Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/ocfR52LdMV4Ckgz3RHSTtq2cvjw.roa
File: ocfR52LdMV4Ckgz3RHSTtq2cvjw.roa (raw, json)
Hash identifier: 8Urx2mB6ayitIB2C70lSJgDpRxVmdLxnctoMT17S7Lk=
Subject key identifier: A1:C7:D1:E7:62:DD:31:5E:02:92:0C:F7:44:74:93:B6:AD:9C:BE:3C
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 018F05AE6E5D4E37DA83CDA04C8EDF5F5C29
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/ocfR52LdMV4Ckgz3RHSTtq2cvjw.roa
Signing time: Mon 22 Apr 2024 12:01:08 +0000
ROA not before: Mon 22 Apr 2024 12:01:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48129
IP address blocks: 81.30.124.0/24 maxlen: 24
81.30.125.0/24 maxlen: 24
81.30.126.0/24 maxlen: 24
81.30.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 08:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:ae:6e:5d:4e:37:da:83:cd:a0:4c:8e:df:5f:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: Apr 22 12:01:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1c7d1e762dd315e02920cf7447493b6ad9cbe3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:c8:49:f4:e1:37:58:c1:d4:b0:d2:e0:d3:
8c:8c:f1:b0:bd:7e:a2:79:e8:18:a8:ae:2d:fb:4b:
6d:9f:27:eb:ca:f0:3a:51:7c:78:e8:89:24:33:ce:
cd:7a:c7:2a:e6:2f:bb:5f:6e:7f:47:15:22:74:90:
16:5c:d1:af:4a:40:b7:7f:0c:30:ed:dd:04:db:44:
d6:43:83:ec:9d:9f:05:22:37:c0:28:6e:2a:20:50:
35:fe:54:67:fd:79:5e:3f:9a:fb:1a:eb:a2:3b:51:
be:83:03:99:97:07:e5:16:55:f8:c8:03:44:40:fa:
e1:30:c9:9b:49:52:19:cd:1a:8b:8f:22:49:30:0f:
0f:45:4e:32:f9:bb:2f:42:eb:e9:69:1c:ba:a9:c2:
c7:16:4e:c0:77:fa:99:33:9f:7f:73:d0:fe:75:cb:
c3:1e:41:32:e9:cb:84:62:f4:91:72:f6:13:13:ef:
12:b9:3a:94:7b:98:d7:ae:93:d3:d3:67:2a:53:24:
70:86:2c:42:a1:bc:87:ca:6a:78:9f:31:e4:97:17:
0a:06:9f:c9:04:70:52:0f:58:e4:e7:74:2c:e5:5d:
fa:03:64:14:05:e6:96:64:92:e1:9f:6f:4a:16:9c:
08:7e:ff:9f:17:a7:32:06:1e:81:3a:d6:19:b8:10:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:D1:E7:62:DD:31:5E:02:92:0C:F7:44:74:93:B6:AD:9C:BE:3C
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/ocfR52LdMV4Ckgz3RHSTtq2cvjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:1d:f7:63:4f:12:72:03:33:ae:45:b4:58:f5:3b:5b:15:7a:
2b:5a:92:f7:0f:56:56:55:8b:d7:92:a1:ec:17:e2:92:48:92:
36:a8:31:19:79:25:eb:8a:76:c4:a0:6d:92:36:bf:b5:05:1b:
0d:d3:1a:d1:4a:20:a6:00:14:84:ce:85:46:f0:1b:81:06:fe:
1c:85:0a:eb:6a:de:04:22:e7:d7:d3:02:35:09:8c:9c:cf:12:
9c:bc:92:ae:15:7d:a5:b4:cd:0a:b2:46:34:0a:fc:3a:ee:70:
b0:d3:c2:86:71:02:4f:e1:bd:d8:fb:fe:db:cc:51:ce:91:d3:
6e:97:3b:dc:67:c6:d3:c8:a0:c3:d6:32:55:ce:b8:12:9f:4f:
6b:7a:7a:69:ac:8f:d8:d6:6e:7b:db:ce:27:f0:72:6a:a5:29:
c0:d0:6c:8d:61:86:e5:dd:43:b2:86:bf:51:0c:56:d5:45:73:
6b:31:da:3d:63:17:b8:3a:b7:c3:1c:ee:4f:53:da:cf:16:73:
ea:28:ec:d9:35:0c:ec:88:05:ee:56:2b:dc:23:b2:c9:e3:98:
e2:cd:df:e9:a2:71:57:50:82:54:1e:5d:8e:a2:f9:73:74:c2:
92:8a:cd:67:d5:f9:58:55:00:3d:9f:c0:dd:e2:97:76:ae:64:
14:13:2b:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8Frm5dTjfag82gTI7fX1wpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NThjYjExZTg0MmJjYWYxMzIzNjQ3ZjNiZWZlZWUyZmM2
ZjBlMmMwHhcNMjQwNDIyMTIwMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWM3ZDFlNzYyZGQzMTVlMDI5MjBjZjc0NDc0OTNiNmFkOWNiZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha/ISfThN1jB1LDS4NOMjPGwvX6i
eegYqK4t+0ttnyfryvA6UXx46IkkM87Nescq5i+7X25/RxUidJAWXNGvSkC3fwww
7d0E20TWQ4PsnZ8FIjfAKG4qIFA1/lRn/XleP5r7GuuiO1G+gwOZlwflFlX4yANE
QPrhMMmbSVIZzRqLjyJJMA8PRU4y+bsvQuvpaRy6qcLHFk7Ad/qZM59/c9D+dcvD
HkEy6cuEYvSRcvYTE+8SuTqUe5jXrpPT02cqUyRwhixCobyHymp4nzHklxcKBp/J
BHBSD1jk53Qs5V36A2QUBeaWZJLhn29KFpwIfv+fF6cyBh6BOtYZuBCkuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHH0edi3TFeApIM90R0k7atnL48MB8GA1UdIwQY
MBaAFFdYyxHoQryvEyNkfzvv7uL8bw4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMt
OGJiZjhiZmM2ZDhlLzEvb2NmUjUyTGRNVjRDa2d6M1JIU1R0cTJjdmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjgzMzAtOGJhMC00Yjg4LWE3YWMtOGJiZjhiZmM2ZDhl
LzEvVjFqTEVlaEN2SzhUSTJSX08tX3U0dnh2RGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUR58MA0G
CSqGSIb3DQEBCwUAA4IBAQCjHfdjTxJyAzOuRbRY9TtbFXorWpL3D1ZWVYvXkqHs
F+KSSJI2qDEZeSXrinbEoG2SNr+1BRsN0xrRSiCmABSEzoVG8BuBBv4chQrrat4E
IufX0wI1CYyczxKcvJKuFX2ltM0KskY0Cvw67nCw08KGcQJP4b3Y+/7bzFHOkdNu
lzvcZ8bTyKDD1jJVzrgSn09renpprI/Y1m57284n8HJqpSnA0GyNYYbl3UOyhr9R
DFbVRXNrMdo9Yxe4OrfDHO5PU9rPFnPqKOzZNQzsiAXuVivcI7LJ45jizd/ponFX
UIJUHl2OovlzdMKSis1n1flYVQA9n8Dd4pd2rmQUEyud
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org