Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ON3gbj-EPj5c3Ic4F540b7zXRrQ.roa
File: ON3gbj-EPj5c3Ic4F540b7zXRrQ.roa (raw, json)
Hash identifier: VDv84ez78MG4Cvm6IVSEhdVFGbclyfgbM+N4inRepD4=
Subject key identifier: 38:DD:E0:6E:3F:84:3E:3E:5C:DC:87:38:17:9E:34:6F:BC:D7:46:B4
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018AEA4B54B7AB7FF8B3F851B68658FBD8AA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ON3gbj-EPj5c3Ic4F540b7zXRrQ.roa
Signing time: Sun 01 Oct 2023 08:12:00 +0000
ROA not before: Sun 01 Oct 2023 08:12:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 194.88.96.0/21 maxlen: 24
84.234.16.0/20 maxlen: 24
194.88.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:4b:54:b7:ab:7f:f8:b3:f8:51:b6:86:58:fb:d8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 1 08:12:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38dde06e3f843e3e5cdc8738179e346fbcd746b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:d1:c6:3a:5c:08:da:11:e1:a8:af:1a:34:
3e:5d:a5:0d:69:6b:b4:ca:90:d7:7d:a9:3a:6b:c8:
bc:23:17:3c:c8:e9:52:52:c8:57:11:31:70:e2:06:
2f:dc:ea:b1:20:a5:7e:4f:7b:77:f4:86:82:35:77:
4d:e1:67:2d:de:70:3f:4f:36:7b:6b:82:6c:29:de:
65:1e:49:03:f1:c0:3c:db:7b:6b:56:30:fb:ac:3b:
34:4b:6e:4e:f2:24:c3:40:0a:ff:c5:2d:80:73:33:
9a:ac:f7:cd:98:8f:ac:06:97:92:47:93:c6:71:d8:
2f:11:b2:1f:ef:02:a8:10:8b:0f:30:77:00:3c:30:
d4:c0:67:e5:58:41:60:7d:df:f2:c1:9a:f8:cb:10:
e0:fa:68:13:51:c8:dc:8d:ff:57:c5:7b:42:d0:c5:
02:b6:44:75:fa:69:de:ee:af:4c:ca:be:67:7f:67:
fe:ab:7a:d4:db:83:7a:7e:ca:42:16:6b:cb:08:7b:
a2:e9:d5:c5:1f:48:1e:42:a5:ce:64:b2:8f:a8:c2:
42:37:6b:c2:b4:73:cb:e3:0e:37:f9:a6:f2:43:3d:
65:88:79:6e:86:0c:0a:66:fa:6b:b6:1c:2f:eb:8e:
8f:4d:ad:82:2e:ee:b6:29:8b:03:bd:24:14:5e:c2:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:E0:6E:3F:84:3E:3E:5C:DC:87:38:17:9E:34:6F:BC:D7:46:B4
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ON3gbj-EPj5c3Ic4F540b7zXRrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.16.0/20
194.88.96.0/21
194.88.112.0/20
Signature Algorithm: sha256WithRSAEncryption
12:67:f3:f2:9f:a2:4a:a2:a1:7f:07:8a:5e:98:0f:3c:ba:e0:
3c:80:93:bf:56:9d:a8:7e:b3:53:de:a2:b5:62:43:49:1d:9a:
ca:10:e8:7c:84:88:a9:b0:42:c9:4a:00:b2:5f:b4:0f:cb:82:
c2:75:4d:19:ce:f7:ea:e7:28:77:0c:1e:42:19:1e:81:71:ee:
a3:3b:d5:6e:67:9b:cc:52:b1:ab:5b:41:ad:1c:c6:ea:8b:17:
fe:ef:c6:bf:73:84:83:21:a6:e0:9f:94:9f:37:da:81:02:e9:
57:64:e2:78:1b:b9:0c:8b:b2:66:44:d9:94:c6:aa:a1:aa:7b:
9b:5a:0f:0f:e2:8d:92:61:3a:64:06:eb:3f:6f:94:09:11:7f:
9d:90:1a:c3:87:5f:b7:f7:a6:e7:e9:9f:d9:c4:a5:c0:ad:d1:
36:c5:ee:82:cf:1c:fa:0b:b2:81:57:01:d3:c1:2e:86:37:21:
90:99:ea:ca:d1:39:93:5d:7d:fe:bc:36:b4:c9:b3:7b:35:5a:
bf:80:74:11:d9:b3:d9:6f:64:ff:81:0c:cc:6d:17:92:5c:ba:
44:a8:7a:00:51:2d:ca:40:0b:d8:ea:7d:bf:7e:40:06:c8:b6:
4a:a9:c7:14:0f:41:f4:c0:f2:9b:cf:8a:dc:6a:d8:74:ae:ad:
12:bd:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org