:e9:59:df:10:d7:08:d6:46:c3:bf:0e:9c:9a:b0:
71:79:0c:2a:74:9b:e9:09:c9:ed:30:29:99:b1:f0:20:c9:82:
bc:a8:e6:9a:5e:65:e7:69:77:70:60:94:ce:a8:97:d1:0c:b0:
35:e7:24:db:41:b0:6e:0e:88:ab:6c:d6:dd:1b:22:38:c4:4f:
a6:b1:96:2b:73:de:3e:29:bb:b7:d8:f6:dd:4c:7d:46:cc:9f:
c0:64:a4:d9:f2:ad:25:f7:13:ca:e3:e1:fc:98:ee:1a:5a:18:
83:c3:27:9d:00:e2:e6:83:41:c2:2c:48:f1:05:03:ce:8d:e7:
a6:0d:5f:43:74:3e:f3:b5:da:d9:94:26:b5:a7:c2:33:0a:e0:
57:57:24:86:26:9e:ba:04:a2:cd:45:2b:a6:e3:1b:2a:a9:12:
86:db:28:96:f8:dc:ec:44:42:f6:c9:63:17:7f:3e:9a:7b:36:
96:cf:02:ec:59:56:74:31:01:72:bf:e6:6f:3d:ef:eb:36:84:
c1:69:7c:ed:67:60:8b:b9:e0:32:9d:88:13:86:32:09:ec:5d:
0c:8c:c4:ff:7f:ff:b8:ed:a8:4c:38:0f:72:dc:80:5f:19:69:
79:0c:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:56 2024 by rpki-client on console-fra.rpki-client.org