Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/0nML3WJLGMRAFDwXkix-3CzPYSU.roa
File: 0nML3WJLGMRAFDwXkix-3CzPYSU.roa (raw, json)
Hash identifier: YoSt/IDoLTtbSi3y3PkAwX2CURDSFAIlyuMAnEwQ/Nc=
Subject key identifier: D2:73:0B:DD:62:4B:18:C4:40:14:3C:17:92:2C:7E:DC:2C:CF:61:25
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01889A0708F4FE58A7E57278C976C3044ACE
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/0nML3WJLGMRAFDwXkix-3CzPYSU.roa
Signing time: Thu 08 Jun 2023 08:02:12 +0000
ROA not before: Thu 08 Jun 2023 08:02:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 375
IP address blocks: 192.49.173.0/24 maxlen: 24
192.49.174.0/23 maxlen: 23
192.49.176.0/20 maxlen: 20
131.207.0.0/17 maxlen: 17
192.49.19.0/24 maxlen: 24
192.49.0.0/21 maxlen: 21
192.49.10.0/24 maxlen: 24
192.49.124.0/23 maxlen: 23
192.49.119.0/24 maxlen: 24
192.49.120.0/22 maxlen: 22
192.49.126.0/24 maxlen: 24
192.49.131.0/24 maxlen: 24
192.49.139.0/24 maxlen: 24
192.49.134.0/24 maxlen: 24
192.49.136.0/23 maxlen: 23
192.49.140.0/23 maxlen: 23
192.49.144.0/24 maxlen: 24
192.49.152.0/21 maxlen: 21
192.49.146.0/24 maxlen: 24
192.49.148.0/22 maxlen: 22
192.49.160.0/23 maxlen: 23
192.49.164.0/22 maxlen: 22
192.49.163.0/24 maxlen: 24
192.49.168.0/23 maxlen: 23
192.49.170.0/24 maxlen: 24
192.49.100.0/23 maxlen: 23
192.49.103.0/24 maxlen: 24
192.49.104.0/24 maxlen: 24
192.49.106.0/23 maxlen: 23
192.49.108.0/22 maxlen: 22
192.49.114.0/23 maxlen: 23
2a03:9b80::/34 maxlen: 34
Validation: Failed, certificate revoked on Thu 08 Jun 2023 12:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:07:08:f4:fe:58:a7:e5:72:78:c9:76:c3:04:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jun 8 08:02:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2730bdd624b18c440143c17922c7edc2ccf6125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:05:68:3d:b0:c6:d0:89:55:ac:c4:9d:0d:
d9:8d:48:a8:13:e3:b1:9f:15:c0:ec:ab:a1:9a:34:
7c:1d:10:7e:43:ea:ae:91:ca:e0:c2:0a:e4:cc:70:
d3:b7:a4:55:fb:01:c6:f8:92:0f:41:51:d2:ed:31:
bc:9d:83:df:09:ef:18:68:61:aa:72:09:bb:c7:6c:
26:39:45:d2:9b:40:72:0a:ca:4e:07:a2:11:ea:d9:
88:2e:6a:90:77:22:ab:0d:77:4b:d9:e8:35:bd:63:
10:43:16:16:cd:a2:1d:15:40:4f:d8:47:bf:4d:5b:
54:5c:eb:da:ba:08:42:85:7f:5c:6b:5c:ac:01:d0:
34:f8:e1:2b:b7:c9:98:f7:4a:e8:ca:26:2c:63:b3:
9e:af:44:9d:fd:c6:b7:df:36:29:69:1a:70:c8:c3:
7c:c0:0d:ba:70:fe:b2:a7:dc:52:b9:7c:ae:31:04:
b3:d7:92:75:8e:0d:c7:61:f7:ad:3c:00:16:ed:58:
e2:d0:f2:66:c7:08:ef:7f:79:0a:fb:5b:6b:63:ec:
c3:8f:25:3e:20:f4:07:55:bb:b1:41:3c:0b:96:56:
2d:a8:b0:0e:2b:f1:e8:c2:dc:48:54:26:22:48:4e:
36:cd:90:63:f4:6c:0f:87:b3:49:35:1c:56:83:2f:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:0B:DD:62:4B:18:C4:40:14:3C:17:92:2C:7E:DC:2C:CF:61:25
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/0nML3WJLGMRAFDwXkix-3CzPYSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.207.0.0/17
192.49.0.0/21
192.49.10.0/24
192.49.19.0/24
192.49.100.0/23
192.49.103.0-192.49.104.255
192.49.106.0-192.49.111.255
192.49.114.0/23
192.49.119.0-192.49.126.255
192.49.131.0/24
192.49.134.0/24
192.49.136.0/23
192.49.139.0-192.49.141.255
192.49.144.0/24
192.49.146.0/24
192.49.148.0-192.49.161.255
192.49.163.0-192.49.170.255
192.49.173.0-192.49.191.255
IPv6:
2a03:9b80::/34
Signature Algorithm: sha256WithRSAEncryption
41:d6:6b:d9:0b:01:ff:ac:b8:82:b3:18:41:99:c7:3e:df:99:
c0:9d:07:4b:a2:71:c5:cb:c0:13:e7:da:8b:eb:37:13:8e:b2:
07:3e:4f:e1:05:3a:22:ce:c2:4f:11:08:a6:ac:0d:2e:e8:cb:
3a:d3:f5:4e:f3:15:aa:3b:27:46:d6:12:f8:bf:8f:c8:57:e6:
7d:73:31:d4:ca:a0:43:06:c3:6e:dc:e4:30:7e:92:79:ca:ba:
45:76:c7:13:98:9b:d5:c1:53:ea:a2:fc:25:e6:04:1b:34:57:
90:4a:05:b4:69:b5:e9:23:c8:f3:e3:c0:59:a4:6b:2e:0d:95:
73:1f:1a:4b:36:08:46:e3:b3:d4:22:27:10:c9:17:71:a3:5b:
76:1b:bb:ee:a8:18:38:40:92:a8:64:9e:5f:be:5e:b5:9b:91:
d0:23:10:72:ea:c0:f5:2a:6f:92:78:fa:b5:db:83:1f:b9:c5:
d2:c9:9a:8f:56:a7:af:58:e5:20:10:4d:97:fe:bf:94:cb:e4:
4a:d9:f5:b7:9b:00:c7:fa:dc:59:88:5a:90:b8:c0:98:2a:b9:
f0:b7:e2:38:40:de:4e:38:fe:68:47:4e:c5:09:1d:a6:78:42:
5f:61:f5:6e:e3:ff:a5:d3:a5:71:ae:c1:53:88:38:4f:01:7d:
60:dc:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:01 2024 by rpki-client on console-fra.rpki-client.org