Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/0OQKz2HkbgLE40jHRvxTs4BItr4.roa
File: 0OQKz2HkbgLE40jHRvxTs4BItr4.roa (raw, json)
Hash identifier: rXFRhNNUQ/YmlR0pGUstC2fJAoZqWhmXPLImhyVtmXA=
Subject key identifier: D0:E4:0A:CF:61:E4:6E:02:C4:E3:48:C7:46:FC:53:B3:80:48:B6:BE
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 0185723A236C6C0467B499BB348DF31AF6ED
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/0OQKz2HkbgLE40jHRvxTs4BItr4.roa
Signing time: Mon 02 Jan 2023 11:24:50 +0000
ROA not before: Mon 02 Jan 2023 11:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3175
IP address blocks: 185.45.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:23:6c:6c:04:67:b4:99:bb:34:8d:f3:1a:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 2 11:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e40acf61e46e02c4e348c746fc53b38048b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:ac:50:cc:87:38:19:33:33:2f:a8:19:46:
0d:fe:e8:c5:7b:cd:9d:43:67:96:fd:3d:63:ec:fa:
0d:a0:2d:2a:7d:1b:d4:97:91:c7:c1:60:05:82:5e:
3a:70:b2:56:ba:0f:f6:22:c2:51:f0:a3:6d:19:43:
33:02:a3:5c:d4:6a:5c:68:f1:98:fc:3b:60:eb:18:
ac:8b:b5:91:cc:39:4e:1a:63:dc:03:5f:36:b7:74:
1e:6d:2a:d1:73:87:07:64:ea:b6:3c:d4:9b:11:95:
01:58:3b:7c:35:c7:5f:b1:b5:11:3d:fe:0e:5e:ab:
54:e1:b5:79:b6:2a:ab:b7:84:aa:b9:b3:48:f2:d1:
b7:ef:a9:34:ef:7d:42:63:c1:b6:45:e0:27:89:48:
f1:9f:96:4e:0f:75:fa:c6:84:4e:d0:5b:1f:c0:fa:
bc:55:7f:a2:7e:7b:75:a1:c3:c2:a5:3c:5d:c9:b0:
82:c8:08:df:9d:f3:05:4b:fb:5c:e8:f6:b7:45:95:
26:4a:40:b2:8a:44:24:91:4f:34:ea:b0:20:7e:a6:
20:61:1d:ef:fc:d5:84:88:d9:c8:26:0d:df:f7:ea:
71:d7:67:20:e7:28:fa:67:de:7d:f3:fc:6a:94:e3:
0a:d7:4a:f9:ce:d4:9b:32:fd:20:8f:1e:fd:46:13:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:0A:CF:61:E4:6E:02:C4:E3:48:C7:46:FC:53:B3:80:48:B6:BE
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/0OQKz2HkbgLE40jHRvxTs4BItr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.81.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ce:c8:42:9c:66:eb:12:7a:1f:92:12:db:14:f8:aa:a7:54:
b9:51:cd:7f:5f:df:ba:de:a1:94:0c:7f:c4:12:33:0d:86:d3:
cb:63:c4:ee:58:00:d7:01:5d:a8:71:e6:69:31:43:a2:ea:4c:
98:57:ad:4e:fd:2a:55:8d:09:f7:72:c3:55:d5:ec:ab:05:fa:
e4:cd:3f:e2:ea:44:e0:47:26:50:84:f9:30:00:bd:62:b6:ca:
ab:b2:ab:02:0d:62:92:d3:52:20:4f:80:3f:86:c0:19:06:fb:
6f:c4:29:39:47:5f:c1:d2:18:5d:dc:66:bf:c8:91:95:a8:b0:
c7:56:1c:9f:c2:2e:31:31:4f:ce:0f:62:36:76:29:37:81:c6:
e5:b4:b0:12:c5:22:80:2b:5c:ba:4b:f0:1d:05:6c:24:a4:62:
3c:83:83:d7:29:7b:44:71:9d:09:61:61:aa:2b:23:e7:08:3b:
44:45:32:20:6b:db:3b:19:b7:d6:ab:b7:bf:0b:8f:62:81:d9:
cd:15:ba:15:5b:05:91:6d:9a:9b:e7:9e:ca:3d:ff:c7:48:f1:
4c:d3:36:c4:85:41:06:eb:00:8f:08:86:c2:f6:bd:bf:2c:60:
ae:d9:78:c6:6f:52:4e:0c:2f:77:d9:b2:5b:56:2d:d2:8a:da:
33:3f:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:04 2024 by rpki-client on console-ams.rpki-client.org