Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/OYKlYk8eg4CdygK4dCT6QaDdjoc.roa
File: OYKlYk8eg4CdygK4dCT6QaDdjoc.roa (raw, json)
Hash identifier: z6MQAqruyhKDAorLL94T8zjjBTCEmbSPiiTmFTRPN5s=
Subject key identifier: 39:82:A5:62:4F:1E:83:80:9D:CA:02:B8:74:24:FA:41:A0:DD:8E:87
Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial: 018CC56ED4328C11BACB2C18A861E8BC1F9C
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/OYKlYk8eg4CdygK4dCT6QaDdjoc.roa
Signing time: Mon 01 Jan 2024 14:30:23 +0000
ROA not before: Mon 01 Jan 2024 14:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 185.87.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 15 Mar 2024 15:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d4:32:8c:11:ba:cb:2c:18:a8:61:e8:bc:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Validity
Not Before: Jan 1 14:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3982a5624f1e83809dca02b87424fa41a0dd8e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:1c:c1:86:b1:31:93:97:ea:a1:77:5a:01:
db:a4:29:26:dc:5e:2d:54:5d:ca:bf:b1:30:e3:71:
6e:f4:c5:51:cc:65:f1:bf:e8:07:73:6f:3f:29:aa:
34:98:4f:29:bc:32:c4:cb:d9:00:f0:ef:9f:ff:a1:
35:79:f6:2d:d2:7d:ee:be:90:95:22:22:06:16:8c:
ff:ef:79:2e:02:84:c3:24:1c:1a:32:e1:02:fc:5d:
da:51:71:e1:d3:38:14:e7:a7:d7:cc:c8:57:ee:72:
a0:01:90:9e:d4:e8:b1:18:c9:ae:4e:43:6c:c2:ff:
62:90:56:f3:1e:25:bd:ed:3a:d1:3d:a6:29:42:e1:
b3:60:3a:7d:9c:48:00:fb:63:af:60:ad:6e:4b:2f:
a6:e4:cf:72:26:4f:2b:4b:d4:d0:53:85:0c:c4:74:
7e:df:9a:5e:87:a7:6c:0a:b0:d9:ce:e6:8b:46:d5:
f4:1f:be:06:79:de:32:ce:da:a7:22:30:79:e6:54:
b5:ac:fd:9c:7b:3f:4a:cd:ce:b3:b9:24:cf:7c:32:
af:d5:d5:56:94:0b:d1:b9:ec:a8:6d:ba:de:02:08:
a7:85:d8:30:b8:58:1f:27:60:27:da:a4:d8:d8:76:
51:b0:fc:55:21:23:36:6f:fe:36:27:7e:64:fb:c2:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:A5:62:4F:1E:83:80:9D:CA:02:B8:74:24:FA:41:A0:DD:8E:87
X509v3 Authority Key Identifier:
keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/OYKlYk8eg4CdygK4dCT6QaDdjoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:3d:87:8d:3a:e7:36:15:70:63:92:a6:96:0f:99:1c:cf:21:
45:3e:98:b5:90:fe:4e:44:e9:53:69:4a:b0:a1:0a:b5:ae:53:
b5:2c:56:90:f7:3e:e1:66:22:96:b4:f0:d1:4e:14:4c:92:3a:
8f:42:7e:e5:d9:16:a1:6d:7f:44:a2:ef:07:cb:74:f6:09:7e:
3a:eb:a8:2b:f6:b3:2b:39:34:90:b1:a8:8f:5d:73:50:a9:c2:
7f:46:b3:3b:c4:b8:70:3b:15:7f:d9:39:08:54:df:ca:22:01:
6d:49:72:76:27:d6:55:38:f4:9e:63:27:a0:97:b2:a5:61:04:
cc:63:5f:75:69:1e:ff:de:97:6c:8f:e3:e4:b5:4d:ba:8e:03:
df:d8:e8:10:2f:73:e1:51:0e:ae:82:29:10:f6:c8:22:5d:50:
e4:77:d7:c7:4a:59:9c:71:0a:7f:f5:1f:4e:7c:f1:59:22:4f:
a1:f1:ec:f6:75:70:37:65:ef:d7:7a:9b:54:a1:50:24:d8:16:
92:a1:d9:e8:a2:47:15:aa:a9:e4:4b:f0:ac:68:53:5c:22:d1:
20:06:10:f7:1e:b0:70:8e:23:62:c7:91:61:90:30:bf:8b:30:
43:57:b6:f7:78:de:2d:04:3a:f2:2b:ed:22:83:65:2c:ed:60:
e8:cb:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 22:16:27 2024 by rpki-client on console.sobornost.net