Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/OUjWo8TEZYuz-O7P9ADEhz-3F7w.roa
File: OUjWo8TEZYuz-O7P9ADEhz-3F7w.roa (raw, json)
Hash identifier: CvATtEWZO4bc4Xk3FGPyVF0pcROvyN9l39kV33FEwzM=
Subject key identifier: 39:48:D6:A3:C4:C4:65:8B:B3:F8:EE:CF:F4:00:C4:87:3F:B7:17:BC
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 018CC6B912D37B53C4073F4A775F2DBF09AF
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/OUjWo8TEZYuz-O7P9ADEhz-3F7w.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58262
IP address blocks: 185.73.112.0/24 maxlen: 24
185.73.114.0/24 maxlen: 24
5.61.24.0/24 maxlen: 24
5.61.25.0/24 maxlen: 24
92.119.58.0/24 maxlen: 24
5.61.31.0/24 maxlen: 24
5.61.26.0/24 maxlen: 24
5.61.28.0/24 maxlen: 24
5.61.30.0/24 maxlen: 24
92.119.57.0/24 maxlen: 24
92.119.56.0/24 maxlen: 24
5.61.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 15:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:12:d3:7b:53:c4:07:3f:4a:77:5f:2d:bf:09:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3948d6a3c4c4658bb3f8eecff400c4873fb717bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:4c:2f:33:36:1c:20:6a:ce:f7:c7:b3:03:
17:4e:b9:10:78:ca:d4:d5:73:07:b9:19:d5:4d:b0:
8f:41:a8:02:33:e6:74:01:81:d2:f2:a0:ca:cb:ae:
57:69:07:2d:7e:86:a4:31:67:2c:31:f0:0f:dd:c4:
be:18:1f:06:78:c8:7c:66:24:76:07:f2:fb:d1:cd:
2c:f9:14:a6:38:65:68:fa:61:3f:03:08:13:71:45:
36:4b:2e:32:95:5b:24:b7:2a:58:4b:90:ea:3d:ac:
bf:77:c7:c8:3f:8d:91:37:da:87:df:95:77:dc:9f:
24:58:b4:bf:16:25:b1:13:90:f4:1f:19:b0:3c:58:
52:d5:4b:0f:cd:96:54:3b:46:99:e8:ef:81:09:2b:
ff:f5:ce:54:c7:28:12:d2:ae:6b:47:61:04:a8:46:
09:35:64:64:1c:4a:6d:f7:df:e3:9c:48:57:d9:22:
47:3a:20:65:63:c8:59:cc:9f:8c:c9:55:b8:b3:67:
ce:7e:64:10:0c:6a:ae:a0:d8:d7:42:23:22:0e:84:
67:ba:21:8b:9e:8e:d5:bc:c1:ec:69:4a:04:cd:9d:
c2:27:a2:83:e1:12:7f:a1:b2:a3:d9:24:fd:39:ce:
53:9f:c9:58:23:85:d5:03:1a:7f:fb:cf:9e:ce:cc:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:D6:A3:C4:C4:65:8B:B3:F8:EE:CF:F4:00:C4:87:3F:B7:17:BC
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/OUjWo8TEZYuz-O7P9ADEhz-3F7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.24.0-5.61.26.255
5.61.28.0/22
92.119.56.0-92.119.58.255
185.73.112.0/24
185.73.114.0/24
Signature Algorithm: sha256WithRSAEncryption
01:64:cc:61:c8:aa:0f:92:f7:ba:e3:5f:2e:e6:b5:92:54:a7:
75:2f:68:86:77:4a:94:f7:ab:41:0d:bf:0b:34:ad:f6:ae:6f:
5e:15:f0:9b:10:d7:11:21:b5:b4:07:3c:8c:ac:57:51:7e:0f:
3f:45:e9:c0:3d:f6:e3:a4:26:af:2d:3a:2a:97:6e:41:7b:8e:
1d:33:15:78:32:5c:dc:9c:a0:ba:af:57:21:e9:aa:c6:4e:df:
d3:97:a7:39:23:d1:81:a1:ae:15:5a:b7:60:20:e5:c2:c7:66:
15:f0:1c:69:8c:14:2b:c9:97:1d:23:2d:65:df:f8:76:27:ed:
fc:7d:28:b8:c0:be:7b:c9:46:f6:1c:2b:45:41:a2:33:79:63:
e5:94:06:42:50:3e:e4:85:3d:6a:95:90:be:16:92:5c:e9:1e:
8c:3c:0c:70:ea:ba:c7:00:fd:59:15:af:30:5f:f6:2b:b6:95:
61:d7:91:70:79:07:25:61:be:cc:56:d5:10:c0:96:3e:9c:9a:
15:44:fd:68:66:12:87:09:db:14:1b:2a:af:62:f6:af:77:4e:
be:0d:4b:e5:f0:c6:fc:f1:c3:d9:19:1d:4c:54:c1:be:0c:96:
30:92:49:4a:21:c2:22:2c:6b:89:a2:cd:c4:d6:8a:60:56:cc:
43:41:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:29:19 2024 by rpki-client on console-fra.rpki-client.org