Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/6LOXLMOLw48kss4qIOZR0_Z2k-Q.roa
File: 6LOXLMOLw48kss4qIOZR0_Z2k-Q.roa (raw, json)
Hash identifier: 7sqVbTvVfgtMEA8ABMAtmvChcpiVBbfaRAOhybCDNOg=
Subject key identifier: E8:B3:97:2C:C3:8B:C3:8F:24:B2:CE:2A:20:E6:51:D3:F6:76:93:E4
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018FC8562F9E16EFF8FAFBF2708D95E6CFD0
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/6LOXLMOLw48kss4qIOZR0_Z2k-Q.roa
Signing time: Thu 30 May 2024 07:10:42 +0000
ROA not before: Thu 30 May 2024 07:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.232.0/21 maxlen: 21
37.98.232.0/22 maxlen: 22
37.98.232.0/23 maxlen: 23
37.98.232.0/24 maxlen: 24
37.98.233.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.234.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 22
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
136.242.128.0/17 maxlen: 17
138.12.128.0/17 maxlen: 17
148.139.0.0/16 maxlen: 16
148.139.0.0/24 maxlen: 24
148.139.1.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.4.0/22 maxlen: 22
148.139.8.0/22 maxlen: 22
148.139.12.0/22 maxlen: 22
148.139.16.0/22 maxlen: 22
148.139.28.0/24 maxlen: 24
148.139.29.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 20
148.139.48.0/20 maxlen: 20
148.139.64.0/20 maxlen: 20
148.139.80.0/20 maxlen: 20
148.139.96.0/22 maxlen: 22
148.139.100.0/22 maxlen: 22
148.139.104.0/24 maxlen: 24
148.139.105.0/24 maxlen: 24
148.139.108.0/22 maxlen: 22
148.139.112.0/22 maxlen: 22
148.139.116.0/22 maxlen: 22
148.139.120.0/22 maxlen: 22
148.139.124.0/24 maxlen: 24
148.139.125.0/24 maxlen: 24
148.139.136.0/22 maxlen: 22
148.139.140.0/24 maxlen: 24
148.139.160.0/20 maxlen: 20
148.139.176.0/20 maxlen: 20
157.5.128.0/17 maxlen: 17
157.70.0.0/17 maxlen: 17
163.120.128.0/17 maxlen: 17
165.171.0.0/17 maxlen: 17
2a04:37c0::/29 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 12:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:56:2f:9e:16:ef:f8:fa:fb:f2:70:8d:95:e6:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: May 30 07:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b3972cc38bc38f24b2ce2a20e651d3f67693e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:30:34:d0:55:17:98:b2:9a:b9:08:56:df:
e2:38:e7:45:20:4d:07:d4:98:11:7d:04:fb:1d:0d:
b8:49:c4:68:13:be:19:df:14:56:67:a3:d9:82:3f:
d4:71:eb:01:cb:1b:3f:61:a0:73:53:98:7c:1a:be:
3f:2f:6b:dd:a9:f8:03:58:7c:eb:a4:59:da:25:85:
20:eb:be:8a:e3:ba:f5:be:89:c6:3a:c6:42:7f:6d:
d3:98:d0:0d:4e:6b:d5:dc:14:59:59:96:e6:6f:41:
85:44:16:5c:43:20:20:f4:80:a5:9c:bc:cb:89:0d:
2e:f3:1f:1f:ee:22:31:0d:4f:b0:ee:6f:40:60:07:
f7:af:6d:88:eb:df:55:20:da:ef:85:02:f2:8d:81:
d5:9e:f5:87:1b:4c:aa:9c:2b:26:9b:39:51:49:2b:
38:3f:ae:4a:d8:08:12:23:38:c3:9c:15:f8:7a:54:
6d:c0:f5:83:7c:d7:88:4f:c6:51:80:d3:3b:d6:4d:
38:d4:f3:b3:0a:ad:e5:6c:e1:ab:9a:ae:89:5f:4d:
75:00:9b:53:bf:5b:97:4b:b4:7c:94:41:9f:1c:30:
ac:43:53:4d:b5:72:64:c3:f3:20:9c:5e:5a:cd:69:
b7:b1:cc:40:eb:ea:5f:57:2f:71:54:dc:87:7f:fd:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:97:2C:C3:8B:C3:8F:24:B2:CE:2A:20:E6:51:D3:F6:76:93:E4
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/6LOXLMOLw48kss4qIOZR0_Z2k-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
136.242.128.0/17
138.12.128.0/17
148.139.0.0/16
157.5.128.0/17
157.70.0.0/17
163.120.128.0/17
165.171.0.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
65:06:35:30:0e:18:d5:5c:c8:73:28:59:d6:97:d4:28:0c:8f:
9c:3b:5b:d7:66:e0:81:d5:22:cc:bb:c9:63:e4:43:6d:99:23:
c4:d5:0e:b4:02:04:fb:91:9e:cc:07:6d:fc:0c:e6:0d:d8:aa:
33:6b:f6:d0:db:0b:32:81:f7:cd:9e:59:6d:d3:a1:9b:c0:3e:
45:b7:1c:b7:0e:7a:62:20:bf:77:df:8d:59:3c:51:ca:16:6e:
b8:10:72:43:dc:2c:fa:7f:47:6a:15:cc:96:e8:d3:af:e0:74:
4c:10:12:e4:1c:99:c6:94:72:aa:d4:7d:2e:de:30:87:47:f2:
e8:7e:00:e4:cc:15:96:14:b0:75:5e:ba:a4:da:b2:0f:5f:13:
0b:56:48:fb:b9:0b:c5:45:e3:94:1b:47:88:26:68:a6:63:e8:
3a:ea:d3:5c:76:a7:ed:1e:ac:1b:49:05:15:68:a2:1d:c4:da:
21:b2:37:b9:bf:80:23:95:7c:fa:9b:aa:8b:f2:26:46:c3:f8:
c7:59:71:5a:e6:b8:da:b9:30:bb:ae:94:6a:2f:ab:34:cf:1e:
d7:af:1b:5d:69:23:93:b9:4d:97:be:3a:16:f7:38:8e:fb:57:
bc:52:4b:71:c7:4f:29:80:d0:9b:ca:71:d9:c8:c8:00:0e:44:
38:9b:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:16:53 2024 by rpki-client on console-ams.rpki-client.org