Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/C-ocNsoi7VN2SC03m6YFf6zu7h0.roa
File: C-ocNsoi7VN2SC03m6YFf6zu7h0.roa (raw, json)
Hash identifier: /1hhjDaBrCZ33pwHbV1g9VMK8kle7pmwMMx26yhhUeY=
Subject key identifier: 0B:EA:1C:36:CA:22:ED:53:76:48:2D:37:9B:A6:05:7F:AC:EE:EE:1D
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018ACC6616FF24AAF53B8CCF456C3EBFC37D
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/C-ocNsoi7VN2SC03m6YFf6zu7h0.roa
Signing time: Mon 25 Sep 2023 12:52:37 +0000
ROA not before: Mon 25 Sep 2023 12:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16839
IP address blocks: 148.139.48.0/20 maxlen: 20
148.139.64.0/20 maxlen: 20
148.139.80.0/20 maxlen: 20
37.98.233.0/24 maxlen: 24
37.98.232.0/21 maxlen: 24
37.98.236.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.234.0/24 maxlen: 24
148.139.4.0/22 maxlen: 22
148.139.1.0/24 maxlen: 24
148.139.0.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.8.0/22 maxlen: 22
163.120.128.0/17 maxlen: 24
148.139.0.0/16 maxlen: 24
148.139.12.0/22 maxlen: 22
148.139.16.0/22 maxlen: 22
148.139.29.0/24 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 20
148.139.96.0/22 maxlen: 22
148.139.105.0/24 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.100.0/22 maxlen: 22
148.139.108.0/22 maxlen: 22
148.139.112.0/22 maxlen: 22
148.139.116.0/22 maxlen: 22
148.139.125.0/24 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.120.0/22 maxlen: 22
138.12.128.0/17 maxlen: 24
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0::/29 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:66:16:ff:24:aa:f5:3b:8c:cf:45:6c:3e:bf:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 25 12:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bea1c36ca22ed5376482d379ba6057faceeee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:45:b3:5e:76:7b:eb:5d:56:93:38:0d:3a:
40:00:1b:07:a0:66:51:7e:c7:aa:d1:61:5b:40:91:
c9:a9:b3:92:9a:8f:7c:3f:a0:46:2a:f6:a5:e6:98:
4b:49:be:f0:c8:01:04:c7:b4:b6:59:24:54:2b:91:
48:25:30:29:b1:e7:be:8e:5e:0e:31:24:9d:f8:bd:
72:48:8b:bd:97:9e:b5:9f:25:27:5b:a3:cc:3a:0a:
68:bb:4c:24:ff:9c:26:65:8f:8a:73:b0:17:d7:1a:
95:53:73:b0:b4:4c:0a:b8:7a:10:4f:64:ff:b8:12:
bd:6b:76:a5:e4:f1:61:95:4d:ba:9c:3c:73:48:84:
09:31:12:72:f9:f4:74:46:3c:5b:85:06:36:3d:fa:
72:b8:fe:5c:aa:c8:e8:6a:cf:1d:d1:a2:e3:79:53:
25:f1:c9:7c:05:01:2b:27:f9:92:be:a2:2c:36:4a:
a5:99:59:5c:4c:f4:b2:e8:eb:61:e5:ff:e0:9a:af:
cd:3b:ce:1e:4d:4a:e1:5f:fa:c9:5b:f5:35:8f:44:
db:da:b4:8a:99:5b:e9:d7:bd:af:e4:b3:e0:6e:ca:
a8:bf:1c:02:4a:78:d3:bd:cc:d5:06:1b:ed:ab:89:
e0:19:7a:7d:75:cb:72:d4:c0:56:37:a9:95:ac:34:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:1C:36:CA:22:ED:53:76:48:2D:37:9B:A6:05:7F:AC:EE:EE:1D
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/C-ocNsoi7VN2SC03m6YFf6zu7h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:08:6b:c4:46:97:ef:28:ec:b2:70:1c:9e:a3:96:ac:6f:0c:
fb:c2:60:38:2d:5b:90:c7:48:ce:4a:01:d2:81:0d:26:3e:6a:
d4:27:a6:25:0d:6c:9f:df:bf:bf:62:e6:4c:b0:9f:24:45:71:
39:f6:d8:f7:59:ae:de:bf:ea:f8:80:47:66:ce:e6:6c:be:09:
e5:5d:ca:f4:ea:c1:04:f8:85:dd:13:a6:3b:ef:6b:49:8d:f8:
f3:70:1c:99:98:5e:2f:96:fc:3f:c7:6a:f4:81:c0:33:a1:b9:
55:79:60:1e:82:c8:a3:0e:eb:5d:05:20:c5:87:43:1f:39:96:
cd:bc:75:01:5b:c2:bc:80:68:a6:23:7d:51:55:5a:fc:a9:5a:
e8:b1:b5:e9:56:6e:16:cb:e8:8b:10:47:83:13:62:fb:fd:5b:
fd:be:5a:c6:7c:f1:2e:cb:9d:07:e1:d5:40:99:1d:a0:24:da:
e8:df:43:7b:b9:81:f0:95:40:4b:52:4e:65:f0:b9:18:7e:ec:
cc:ad:c2:5f:52:d1:aa:f9:fb:f6:d4:79:5d:47:10:0d:c1:bb:
ed:0f:fa:1f:48:93:d3:0e:ac:6e:79:4d:84:86:ef:ce:d5:92:
b3:4d:5a:9a:d5:fa:b5:3b:38:68:ca:63:b2:50:91:88:8e:a2:
c9:0c:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 15:19:03 2023 by rpki-client on console-ams.rpki-client.org