Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/ofg2JKdR-BH8o_lMZ85zm0yhGQk.roa
File: ofg2JKdR-BH8o_lMZ85zm0yhGQk.roa (raw, json)
Hash identifier: 6gBHMhc3Wy5fbAf45RKoTxtHKHtgngLT1TZr0NTU8i8=
Subject key identifier: A1:F8:36:24:A7:51:F8:11:FC:A3:F9:4C:67:CE:73:9B:4C:A1:19:09
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01902F9F69266011AA17A9AFD552CE4877CD
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/ofg2JKdR-BH8o_lMZ85zm0yhGQk.roa
Signing time: Wed 19 Jun 2024 08:31:34 +0000
ROA not before: Wed 19 Jun 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 11:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:9f:69:26:60:11:aa:17:a9:af:d5:52:ce:48:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jun 19 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f83624a751f811fca3f94c67ce739b4ca11909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:ce:7f:eb:96:3f:fc:a7:83:5d:16:84:b1:
8a:b5:29:97:21:fc:3c:fd:e6:99:e4:4e:07:2b:3d:
64:d5:ca:ac:81:d2:eb:92:f5:e4:bf:31:ef:a9:3e:
ca:1a:15:04:a9:69:b7:1a:cd:30:9d:84:80:b8:e9:
4b:d3:02:78:b4:64:ab:a1:2c:6c:28:d9:4a:62:e4:
fc:da:2e:09:4a:75:85:08:cb:7e:26:69:d0:8f:19:
9e:76:32:0e:9d:27:3f:53:7f:2c:e7:ab:bc:18:b1:
bf:d6:1b:24:9a:d1:15:60:fe:ca:e7:45:81:c0:97:
b8:80:48:4d:ea:17:01:39:90:77:83:32:f5:d8:08:
a5:3e:04:31:07:ff:4b:fe:31:93:de:f5:7d:74:03:
06:83:80:78:cf:01:bc:be:06:e8:1e:53:ff:01:4c:
30:e7:b9:ff:83:a3:18:55:e6:3f:e5:ec:80:68:c3:
50:cf:dd:28:d5:17:53:5d:82:17:e4:57:76:53:d9:
70:57:db:9f:82:ae:d9:6c:21:a2:cc:82:91:58:a2:
78:ea:7f:cd:42:5f:5d:44:55:41:94:d0:d5:1b:84:
83:f8:a8:6d:42:47:45:94:a7:3e:9a:5a:a4:2e:15:
fb:cd:2c:59:40:bf:de:b7:41:cb:29:80:b6:e6:c6:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F8:36:24:A7:51:F8:11:FC:A3:F9:4C:67:CE:73:9B:4C:A1:19:09
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/ofg2JKdR-BH8o_lMZ85zm0yhGQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.1.0-132.64.2.255
132.64.5.0/24
132.64.16.0/24
132.64.40.0/24
132.64.43.0-132.64.44.255
132.64.254.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0e:6f:86:87:e9:2b:0b:eb:5b:0c:21:31:55:9b:27:94:58:
a7:7a:ab:37:d9:3a:84:f3:cd:c3:71:30:75:d6:04:a3:7c:36:
53:27:8b:52:eb:e6:1f:14:65:60:be:61:c2:d9:5d:45:05:fe:
23:8a:9d:e1:67:d2:06:03:24:5b:9c:3f:be:89:cb:f1:b4:f6:
ac:3b:ed:9b:19:59:e7:f1:f2:e9:8a:a0:27:57:9d:2c:1c:22:
46:58:72:dc:0a:e2:9c:39:20:f8:45:e9:d3:ba:4b:aa:28:73:
fc:64:3c:6c:d1:cf:05:03:e5:32:af:0d:90:00:d4:89:bf:83:
76:41:94:68:89:0f:a0:a2:09:f1:b9:39:9c:ca:ec:1e:1c:aa:
b1:db:95:4e:25:98:be:33:20:4e:90:4e:6d:c9:6b:ca:bb:6b:
c7:b7:62:5c:2a:ca:d0:c5:e3:3a:d1:43:15:2c:54:d6:f9:5f:
ae:90:e9:23:8a:5b:d5:88:53:30:e6:ee:4c:f5:26:b7:3f:85:
cd:39:3d:8d:73:e0:db:8a:fa:17:99:3e:7e:6d:fd:24:21:d3:
81:3e:5f:ce:3f:ff:60:53:89:43:62:7c:e9:c2:32:80:0e:19:
db:9b:f3:98:09:ca:b5:89:88:a0:1c:19:cd:fe:47:73:40:16:
3d:1a:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:48 2024 by rpki-client on console-ams.rpki-client.org