Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/OOV2-t1hnAmpWOvzlE56Tsx-uPQ.roa
File: OOV2-t1hnAmpWOvzlE56Tsx-uPQ.roa (raw, json)
Hash identifier: HIP5Rh0eOuZsLxU6si33hAZtmxh7POAmfpyjpvBj6X4=
Subject key identifier: 38:E5:76:FA:DD:61:9C:09:A9:58:EB:F3:94:4E:7A:4E:CC:7E:B8:F4
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 018F4F8B8D0C2658128D75DA7F5DC2D7CB76
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/OOV2-t1hnAmpWOvzlE56Tsx-uPQ.roa
Signing time: Mon 06 May 2024 20:14:56 +0000
ROA not before: Mon 06 May 2024 20:14:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41155
IP address blocks: 45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
45.158.139.0/24 maxlen: 24
77.75.231.0/24 maxlen: 24
109.107.134.0/24 maxlen: 24
185.34.103.0/24 maxlen: 24
185.89.23.0/24 maxlen: 24
185.222.215.0/24 maxlen: 24
188.244.116.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
194.1.200.0/24 maxlen: 24
2a0d:8e80:2659::/48 maxlen: 48
2a0d:8e80:8080::/48 maxlen: 48
2a0d:8e80:8a80::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:8b:8d:0c:26:58:12:8d:75:da:7f:5d:c2:d7:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: May 6 20:14:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38e576fadd619c09a958ebf3944e7a4ecc7eb8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:5d:6e:07:d7:8c:d7:3d:92:ea:ea:cc:2e:
be:fc:37:85:b5:6b:1c:01:02:a5:6b:ba:4d:ac:d9:
11:e1:5d:aa:0d:b4:36:3f:f5:45:4b:26:1d:b7:82:
c6:b7:71:cb:79:f3:73:db:2c:41:be:c9:f8:14:e1:
27:db:77:fb:2d:ef:a6:79:d2:0a:ad:d9:17:3f:9a:
77:31:58:3c:a2:ec:6e:68:74:1f:a2:b9:ce:32:1f:
c9:ab:96:6d:29:c5:53:42:46:a9:ee:0f:90:40:a4:
06:f4:74:ba:4d:e8:68:36:33:93:dd:96:8c:ad:e2:
d5:32:87:f2:e5:43:14:02:1f:06:8f:1e:6a:0d:66:
23:5e:92:4a:73:82:57:48:09:56:37:5b:84:c6:b0:
51:fa:a0:9b:0c:72:e4:ee:13:a6:92:b9:0f:85:b1:
1b:d0:01:f2:5e:b1:54:f5:fb:ce:8e:a3:59:01:b0:
ca:41:bb:6e:ca:c7:da:94:b3:50:8a:02:0f:7a:cf:
86:d4:c7:78:89:4d:b2:e2:b5:3c:73:ef:2f:e8:c5:
6f:e6:73:9f:ac:21:01:20:21:ee:3c:0b:e9:7a:2f:
c8:36:7f:7c:63:c5:0b:fd:b8:48:99:e1:8c:ce:c2:
6f:26:39:c5:da:06:dc:f0:d9:3a:a1:9f:81:91:40:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:76:FA:DD:61:9C:09:A9:58:EB:F3:94:4E:7A:4E:CC:7E:B8:F4
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/OOV2-t1hnAmpWOvzlE56Tsx-uPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.72.0/22
45.158.136.0/22
77.75.231.0/24
109.107.134.0/24
185.34.103.0/24
185.89.23.0/24
185.222.215.0/24
188.244.116.0/24
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
194.1.200.0/24
IPv6:
2a0d:8e80:2659::/48
2a0d:8e80:8080::/48
2a0d:8e80:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
6a:ad:eb:38:26:17:f9:ee:fd:e0:ec:e8:90:43:d0:6e:5c:70:
20:ee:84:45:59:9e:74:b3:9c:02:ca:e6:ea:40:06:cb:cb:f6:
16:7a:4b:43:95:1f:cd:f0:47:68:62:62:ec:a5:78:d6:2d:fe:
63:8a:99:40:10:ab:b5:4d:b8:5a:8c:ef:5e:34:c0:7c:3c:fa:
13:c0:93:1b:67:3b:0f:e7:33:ee:f7:45:df:7b:3f:13:31:b6:
7f:80:8f:9b:1f:61:32:ff:21:df:50:dd:77:1b:69:99:a9:f0:
f0:93:5f:b8:3a:5a:3e:35:07:a5:ec:61:3c:0e:ce:87:2a:14:
8a:81:02:87:89:db:7f:bd:78:a0:b4:2a:15:13:20:95:b8:a2:
4e:16:37:36:58:60:8b:f4:85:dd:68:f8:9e:e3:66:68:cd:f6:
63:ba:cf:20:e1:a9:27:f9:91:bf:5b:7b:cf:8d:7c:a5:0e:1c:
f9:ee:a3:4f:bb:77:2c:4a:96:f2:2f:fc:ef:4d:ba:17:b9:33:
9c:f6:14:a9:86:4e:dd:c0:82:74:be:20:92:eb:a7:2a:bb:e2:
8d:e4:6a:4d:74:3a:50:d3:c8:8a:17:56:c6:6e:44:5e:02:28:
35:f3:81:fe:89:1c:f4:8e:da:7e:97:02:47:4c:01:d1:5d:c1:
1a:3d:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:53 2025 by rpki-client