Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/ovSO7D3rn3gd9g788oMzqMvmS5M.roa
File: ovSO7D3rn3gd9g788oMzqMvmS5M.roa (raw, json)
Hash identifier: GWkKXOsgtrWwECuYhmbY7zILZCB5i1h/DKVANdMqwVg=
Subject key identifier: A2:F4:8E:EC:3D:EB:9F:78:1D:F6:0E:FC:F2:83:33:A8:CB:E6:4B:93
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 018CC80123452F2BC3F3F3F73D32ED258BA5
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/ovSO7D3rn3gd9g788oMzqMvmS5M.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51941
IP address blocks: 185.128.252.0/22 maxlen: 22
185.128.255.0/24 maxlen: 24
46.183.76.0/23 maxlen: 23
46.183.72.0/23 maxlen: 23
46.183.72.0/21 maxlen: 21
46.183.78.0/24 maxlen: 24
46.183.74.0/23 maxlen: 23
2a02:2380::/32 maxlen: 32
2a02:2380:ff00::/48 maxlen: 48
2a02:2380:4::/48 maxlen: 48
2a02:2380:2::/48 maxlen: 48
2a02:2380:3::/48 maxlen: 48
2a02:2380:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:23:45:2f:2b:c3:f3:f3:f7:3d:32:ed:25:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2f48eec3deb9f781df60efcf28333a8cbe64b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:02:31:11:95:c6:a1:b4:6d:7d:5f:57:78:
0f:71:28:6c:17:c4:88:66:b4:53:12:48:ec:c9:68:
3c:75:cc:42:9d:7d:4a:25:ce:2b:1a:56:29:ad:1a:
e0:96:68:5e:83:6f:87:31:24:22:8a:bf:5a:e5:0c:
8a:0b:ac:5d:1c:e5:e4:2a:4c:99:9d:3e:e4:8a:c4:
70:3d:7b:71:9f:ea:be:c9:bf:73:db:ad:ad:6d:47:
a7:97:54:d9:e4:1c:99:62:c4:09:f5:38:5f:80:7f:
a3:10:7c:7b:f0:19:36:a5:79:43:aa:6f:03:e9:d7:
87:26:02:67:51:d6:cd:3a:1e:e0:8b:84:9d:e8:1f:
c1:b2:df:14:a6:30:34:eb:da:12:73:57:f2:43:cf:
db:b6:8e:91:12:83:44:08:62:5a:b5:83:11:b7:30:
a4:ab:3e:ac:fa:e3:1c:1f:3a:66:d8:7c:86:34:b5:
dd:ab:27:a5:42:cb:21:2f:82:11:f5:b1:de:fe:58:
5a:e1:bf:ed:39:69:13:0c:fb:8c:f0:06:a0:52:7c:
28:44:29:26:20:ea:46:91:23:62:c3:da:06:10:15:
8f:a1:a3:b8:ef:02:8a:ac:8e:08:de:59:75:b5:54:
a8:48:60:58:85:72:58:c0:27:6f:4a:d1:db:0a:37:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:8E:EC:3D:EB:9F:78:1D:F6:0E:FC:F2:83:33:A8:CB:E6:4B:93
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/ovSO7D3rn3gd9g788oMzqMvmS5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.72.0/21
185.128.252.0/22
IPv6:
2a02:2380::/32
Signature Algorithm: sha256WithRSAEncryption
7c:6a:f6:5f:9a:cd:96:e5:92:85:de:d3:3c:7f:c6:16:46:9c:
3a:1b:97:09:f0:76:cf:f0:9d:29:35:52:81:57:2c:13:a8:41:
b7:12:b4:e5:a0:89:62:76:c4:93:fa:93:cc:d3:94:f4:a4:22:
6a:78:fc:c6:9b:8b:f6:49:cc:36:53:ad:f8:ea:55:2a:15:80:
73:9a:61:d9:6f:32:76:bf:f4:4a:cc:00:cb:66:d3:ee:c8:fd:
55:6b:71:4e:5f:c5:1e:b9:ab:3c:45:e3:68:e4:4d:a0:4f:a4:
1d:09:47:4e:b4:c2:f7:38:c0:a7:70:63:89:2e:d2:b5:01:b3:
36:bd:c4:9d:d6:3d:4f:e2:78:de:c6:1e:76:1e:6f:38:d4:d3:
fd:38:14:fa:fa:ab:78:03:45:a5:94:54:2a:ad:dc:c0:c6:1f:
a5:0a:cd:6c:a6:7e:aa:05:2a:b0:9e:e0:49:6c:4b:13:de:43:
7c:5e:50:3f:95:c5:ae:17:17:7e:66:43:82:b9:0b:0c:9a:1d:
80:28:5f:05:e2:50:96:22:f1:fd:ef:8c:0d:5a:d6:40:8b:ed:
65:94:15:37:95:88:2e:a1:fd:66:92:6b:61:0f:fe:90:18:8f:
aa:7f:b9:1a:9e:b9:b6:76:88:5b:32:8f:b9:80:df:0f:db:6e:
9f:0d:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:02 2025 by rpki-client