Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/O3CmzTqsvzI97jzL0BH2_3ZNWRQ.roa
File: O3CmzTqsvzI97jzL0BH2_3ZNWRQ.roa (raw, json)
Hash identifier: H1eHAziKoJ5I5zfiZTQqeiWfAt24Gnq6DXniM+pnAmE=
Subject key identifier: 3B:70:A6:CD:3A:AC:BF:32:3D:EE:3C:CB:D0:11:F6:FF:76:4D:59:14
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 018D6A08C5F4DD4AC90BC68E53A94066C704
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/O3CmzTqsvzI97jzL0BH2_3ZNWRQ.roa
Signing time: Fri 02 Feb 2024 13:36:16 +0000
ROA not before: Fri 02 Feb 2024 13:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215586
IP address blocks: 185.118.116.0/24 maxlen: 24
2a14:6c80::/48 maxlen: 48
2a14:6c80:1::/48 maxlen: 48
2a14:6c80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Feb 2024 11:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:08:c5:f4:dd:4a:c9:0b:c6:8e:53:a9:40:66:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Feb 2 13:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b70a6cd3aacbf323dee3ccbd011f6ff764d5914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:cd:aa:f5:1a:be:56:35:e2:88:ac:6b:88:
17:09:51:bd:3e:a4:2c:e8:80:af:a8:14:bd:d6:bd:
28:95:b7:48:3b:2d:de:75:03:c6:f7:bd:7b:8c:5d:
0f:ab:55:41:29:b9:89:e8:fc:f8:1a:f7:86:33:2d:
0f:80:09:dd:12:c5:3e:e0:b8:c7:bc:00:bf:24:86:
f9:bc:24:82:db:fc:c6:96:5a:62:3f:3e:10:23:96:
d2:ec:72:54:3c:4e:40:78:23:3a:53:99:c8:89:3e:
56:9c:bd:17:37:67:c8:e7:a0:f2:bc:5a:0b:23:a7:
f1:14:e3:75:b1:f7:c7:c6:86:20:df:70:9e:5c:e5:
b4:63:50:e3:fa:8e:06:8c:67:db:fa:b8:38:6b:b5:
e5:f9:97:9e:3f:f0:1d:86:72:1a:ee:ba:e0:08:35:
ce:ef:8a:fe:a0:86:62:18:df:8d:27:23:8f:1d:63:
e4:aa:a7:72:58:7e:b0:91:3f:41:26:dd:9a:ae:f6:
bf:14:57:5f:e2:15:ca:f3:44:45:cc:75:1c:95:b1:
8b:fa:48:26:52:52:26:69:0d:26:55:9a:3c:13:fc:
15:fc:34:f4:dc:3a:d3:71:ed:c8:a3:b7:2f:ef:c6:
b2:0f:2a:59:43:82:9b:3e:04:8b:98:79:5b:c1:75:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:A6:CD:3A:AC:BF:32:3D:EE:3C:CB:D0:11:F6:FF:76:4D:59:14
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/O3CmzTqsvzI97jzL0BH2_3ZNWRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.116.0/24
IPv6:
2a14:6c80::-2a14:6c80:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bd:b8:05:ba:f8:ce:8a:bf:57:e9:13:67:a8:59:ff:64:0d:40:
2f:d9:cd:9e:39:36:93:21:00:77:88:b0:4a:81:49:63:ee:1c:
d4:c3:7d:e5:a6:d8:7e:21:2d:77:03:e2:81:dc:90:e4:36:37:
de:bd:6e:a8:50:22:98:e4:31:37:18:43:ee:c0:6d:9f:e8:df:
90:65:30:83:59:0c:ab:38:50:83:a1:ab:d2:02:44:5e:5b:5b:
51:c7:9f:26:7c:52:e5:4f:c1:7d:58:5c:94:79:98:a7:de:e8:
b1:d8:38:3d:3d:b2:e5:f3:a3:2c:59:97:e3:fa:af:11:bb:6a:
9d:2b:fe:fc:1f:60:41:43:05:ca:d5:34:7d:5c:f8:51:07:c8:
05:a0:e4:4b:9c:10:15:86:30:27:c8:b4:f1:29:83:be:8d:24:
f6:c1:40:f6:17:2b:f3:f3:74:9f:37:f1:83:ca:72:66:7a:f4:
b2:df:56:86:63:5a:89:f8:2f:64:db:42:49:88:0c:fb:34:8c:
98:9e:8a:ad:99:cc:b1:b8:7f:90:43:52:60:aa:66:1a:69:8c:
ce:6c:f9:02:c3:45:3d:0c:35:a4:0d:69:87:81:49:8e:17:df:
9b:54:92:23:65:29:d6:6e:77:ed:93:3b:21:06:b9:20:14:45:
a0:a1:1a:5c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY1qCMX03UrJC8aOU6lAZscEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjhiNjEyNzIxZDRkNGMyZDA3Y2JmZTJlNDk1ZTk4NmEw
ZjAyNmQwHhcNMjQwMjAyMTMzNjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjcwYTZjZDNhYWNiZjMyM2RlZTNjY2JkMDExZjZmZjc2NGQ1OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklzNqvUavlY14oisa4gXCVG9PqQs
6ICvqBS91r0olbdIOy3edQPG9717jF0Pq1VBKbmJ6Pz4GveGMy0PgAndEsU+4LjH
vAC/JIb5vCSC2/zGllpiPz4QI5bS7HJUPE5AeCM6U5nIiT5WnL0XN2fI56DyvFoL
I6fxFON1sffHxoYg33CeXOW0Y1Dj+o4GjGfb+rg4a7Xl+ZeeP/AdhnIa7rrgCDXO
74r+oIZiGN+NJyOPHWPkqqdyWH6wkT9BJt2arva/FFdf4hXK80RFzHUclbGL+kgm
UlImaQ0mVZo8E/wV/DT03DrTce3Io7cv78ayDypZQ4KbPgSLmHlbwXUATwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDtwps06rL8yPe48y9AR9v92TVkUMB8GA1UdIwQY
MBaAFIu4thJyHU1MLQfL/i5JXphqDwJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmIt
YmI0OTNjNDZkZjNlLzEvTzNDbXpUcXN2ekk5N2p6TDBCSDJfM1pOV1JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83MTkyYzItYTc4OC00ZjU2LWJlNmItYmI0OTNjNDZkZjNl
LzEvaTdpMkVuSWRUVXd0Qjh2LUxrbGVtR29QQW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuXZ0MBgE
AgACMBIwEAMFByoUbIADBwAqFGyAAAIwDQYJKoZIhvcNAQELBQADggEBAL24Bbr4
zoq/V+kTZ6hZ/2QNQC/ZzZ45NpMhAHeIsEqBSWPuHNTDfeWm2H4hLXcD4oHckOQ2
N969bqhQIpjkMTcYQ+7AbZ/o35BlMINZDKs4UIOhq9ICRF5bW1HHnyZ8UuVPwX1Y
XJR5mKfe6LHYOD09suXzoyxZl+P6rxG7ap0r/vwfYEFDBcrVNH1c+FEHyAWg5Euc
EBWGMCfItPEpg76NJPbBQPYXK/PzdJ838YPKcmZ69LLfVoZjWon4L2TbQkmIDPs0
jJieiq2ZzLG4f5BDUmCqZhppjM5s+QLDRT0MNaQNaYeBSY4X35tUkiNlKdZud+2T
OyEGuSAURaChGlw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org