Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/oZ33AyE-5NZ-8dQCfkvbnCHn8hg.roa
File: oZ33AyE-5NZ-8dQCfkvbnCHn8hg.roa (raw, json)
Hash identifier: Ayeb42Osq7wszWx/tYCvQKJqqxbP1eolCkSiSbUQX/c=
Subject key identifier: A1:9D:F7:03:21:3E:E4:D6:7E:F1:D4:02:7E:4B:DB:9C:21:E7:F2:18
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 01857230F62CBE67240F1FA08079001C395A
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/oZ33AyE-5NZ-8dQCfkvbnCHn8hg.roa
Signing time: Mon 02 Jan 2023 11:14:49 +0000
ROA not before: Mon 02 Jan 2023 11:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21351
IP address blocks: 93.121.128.0/17 maxlen: 24
95.138.0.0/17 maxlen: 24
213.188.160.0/19 maxlen: 24
5.187.96.0/19 maxlen: 24
213.16.0.0/19 maxlen: 24
185.29.48.0/22 maxlen: 24
46.238.128.0/18 maxlen: 24
2a02:1390::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Mar 2023 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f6:2c:be:67:24:0f:1f:a0:80:79:00:1c:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Jan 2 11:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19df703213ee4d67ef1d4027e4bdb9c21e7f218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:f5:f6:47:fc:09:4e:b3:e3:d9:25:90:54:
dc:ef:d9:55:76:e9:9e:09:64:c1:a2:62:4c:09:d4:
0a:95:00:d0:7e:85:74:3b:60:16:ae:e1:6c:69:94:
96:c7:fb:e4:ec:3d:34:83:4e:25:1f:3c:ba:66:83:
9c:49:ff:ec:fb:43:eb:39:ef:e0:7d:db:39:f1:78:
d6:dd:6e:2d:7d:99:84:47:a4:ec:10:12:41:92:99:
ee:b7:33:3b:ca:81:ba:21:02:f6:8d:67:6a:71:08:
0b:02:2f:b2:9d:b6:08:e7:06:25:04:6a:6c:98:63:
80:f6:92:50:0d:02:bd:83:a8:49:f3:ba:1f:c3:0e:
ff:50:63:63:f5:ce:94:19:90:40:b8:64:f0:f2:83:
a5:56:97:4a:a6:a0:ff:ff:ef:81:9c:e6:7a:c9:a9:
be:d9:1b:1f:8b:55:20:8b:ff:20:ff:d3:0c:17:ae:
f2:29:e9:c8:fc:a8:3b:71:10:16:74:23:20:10:88:
05:c5:e1:4c:d7:9e:5d:58:a7:ff:03:61:4d:9c:ab:
95:c2:5f:0b:23:d0:93:9c:85:ed:69:03:09:84:2c:
69:fe:2b:c4:fd:08:11:ad:8d:51:37:f9:17:80:8e:
ad:f4:4c:42:f4:98:b6:ed:8c:d5:6e:1e:0f:4c:ea:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:F7:03:21:3E:E4:D6:7E:F1:D4:02:7E:4B:DB:9C:21:E7:F2:18
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/oZ33AyE-5NZ-8dQCfkvbnCHn8hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.96.0/19
46.238.128.0/18
93.121.128.0/17
95.138.0.0/17
185.29.48.0/22
213.16.0.0/19
213.188.160.0/19
IPv6:
2a02:1390::/29
Signature Algorithm: sha256WithRSAEncryption
6f:46:ed:f1:78:36:ac:41:b1:de:46:3c:27:55:9a:32:ae:61:
1d:2b:8d:88:ff:22:7e:86:13:63:52:1c:12:04:ad:0b:9c:69:
4f:6c:21:46:95:50:30:36:b7:be:d3:a0:5b:00:34:94:1c:a7:
40:1b:69:fd:ae:08:56:28:02:7f:d1:0f:d0:9a:fc:7b:21:96:
84:c5:84:7d:1c:06:3b:f2:e8:ca:77:57:67:0e:ed:66:b4:08:
d9:b8:a3:0b:81:2b:27:be:0b:de:ef:cc:96:02:5e:ec:6e:89:
69:fb:8a:6c:30:6e:a0:a5:57:41:ba:a1:a6:67:08:04:41:5c:
f7:41:5d:d9:f8:6a:79:7b:ed:f8:34:2c:e3:66:a7:1d:23:20:
be:0e:51:b6:ee:82:aa:e9:7a:3b:66:cd:4f:ab:28:31:25:e9:
16:cd:65:ef:7e:62:8f:72:75:1a:c5:89:87:8d:be:6c:f0:cd:
26:1d:d3:e2:c5:39:2c:c2:64:31:ed:80:46:7e:56:ee:d5:d3:
d9:d3:46:a4:56:b0:c9:6d:90:bc:e5:39:8a:a8:5e:dc:91:92:
0f:f1:c3:b4:5c:fb:0a:ec:fa:b1:1d:ec:8a:dc:62:39:89:e0:
43:6e:d7:bc:d3:ec:59:49:0d:8c:8c:86:0b:91:5d:a9:33:83:
64:c1:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:46 2024 by rpki-client on console-ams.rpki-client.org