Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/oeu7MngnAB6y-HUAeHQ4uqYKUqg.roa
File: oeu7MngnAB6y-HUAeHQ4uqYKUqg.roa (raw, json)
Hash identifier: +AfmFDJj9QW9Em8YTArJ/Z0pMHt8Jpm7aN/nzJ4sHr8=
Subject key identifier: A1:EB:BB:32:78:27:00:1E:B2:F8:75:00:78:74:38:BA:A6:0A:52:A8
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 01856B937207995601DA42B2D8FF33207102
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/oeu7MngnAB6y-HUAeHQ4uqYKUqg.roa
Signing time: Sun 01 Jan 2023 04:25:03 +0000
ROA not before: Sun 01 Jan 2023 04:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43608
IP address blocks: 78.24.104.0/21 maxlen: 21
78.24.108.0/24 maxlen: 24
62.77.132.0/22 maxlen: 24
185.61.57.0/24 maxlen: 24
185.61.56.0/22 maxlen: 24
2a00:9500::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:72:07:99:56:01:da:42:b2:d8:ff:33:20:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jan 1 04:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1ebbb327827001eb2f87500787438baa60a52a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:d8:01:5b:96:53:8c:31:d2:a5:4f:54:d9:
63:6b:20:5b:28:25:e0:06:b3:d3:78:1d:5b:a8:8f:
e1:e2:b7:bb:71:53:b6:b8:8f:b9:7e:f1:58:6a:79:
58:c6:12:14:a7:86:e5:d2:79:e3:d0:b9:7d:93:c4:
ea:9b:91:87:07:28:4c:9c:1e:84:7a:49:aa:3e:b5:
ab:1c:a8:be:49:59:40:02:07:9d:73:0f:33:23:78:
99:ca:ba:a8:d3:31:ef:c8:37:69:e2:ba:4f:1e:e2:
8d:b9:ca:aa:4a:a0:26:98:23:f2:4a:d3:74:88:8d:
79:91:78:0b:17:b9:0e:b6:e1:24:54:5a:ed:98:9a:
a6:81:0a:00:d6:4e:ab:49:fb:d6:1d:53:36:c8:6a:
83:6e:0b:37:49:fc:ee:c9:52:9b:99:f0:d8:46:2f:
73:c9:26:34:16:29:b0:81:3d:7e:e8:c5:6e:20:a9:
e0:d6:fe:d4:2a:f6:44:40:5a:d1:2b:3b:6d:09:50:
7c:46:41:a7:2a:b7:a0:7a:85:cb:1a:4b:8d:fa:ec:
e7:1f:c4:8e:7d:05:3e:bc:bb:11:35:f8:11:cd:17:
14:a2:46:6a:19:6d:95:df:f9:3e:dd:ee:60:10:f1:
88:ee:0b:ee:cb:11:3f:a4:be:83:d1:0d:24:ba:92:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:BB:32:78:27:00:1E:B2:F8:75:00:78:74:38:BA:A6:0A:52:A8
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/oeu7MngnAB6y-HUAeHQ4uqYKUqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.132.0/22
78.24.104.0/21
185.61.56.0/22
IPv6:
2a00:9500::/32
Signature Algorithm: sha256WithRSAEncryption
3b:85:23:fd:be:7b:2a:62:dd:aa:2f:86:8f:16:db:c1:e3:27:
c2:31:33:ea:d8:95:d4:38:54:ec:a7:e5:11:96:fa:2f:5c:54:
e0:d6:6e:45:36:fe:2e:62:b6:19:5c:c7:be:ff:ea:c1:9a:0e:
4b:78:36:b1:16:71:c8:21:7b:50:fa:5d:ab:de:dd:e8:63:d9:
5a:3c:18:a1:b6:a3:06:f3:d4:4e:e9:d7:af:6e:0f:15:b2:ae:
d9:ad:76:93:65:a5:fc:47:95:6f:d0:e7:64:aa:83:a1:a0:7c:
da:39:83:53:ad:47:ab:71:d9:df:80:fb:b9:3a:23:5f:de:9f:
67:d1:70:c1:94:b7:c4:5e:ce:c7:4e:0e:2e:80:73:c5:38:24:
ea:7a:8b:03:1e:9e:c9:f7:db:e1:8a:32:fd:6d:80:86:f7:6b:
fd:b4:a9:29:55:9e:74:b9:fb:82:69:2e:1b:b7:82:0f:be:fc:
06:e2:bd:e1:86:b9:bc:5c:45:00:a1:88:8a:27:3e:0a:c5:bb:
a8:8f:14:bc:f1:97:5f:c3:03:1f:a3:63:b3:57:01:98:8d:40:
2e:a8:2a:43:19:c7:1c:af:89:f6:cc:68:20:7d:38:f8:b4:34:
0a:35:1f:99:e0:45:f3:4d:e4:93:4d:9f:2b:57:80:09:81:ff:
19:65:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org