Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/OI8WM2drjs_xOlybyFLx-6WQNN4.roa
File: OI8WM2drjs_xOlybyFLx-6WQNN4.roa (raw, json)
Hash identifier: kS0yfnQp7CHujtygn+HSuaituE49QXFl7oW5xIFRd0A=
Subject key identifier: 38:8F:16:33:67:6B:8E:CF:F1:3A:5C:9B:C8:52:F1:FB:A5:90:34:DE
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 01856EA6AA9E2599AA33A98D5388E4ACCF01
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/OI8WM2drjs_xOlybyFLx-6WQNN4.roa
Signing time: Sun 01 Jan 2023 18:44:54 +0000
ROA not before: Sun 01 Jan 2023 18:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33891
IP address blocks: 92.43.104.0/21 maxlen: 21
92.43.109.0/24 maxlen: 24
92.43.110.0/24 maxlen: 24
92.43.106.0/24 maxlen: 24
92.43.107.0/24 maxlen: 24
92.43.108.0/24 maxlen: 24
80.255.0.0/20 maxlen: 20
5.56.16.0/21 maxlen: 21
82.199.149.0/24 maxlen: 24
82.199.151.0/24 maxlen: 24
82.199.152.0/24 maxlen: 24
82.199.146.0/24 maxlen: 24
82.199.147.0/24 maxlen: 24
82.199.148.0/24 maxlen: 24
83.142.80.0/21 maxlen: 21
82.199.153.0/24 maxlen: 24
82.199.154.0/24 maxlen: 24
195.138.249.0/24 maxlen: 24
195.138.250.0/24 maxlen: 24
195.138.248.0/21 maxlen: 21
82.199.157.0/24 maxlen: 24
82.199.158.0/24 maxlen: 24
82.199.159.0/24 maxlen: 24
31.7.176.0/20 maxlen: 20
31.7.182.0/24 maxlen: 24
31.7.183.0/24 maxlen: 24
81.95.0.0/20 maxlen: 20
81.95.8.0/24 maxlen: 24
81.95.9.0/24 maxlen: 24
82.199.128.0/19 maxlen: 19
82.199.130.0/24 maxlen: 24
82.199.131.0/24 maxlen: 24
82.199.128.0/24 maxlen: 24
82.199.138.0/24 maxlen: 24
82.199.141.0/24 maxlen: 24
82.199.142.0/24 maxlen: 24
82.199.143.0/24 maxlen: 24
82.199.144.0/24 maxlen: 24
82.199.145.0/24 maxlen: 24
2a01:4a0:47::/48 maxlen: 48
2a01:4a0:62::/48 maxlen: 48
2a01:4a0:30::/48 maxlen: 48
2a01:4a0:e::/48 maxlen: 48
2a01:4a0:48::/48 maxlen: 48
2a01:4a0:b::/48 maxlen: 48
2a01:4a0:5::/48 maxlen: 48
2a01:4a0:45::/48 maxlen: 48
2a01:4a0::/32 maxlen: 32
2a01:4a0:42::/48 maxlen: 48
2a01:4a0:38::/48 maxlen: 48
2a01:4a0:56::/48 maxlen: 48
2a01:4a0:50::/48 maxlen: 48
2a01:4a0::/29 maxlen: 29
2a01:4a0:17::/48 maxlen: 48
2a01:4a0:46::/48 maxlen: 48
2a01:4a0:43::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:aa:9e:25:99:aa:33:a9:8d:53:88:e4:ac:cf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Jan 1 18:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=388f1633676b8ecff13a5c9bc852f1fba59034de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2a:43:a3:a7:f2:a3:85:1a:b0:20:13:ad:55:
df:39:06:0b:bb:5a:59:73:d7:4e:1c:5b:45:30:40:
44:f8:ba:01:ad:41:60:4e:3a:5c:51:fd:c7:a1:89:
bc:e5:8f:5d:59:d6:e9:37:be:8f:ad:78:fe:63:3f:
1c:f6:9f:b5:43:65:a2:5c:c9:9a:a6:e1:51:4b:fb:
1e:08:c0:f4:d9:e0:50:8f:fe:d1:47:05:a4:da:01:
36:65:ab:68:d1:90:d3:6a:06:63:f7:e4:44:1b:48:
49:3e:71:e2:e5:3a:19:7b:4a:f7:d3:19:8d:1b:1f:
28:c7:93:39:f2:3e:20:e4:67:a2:17:e6:ed:22:5c:
07:7c:67:cc:1d:ee:91:99:fc:08:2f:e6:56:c7:bd:
30:8c:9e:97:60:fb:42:f5:69:9a:bb:8f:fe:5b:1b:
4a:52:77:86:d9:b6:1e:b0:52:90:10:3f:ee:86:d7:
40:8d:2f:dc:d5:98:20:48:06:80:e1:b3:70:82:18:
56:b3:d2:31:9c:09:d7:e6:39:f3:c4:f4:61:8b:9c:
10:5f:d0:30:d7:97:6e:3b:3a:ae:93:1b:c1:a4:07:
e9:97:8d:7e:bd:51:08:ca:90:bb:b5:db:2d:35:87:
df:72:f7:5e:16:2b:2e:58:93:92:be:70:d2:40:0c:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8F:16:33:67:6B:8E:CF:F1:3A:5C:9B:C8:52:F1:FB:A5:90:34:DE
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/OI8WM2drjs_xOlybyFLx-6WQNN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.16.0/21
31.7.176.0/20
80.255.0.0/20
81.95.0.0/20
82.199.128.0/19
83.142.80.0/21
92.43.104.0/21
195.138.248.0/21
IPv6:
2a01:4a0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:7c:13:b9:72:a4:b4:67:6b:4e:46:3c:09:72:24:2f:9b:9b:
63:0d:99:1a:bf:60:22:35:3d:e7:58:78:8f:67:fd:01:3f:b4:
5d:52:61:95:da:b0:77:ba:7d:97:8c:3f:6a:70:81:3a:03:66:
7e:fa:0a:d6:42:64:a8:86:5d:ef:a8:a3:26:fa:f8:d9:00:99:
a1:76:75:35:6a:2f:98:bc:b8:fe:e4:89:f0:25:48:8b:6f:99:
d1:16:37:7e:ca:77:d7:96:8f:f6:c3:fc:b7:41:99:f4:bd:93:
d3:fb:ee:9e:19:94:4e:93:82:e5:c8:48:07:bd:d3:d4:3f:2a:
97:c7:14:ba:d9:c5:6b:2f:59:fb:e7:c2:fe:b6:73:ba:2e:41:
d5:d5:35:a4:32:6d:97:eb:15:02:62:c0:35:1b:c7:3c:09:97:
65:54:76:e8:e1:8f:32:a1:99:73:1d:9c:95:c0:ae:29:db:f3:
54:9d:b9:f0:a2:6d:47:19:38:e8:80:06:69:4d:ed:d0:63:7e:
49:e5:ee:6c:5f:21:33:a3:df:4e:24:66:e0:cd:d5:44:c8:cf:
8e:cd:78:58:62:fa:d7:0e:0c:49:c6:8f:19:5f:60:04:59:47:
e5:82:01:88:d3:9e:b4:68:77:0c:06:a2:68:10:91:e9:d1:e7:
a3:37:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:44 2024 by rpki-client on console-fra.rpki-client.org