Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OPcp2O_2gYf4hSyplL4oBkDgqNI.roa
File: OPcp2O_2gYf4hSyplL4oBkDgqNI.roa (raw, json)
Hash identifier: kyhLl6OEGQPbrW1pbVN3nSEZkrkzn5F09jtlZ5E/2uM=
Subject key identifier: 38:F7:29:D8:EF:F6:81:87:F8:85:2C:A9:94:BE:28:06:40:E0:A8:D2
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018C5E7EEF8CBEC39E9617A3C397B6CCF801
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OPcp2O_2gYf4hSyplL4oBkDgqNI.roa
Signing time: Tue 12 Dec 2023 14:47:06 +0000
ROA not before: Tue 12 Dec 2023 14:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.178.110.0/24 maxlen: 24
5.178.108.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:7e:ef:8c:be:c3:9e:96:17:a3:c3:97:b6:cc:f8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Dec 12 14:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38f729d8eff68187f8852ca994be280640e0a8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:b4:92:cf:38:dc:a6:a7:2b:ac:57:d7:2e:
7d:3d:ee:57:63:49:22:78:19:0d:9d:00:db:a1:4f:
02:ea:77:34:8d:70:87:35:e4:39:0d:c8:98:7a:0f:
ad:f9:de:90:e6:d9:06:47:58:bd:12:df:8a:32:f4:
28:10:01:bf:d9:67:c7:dd:a5:a3:89:66:0f:0e:aa:
57:bc:68:0b:32:98:ce:b5:a1:2b:0a:ce:e8:fe:3c:
ea:18:0e:e1:fa:89:84:3e:dc:f2:3a:e2:68:30:61:
a2:ce:54:b1:8e:50:a7:fd:6c:71:24:2c:aa:92:c7:
46:02:07:c0:7d:f4:6a:61:93:92:6c:82:e9:67:1d:
91:fa:45:cd:f8:aa:c4:00:28:e0:0a:d3:77:ad:c3:
d1:32:ba:b3:8b:c5:b3:97:c4:63:e9:e0:a2:9e:e8:
c5:c3:09:f4:d0:c3:cf:b6:5d:c9:87:46:39:05:65:
4f:5c:d7:34:e2:3d:8d:28:02:14:56:b1:9d:9b:2d:
be:82:91:a2:9e:3e:de:87:e7:d3:e1:93:65:12:e0:
02:a1:49:2e:ea:d9:4d:43:7e:d0:8b:e3:cf:1a:f8:
40:eb:77:02:8b:71:e2:ed:1c:1c:bf:37:ab:62:fe:
84:5b:3c:fc:16:da:a9:24:df:bb:a3:6a:40:d4:34:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:29:D8:EF:F6:81:87:F8:85:2C:A9:94:BE:28:06:40:E0:A8:D2
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/OPcp2O_2gYf4hSyplL4oBkDgqNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.108.0-5.178.110.255
31.192.240.0/21
45.12.216.0/24
45.12.219.0/24
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:d1:71:b9:33:2e:d9:2f:39:73:6d:a5:da:00:98:ba:d9:9e:
bc:04:52:dc:84:7e:1f:cf:83:d3:d1:dc:c6:21:c7:f3:f4:1b:
b7:04:f2:fb:e4:0e:6c:8e:60:2b:c6:e0:87:02:ea:a9:e5:56:
ae:82:b0:a0:d3:22:4b:1b:a4:1e:d8:71:5a:9c:be:be:26:80:
8c:d9:37:62:19:05:70:34:07:28:72:23:e7:fb:a1:a5:35:4e:
38:39:b3:b4:b7:c1:5e:fc:b0:35:7b:bd:46:c9:6c:4e:3f:6d:
07:19:23:80:4e:62:41:b9:05:20:e7:1f:86:27:e1:ab:a0:89:
c0:70:b7:97:fb:9d:e1:ac:d9:df:19:bf:91:a0:5c:85:5f:fa:
70:2b:5b:d9:d7:fb:58:19:b9:95:7e:64:04:ec:54:e4:a7:02:
dc:25:a7:04:97:17:32:c3:c7:61:7c:4c:1f:b9:70:2a:5d:d0:
7b:c0:f9:51:b2:08:69:d8:75:b7:b9:21:c1:e6:94:15:6d:1b:
26:58:7a:fe:bf:83:2a:33:15:9a:a3:bd:7c:a6:47:bd:64:81:
6b:55:e9:71:9c:ac:b0:13:76:ec:8d:5b:fd:c9:84:ec:f4:f0:
b3:00:67:06:ef:74:81:ca:16:d0:a9:a1:37:1a:c6:90:60:7a:
dc:7d:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:14 2024 by rpki-client on console-fra.rpki-client.org