Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/oE2yguTNfgqwTtJtAhJ5YDLeefE.roa
File: oE2yguTNfgqwTtJtAhJ5YDLeefE.roa (raw, json)
Hash identifier: XgFrLjrwXA0wMAz3p8baT0nJC+NuFriJvDXlzmVDfNE=
Subject key identifier: A0:4D:B2:82:E4:CD:7E:0A:B0:4E:D2:6D:02:12:79:60:32:DE:79:F1
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01926C06B6128F848FF973F88F0012EC9990
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/oE2yguTNfgqwTtJtAhJ5YDLeefE.roa
Signing time: Tue 08 Oct 2024 12:07:11 +0000
ROA not before: Tue 08 Oct 2024 12:07:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24796
IP address blocks: 185.33.108.0/22 maxlen: 22
185.33.108.0/23 maxlen: 23
185.33.108.0/24 maxlen: 24
185.33.109.0/24 maxlen: 24
185.33.110.0/23 maxlen: 23
185.33.110.0/24 maxlen: 24
185.33.111.0/24 maxlen: 24
193.24.29.0/24 maxlen: 24
193.201.40.0/24 maxlen: 24
2a0f:80::/32 maxlen: 32
2a0f:80:1::/48 maxlen: 48
2a0f:80:2::/48 maxlen: 48
2a0f:80:3::/48 maxlen: 48
2a0f:80:a::/48 maxlen: 48
2a0f:80:b::/48 maxlen: 48
2a0f:80:c::/48 maxlen: 48
2a0f:80:d::/48 maxlen: 48
2a0f:80:e::/48 maxlen: 48
2a0f:80:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Oct 2024 07:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:06:b6:12:8f:84:8f:f9:73:f8:8f:00:12:ec:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Oct 8 12:07:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04db282e4cd7e0ab04ed26d0212796032de79f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:e3:0d:60:4a:8f:b2:58:94:48:d7:48:5a:
4b:91:bb:97:1e:4e:54:ba:6c:8d:7a:8b:33:30:a3:
70:a7:1e:96:94:dc:bc:ed:ab:bf:7d:98:5b:42:fc:
24:e7:8b:b0:22:81:f5:d5:21:e6:06:49:d1:45:71:
7e:99:25:08:d7:90:b5:10:98:80:aa:43:96:6f:c8:
80:ba:79:52:9d:8a:2a:8a:37:33:43:e2:a6:0c:4d:
1b:48:8e:ce:da:cc:e4:e1:ac:07:f7:75:1c:ac:a1:
ab:84:04:9d:dd:c7:f7:d2:46:fa:81:1b:d3:cd:a4:
7f:af:eb:50:11:5c:ed:fe:bd:c7:a6:92:dc:d4:01:
f8:59:64:58:34:c4:72:65:4c:47:0c:32:9a:d8:fe:
64:69:30:73:a4:f4:c5:40:4e:59:80:b4:85:ae:2e:
db:da:dc:0f:cc:1b:15:35:0b:a3:96:72:91:0a:67:
5e:5e:0a:d2:e3:7b:e9:7a:53:82:07:94:07:26:c4:
6d:08:55:9f:21:2c:e0:a3:93:6f:60:28:80:c9:d9:
d8:22:fa:c5:2f:28:9b:4b:fe:37:ba:5c:ee:9f:8f:
cf:46:5a:ce:a2:a1:37:f0:1f:88:d0:ac:ac:86:4d:
c7:aa:1f:f2:a5:d6:09:00:0d:6d:f4:42:89:de:bc:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:B2:82:E4:CD:7E:0A:B0:4E:D2:6D:02:12:79:60:32:DE:79:F1
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/oE2yguTNfgqwTtJtAhJ5YDLeefE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.108.0/22
193.24.29.0/24
193.201.40.0/24
IPv6:
2a0f:80::/32
Signature Algorithm: sha256WithRSAEncryption
1a:e4:c0:20:e6:16:08:83:2b:c5:81:bb:d2:34:64:70:04:30:
1d:50:53:d5:66:93:ec:db:c5:ac:40:51:55:3f:24:01:68:90:
6f:62:2c:7a:e8:80:c9:11:29:44:b8:9e:e9:cd:33:c0:35:06:
a9:f9:e6:65:4a:f8:ed:67:12:d2:58:d4:61:7e:e3:6e:cc:03:
93:79:f7:79:c6:dd:4d:4c:39:08:59:57:ad:17:26:a3:d7:61:
ce:5b:33:b6:f4:19:3e:9c:15:dc:ff:bc:42:5c:11:c0:fa:57:
97:68:2b:98:19:a7:4b:27:4d:2e:84:3b:ee:bf:b1:d5:c8:eb:
e3:4d:6c:49:c5:2d:c9:1d:a8:2e:d0:65:c3:26:2e:c0:38:80:
37:03:4c:c4:0c:75:f2:c0:a6:f1:de:9d:c1:0e:e0:60:67:2c:
14:07:ee:3b:49:49:77:d7:ea:47:51:6b:46:3a:0e:9f:f0:52:
8d:71:c0:85:f0:33:5f:26:18:6e:53:a2:4e:44:b5:b6:df:17:
e8:59:c3:b1:23:e7:ab:d6:57:f5:00:97:9a:22:fd:7f:c1:f7:
1d:a3:59:e2:9f:28:87:99:d5:7f:ad:43:2d:6b:29:bb:ae:c6:
80:b9:68:bf:c6:78:c5:91:7b:2a:f9:30:f9:49:11:bc:15:33:
9a:78:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 10:02:37 2024 by rpki-client on console-ams.rpki-client.org