Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/Av5AOX1zY3_gDOQRQn4vAPgeoM4.roa
File: Av5AOX1zY3_gDOQRQn4vAPgeoM4.roa (raw, json)
Hash identifier: cOORUU/x4tZetgZs7FP0/EAfoZ2Mrp9a+fnx7IfeXZk=
Subject key identifier: 02:FE:40:39:7D:73:63:7F:E0:0C:E4:11:42:7E:2F:00:F8:1E:A0:CE
Certificate issuer: /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial: 018851C9929A7443ED07AD8645F5D1B85FE2
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/Av5AOX1zY3_gDOQRQn4vAPgeoM4.roa
Signing time: Thu 25 May 2023 07:22:24 +0000
ROA not before: Thu 25 May 2023 07:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60304
IP address blocks: 185.33.35.0/24 maxlen: 24
185.33.34.0/24 maxlen: 24
185.33.33.0/24 maxlen: 24
185.33.32.0/24 maxlen: 24
2a04:5900::/48 maxlen: 48
2a04:5901:7::/48 maxlen: 48
2a04:5901:22::/48 maxlen: 48
2a04:5901:18::/48 maxlen: 48
2a04:5901:29::/48 maxlen: 48
2a04:5901:e::/48 maxlen: 48
2a04:5901:1f::/48 maxlen: 48
2a04:5901:4::/48 maxlen: 48
2a04:5901:15::/48 maxlen: 48
2a04:5901:b::/48 maxlen: 48
2a04:5901:1::/48 maxlen: 48
2a04:5901:26::/48 maxlen: 48
2a04:5901:17::/48 maxlen: 48
2a04:5901:d::/48 maxlen: 48
2a04:5900:1::/48 maxlen: 48
2a04:5901:3::/48 maxlen: 48
2a04:5901:28::/48 maxlen: 48
2a04:5901:1e::/48 maxlen: 48
2a04:5901:14::/48 maxlen: 48
2a04:5901:25::/48 maxlen: 48
2a04:5901:a::/48 maxlen: 48
2a04:5901:1b::/48 maxlen: 48
2a04:5901:11::/48 maxlen: 48
2a04:5901:27::/48 maxlen: 48
2a04:5901:c::/48 maxlen: 48
2a04:5901:1d::/48 maxlen: 48
2a04:5901:2::/48 maxlen: 48
2a04:5901:13::/48 maxlen: 48
2a04:5901:9::/48 maxlen: 48
2a04:5900::/32 maxlen: 32
2a04:5901:24::/48 maxlen: 48
2a04:5901:1a::/48 maxlen: 48
2a04:5901:10::/48 maxlen: 48
2a04:5901:21::/48 maxlen: 48
2a04:5901:6::/48 maxlen: 48
2a04:5901:1c::/48 maxlen: 48
2a04:5901:12::/48 maxlen: 48
2a04:5901:23::/48 maxlen: 48
2a04:5901:8::/48 maxlen: 48
2a04:5900::/29 maxlen: 29
2a04:5901:19::/48 maxlen: 48
2a04:5901:f::/48 maxlen: 48
2a04:5901:5::/48 maxlen: 48
2a04:5901:2a::/48 maxlen: 48
2a04:5901::/32 maxlen: 32
2a04:5901:20::/48 maxlen: 48
2a04:5901:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 May 2023 08:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:c9:92:9a:74:43:ed:07:ad:86:45:f5:d1:b8:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Validity
Not Before: May 25 07:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02fe40397d73637fe00ce411427e2f00f81ea0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:f4:c7:1b:c8:fb:34:a0:f4:c9:cc:0e:19:
5a:bb:94:40:de:d8:54:64:63:e5:20:b4:ed:4b:b5:
64:2a:27:08:b0:15:9a:6f:3f:a1:aa:d3:0a:c5:f8:
6f:2f:3f:02:67:bc:4e:78:0e:1d:bd:c0:da:3b:87:
02:13:cc:c6:10:52:3a:4c:02:c5:7c:8b:8e:87:49:
86:51:38:ad:75:3b:20:87:c2:91:ed:9b:41:01:c3:
18:31:83:47:9f:3f:53:c3:c0:de:4b:64:88:8a:01:
cb:65:fb:5d:1f:6d:94:2c:68:90:7f:8f:ef:eb:00:
3b:13:17:6b:c0:97:66:5b:50:19:c8:bc:eb:65:4a:
bf:90:b6:0b:f1:44:4f:60:57:3e:7d:10:7c:64:f5:
52:be:e0:86:49:d9:14:b3:aa:5f:bf:f2:7b:7c:92:
cc:2e:77:41:7e:f6:76:47:db:26:34:5d:67:a0:bc:
d1:14:47:58:b4:2c:59:6e:24:30:89:85:0a:e6:dd:
23:eb:35:54:ec:f0:66:bb:58:b6:12:2a:c6:b7:3b:
e7:82:e5:e7:19:ad:e7:f8:59:a0:06:b7:6e:54:c1:
68:b4:c3:62:a7:21:74:62:47:5e:68:dd:bd:0d:c3:
f5:bb:79:fb:40:88:e9:9c:d8:f6:2b:8d:76:2d:4c:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:40:39:7D:73:63:7F:E0:0C:E4:11:42:7E:2F:00:F8:1E:A0:CE
X509v3 Authority Key Identifier:
keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/Av5AOX1zY3_gDOQRQn4vAPgeoM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.32.0/22
IPv6:
2a04:5900::/29
Signature Algorithm: sha256WithRSAEncryption
8b:01:c8:d3:be:64:2a:20:ed:7b:3b:e6:23:73:f8:05:d9:94:
41:6d:3c:6a:26:35:aa:9e:93:98:9e:20:36:a1:21:71:ff:1c:
8f:0c:27:94:45:36:09:fb:53:9a:4e:4d:ac:bc:1e:6b:1a:16:
67:0d:02:f7:15:2f:b7:9b:26:65:b7:36:4d:55:41:b0:64:f2:
9d:c6:cf:34:6a:b3:41:f6:53:01:f9:f6:66:6a:65:4c:ea:cc:
89:e4:b4:a7:b8:b4:a6:ce:08:af:81:de:21:9b:76:da:cf:29:
bd:70:dd:a7:0c:eb:09:1c:ce:de:e6:78:fd:3d:fd:9f:6b:80:
36:ed:b6:5f:a6:c1:2b:c5:2d:95:86:f1:6a:3f:73:e0:26:da:
37:28:88:57:d0:85:90:08:75:6c:3e:e4:d6:a3:85:ed:18:1d:
06:c2:c4:58:38:e4:d8:67:76:3f:31:c9:69:23:e0:7d:b4:f5:
89:6d:85:8b:fa:b1:18:5e:4b:cd:27:e0:f7:4c:50:55:56:f5:
06:4d:13:d5:48:e1:25:ec:f4:61:82:79:d3:67:81:9d:89:3d:
d8:a0:ba:d4:39:08:5a:d5:c6:11:b1:42:04:17:84:6c:97:f8:
13:27:0a:bc:a7:4f:f4:35:5e:ae:b5:01:39:a3:68:c0:fb:c6:
1e:4a:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org