Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o6WEXTHlaaMKNzd3D1uwLr7E7SE.roa
File: o6WEXTHlaaMKNzd3D1uwLr7E7SE.roa (raw, json)
Hash identifier: 8l/WTVjviUrnANlJM99wjBDNl/3bqvVPcL5DqpcBu1o=
Subject key identifier: A3:A5:84:5D:31:E5:69:A3:0A:37:37:77:0F:5B:B0:2E:BE:C4:ED:21
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC2804403D2295945199F0D480359A118
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o6WEXTHlaaMKNzd3D1uwLr7E7SE.roa
Signing time: Mon 19 Feb 2024 17:53:22 +0000
ROA not before: Mon 19 Feb 2024 17:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:80:44:03:d2:29:59:45:19:9f:0d:48:03:59:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 19 17:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3a5845d31e569a30a3737770f5bb02ebec4ed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:2f:67:71:73:81:c3:07:53:9b:a7:67:7c:
e6:ad:72:b4:7f:23:79:49:95:8a:9f:0d:ac:07:11:
8b:80:0e:f1:57:69:7b:0c:15:67:d9:fe:28:5d:06:
e5:b8:dd:00:43:39:35:d4:85:33:97:3a:e1:ed:90:
2d:d3:5f:2d:00:f6:5a:39:ba:2d:68:b7:ff:9f:4d:
2b:ca:f7:32:a9:d2:e3:dc:ad:e3:31:6a:2e:91:50:
85:43:83:be:74:02:75:f4:c2:12:28:0c:a2:7f:8d:
dd:7d:eb:cc:ef:a2:a8:c5:8a:ac:ab:0d:67:db:7a:
db:38:94:b8:e3:78:01:dd:6e:f5:5d:5d:16:f5:83:
05:c1:07:a0:98:f5:03:53:4b:e8:01:cc:6d:21:b7:
17:78:4a:db:01:7d:c8:fb:f5:c7:17:ce:71:1b:68:
ba:6c:f0:73:5b:24:dd:0b:49:7c:ac:13:60:5c:f8:
cf:16:67:d7:3d:0b:c5:36:92:ce:ad:c3:e0:c6:db:
b3:75:8d:c8:13:e0:4c:37:84:3e:c4:b2:d3:bb:46:
d1:ab:01:55:e6:0a:12:5d:6d:67:b5:b8:54:10:e7:
93:b1:fa:ee:51:5a:98:4a:c5:ad:14:b4:66:4f:6c:
0b:e5:9f:1f:1f:6b:3b:e7:25:a2:40:dd:f5:61:74:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:84:5D:31:E5:69:A3:0A:37:37:77:0F:5B:B0:2E:BE:C4:ED:21
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o6WEXTHlaaMKNzd3D1uwLr7E7SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
94.158.191.0/24
130.255.169.0/24
146.19.137.0/24
185.218.1.0/24
193.3.22.0/24
194.32.243.0/24
195.96.157.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a7:34:f9:9f:8b:e2:63:f7:f7:7d:cc:b1:b2:87:2a:79:cb:
e6:d5:a0:0a:35:9f:76:49:81:a3:06:cf:29:a2:53:21:6f:26:
35:99:a8:e6:d9:c4:f9:38:9d:c4:eb:98:63:d1:7d:6c:7c:fa:
49:35:b3:b7:1d:7b:6f:e6:a1:03:0f:c1:02:d8:33:dd:41:46:
af:22:98:3e:96:fc:b2:f8:e4:63:28:0c:44:41:92:2f:00:90:
ac:7b:fb:09:08:97:3c:0b:c7:f2:36:ba:b3:db:71:34:72:fc:
2f:08:4c:3b:a0:cd:7a:59:5c:c8:bb:73:d7:3b:42:e4:f2:eb:
b0:49:30:b3:ff:77:f8:80:5d:b2:87:8c:3c:ba:9d:d9:fd:b3:
32:5b:ed:90:27:6e:72:f2:c8:2e:31:75:68:bd:96:ee:84:b8:
82:3d:e7:78:a9:a6:85:97:21:8c:1e:5a:a3:c4:dd:a3:e6:15:
6e:66:3f:d8:b9:79:3b:09:a0:35:3c:f7:15:7b:4b:07:8a:d9:
88:e5:1c:87:65:e2:90:81:6d:68:1c:99:57:32:8e:16:0c:94:
6d:aa:8e:89:a5:7a:eb:45:68:17:ea:fd:ba:f4:1a:22:d3:78:
6c:2d:b0:e0:57:f7:97:07:91:e0:41:07:33:55:83:88:98:06:
b4:62:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org