Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/oZci8uxl9Syz9mijM1FDfehISNA.roa
File: oZci8uxl9Syz9mijM1FDfehISNA.roa (raw, json)
Hash identifier: 7EFwdX15QOD2vLpmuFEjVTC6Yed4htfF2p7L++zhmX8=
Subject key identifier: A1:97:22:F2:EC:65:F5:2C:B3:F6:68:A3:33:51:43:7D:E8:48:48:D0
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018F33373A0ED5402295B4ECA6E51D52B3F3
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/oZci8uxl9Syz9mijM1FDfehISNA.roa
Signing time: Wed 01 May 2024 08:13:28 +0000
ROA not before: Wed 01 May 2024 08:13:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 5.104.104.0/21 maxlen: 24
5.199.128.0/20 maxlen: 24
37.157.248.0/21 maxlen: 24
46.20.32.0/20 maxlen: 24
46.228.192.0/20 maxlen: 24
62.141.32.0/20 maxlen: 24
78.31.64.0/21 maxlen: 24
80.82.208.0/20 maxlen: 24
81.30.144.0/20 maxlen: 24
83.136.80.0/21 maxlen: 24
85.14.192.0/18 maxlen: 24
85.114.128.0/19 maxlen: 24
89.163.128.0/17 maxlen: 24
91.194.84.0/24 maxlen: 24
91.212.153.0/24 maxlen: 24
91.212.159.0/24 maxlen: 24
93.186.192.0/20 maxlen: 24
146.0.32.0/20 maxlen: 24
146.19.166.0/24 maxlen: 24
152.89.92.0/22 maxlen: 24
185.15.244.0/22 maxlen: 24
185.45.248.0/22 maxlen: 24
185.219.208.0/22 maxlen: 24
193.111.198.0/23 maxlen: 24
194.107.129.0/24 maxlen: 24
194.126.198.0/24 maxlen: 24
195.93.242.0/23 maxlen: 24
213.202.192.0/18 maxlen: 24
217.79.176.0/20 maxlen: 24
2001:4ba0::/32 maxlen: 32
2001:4ba1::/32 maxlen: 32
2001:4ba3::/32 maxlen: 32
2001:4ba4::/32 maxlen: 32
2a01:480::/32 maxlen: 32
2a0c:6b00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 08 May 2024 16:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:37:3a:0e:d5:40:22:95:b4:ec:a6:e5:1d:52:b3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: May 1 08:13:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a19722f2ec65f52cb3f668a33351437de84848d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:ad:e9:31:8b:17:83:40:c5:30:81:e8:b9:
c9:24:39:cc:0c:52:44:13:63:4a:fe:c9:0f:38:9c:
23:a5:cb:63:a7:61:6c:5a:bd:3b:9b:98:0f:89:b3:
81:19:79:5c:13:c3:20:36:15:06:bb:1f:34:df:64:
4a:d8:37:94:81:64:7f:89:d2:c8:30:3f:1e:b0:1c:
f2:88:78:a0:ef:01:37:87:c5:0b:d2:93:4d:f2:a0:
04:af:1f:2d:cf:c1:52:b1:cb:df:88:97:c9:b6:b5:
fd:59:48:24:1e:70:1c:6f:ea:2b:f4:eb:d4:d9:7f:
1f:9c:5a:c0:8f:0b:c0:27:c1:5b:f7:48:1c:76:6e:
ac:5f:e4:3e:fc:d9:b3:31:e6:64:34:a1:fe:de:57:
3c:53:15:13:21:43:ff:29:d1:0c:3f:22:65:41:8e:
c1:bc:6c:26:61:6a:aa:9f:5d:bf:a6:df:49:91:e1:
59:1f:6d:a9:e4:fe:1d:ed:12:66:c7:47:4e:a3:86:
47:c8:08:08:71:67:ae:f4:5f:35:3b:46:e2:9f:7f:
6c:a0:c7:a1:60:b0:f2:f2:92:11:84:a9:df:f6:d5:
b9:03:58:b7:3d:3f:57:74:7a:2a:11:b7:b3:25:db:
04:52:d6:11:9c:2d:9a:12:35:b1:57:2b:de:15:a9:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:22:F2:EC:65:F5:2C:B3:F6:68:A3:33:51:43:7D:E8:48:48:D0
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/oZci8uxl9Syz9mijM1FDfehISNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.104.0/21
5.199.128.0/20
37.157.248.0/21
46.20.32.0/20
46.228.192.0/20
62.141.32.0/20
78.31.64.0/21
80.82.208.0/20
81.30.144.0/20
83.136.80.0/21
85.14.192.0/18
85.114.128.0/19
89.163.128.0/17
91.194.84.0/24
91.212.153.0/24
91.212.159.0/24
93.186.192.0/20
146.0.32.0/20
146.19.166.0/24
152.89.92.0/22
185.15.244.0/22
185.45.248.0/22
185.219.208.0/22
193.111.198.0/23
194.107.129.0/24
194.126.198.0/24
195.93.242.0/23
213.202.192.0/18
217.79.176.0/20
IPv6:
2001:4ba0::/31
2001:4ba3::-2001:4ba4:ffff:ffff:ffff:ffff:ffff:ffff
2a01:480::/32
2a0c:6b00::/32
Signature Algorithm: sha256WithRSAEncryption
b0:af:00:7a:25:c7:1f:d1:c3:ae:da:70:f9:e3:ed:bc:1f:86:
25:7a:3f:88:05:dc:a5:c0:80:79:e7:32:e1:eb:cb:f7:22:de:
af:12:10:5b:da:92:8f:21:51:44:f6:af:13:85:07:7c:6c:11:
c2:2f:91:69:ea:82:0a:db:a2:e5:21:49:4e:48:d9:80:96:ff:
00:58:81:95:71:81:3e:d5:ab:a1:28:a4:92:28:a7:2a:21:69:
c3:0e:91:c4:b9:87:ac:3c:05:3c:ad:96:a0:e8:82:33:c2:e7:
0a:a2:3a:65:a1:77:4a:31:5d:3b:16:15:10:35:34:2e:78:05:
37:81:80:d0:25:3d:dd:83:54:f2:19:58:f5:dd:e7:e8:fb:44:
c6:2f:51:36:d6:35:d9:38:5d:ea:f3:e7:d7:e0:38:f3:4f:95:
88:4e:32:0d:80:51:b5:5a:cb:e2:d4:05:34:3f:25:31:ae:06:
81:44:e5:15:0c:fd:dc:bb:af:9b:91:2d:db:9a:c5:7c:d8:78:
e6:88:b5:eb:6e:cd:48:c9:a7:56:fb:f6:95:58:cc:75:54:45:
df:fd:72:f1:2e:13:f1:6b:b2:48:94:c7:8a:f6:7d:23:90:1b:
9f:1d:33:08:19:9f:70:11:b6:eb:81:e5:57:62:de:64:30:68:
fc:a6:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org