Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OK4LM--LmWnQ5Yiw1UWMDZrHe3w.roa
File: OK4LM--LmWnQ5Yiw1UWMDZrHe3w.roa (raw, json)
Hash identifier: QpJKkvAM77jjEmeFEz04S9LdMHbwwGKew/CJU/z1obw=
Subject key identifier: 38:AE:0B:33:EF:8B:99:69:D0:E5:88:B0:D5:45:8C:0D:9A:C7:7B:7C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E92724703BD43FAD3DDF2BEF947F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OK4LM--LmWnQ5Yiw1UWMDZrHe3w.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41124
IP address blocks: 146.120.176.0/22 maxlen: 24
93.171.64.0/21 maxlen: 24
92.253.208.0/22 maxlen: 24
146.158.64.0/22 maxlen: 24
31.148.140.0/22 maxlen: 24
146.120.200.0/22 maxlen: 24
95.47.32.0/22 maxlen: 24
146.120.124.0/22 maxlen: 24
95.46.232.0/21 maxlen: 24
95.47.192.0/22 maxlen: 24
146.120.152.0/22 maxlen: 24
146.158.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 12:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e9:27:24:70:3b:d4:3f:ad:3d:df:2b:ef:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38ae0b33ef8b9969d0e588b0d5458c0d9ac77b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:43:ec:ef:37:49:fc:7f:af:0e:cd:47:08:
6c:25:2e:a4:a6:c3:1e:03:c7:d7:d5:77:bc:5b:ea:
37:98:39:aa:64:e2:2f:7d:91:0f:9c:4c:30:40:f0:
89:3c:02:53:11:c7:82:cf:05:66:35:24:36:1d:59:
4d:72:66:c9:6a:05:71:d9:a9:87:4b:d0:f9:d8:89:
d4:d2:27:e9:75:30:28:61:29:fc:b4:2b:24:88:97:
1b:b4:a7:de:4b:5b:08:b1:96:34:a1:fd:5e:d6:44:
bb:fd:f5:41:56:a0:b7:18:f4:ac:78:7a:97:b7:0f:
e8:c9:64:b6:11:2f:e2:a0:d4:cd:24:54:1b:29:5b:
7f:36:57:48:4b:2c:90:31:46:08:80:2a:93:a2:9d:
42:c1:ae:86:79:4e:41:b8:8b:b6:2a:e4:a7:1b:e1:
f1:67:6f:dc:04:af:dc:a9:8b:d1:28:b6:f7:07:2c:
e3:16:c8:e9:a4:d5:6f:1a:17:0d:14:20:fd:43:ff:
60:08:27:a6:78:55:2a:60:0f:78:d4:54:25:64:43:
e6:e0:3a:84:0f:8a:59:8c:4b:74:0f:5d:ba:7b:ac:
41:55:e8:28:ad:0e:86:4d:12:d2:af:ed:a9:5a:68:
f8:fc:d1:d8:f6:05:ee:4a:6d:52:a1:88:30:d3:d9:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:0B:33:EF:8B:99:69:D0:E5:88:B0:D5:45:8C:0D:9A:C7:7B:7C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OK4LM--LmWnQ5Yiw1UWMDZrHe3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.140.0/22
92.253.208.0/22
93.171.64.0/21
95.46.232.0/21
95.47.32.0/22
95.47.192.0/22
146.120.124.0/22
146.120.152.0/22
146.120.176.0/22
146.120.200.0/22
146.158.24.0/22
146.158.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:14:94:64:96:9e:85:7c:11:82:7c:1c:eb:ab:0c:c7:f3:65:
2b:98:05:90:7b:41:4d:c4:87:d6:02:c8:80:28:ef:2b:de:48:
e4:eb:6f:48:18:c5:21:5e:ba:fa:74:23:ad:cf:66:5e:2b:8b:
80:3e:9b:ba:ec:7c:a6:6f:0b:a8:c2:cf:8b:79:05:42:52:d4:
4b:01:da:07:e8:11:3a:1b:c7:2b:f0:34:c6:49:27:8d:f9:a2:
7c:23:13:cf:db:a8:36:ec:58:a9:e1:84:33:56:13:0a:2e:42:
37:af:75:8f:28:66:b3:3c:b8:a8:4d:83:89:c7:52:6e:b8:b8:
bb:a5:4d:31:60:74:dc:70:ba:5a:05:cb:0a:18:ed:a6:84:7d:
13:71:62:ba:47:f7:c5:62:7d:8b:ee:cb:b4:88:9c:f8:8f:57:
f5:ef:c3:bf:b5:86:c4:e3:ae:0c:de:eb:c1:82:90:1b:68:f5:
95:a5:0e:81:9f:63:7c:e1:85:d1:04:0b:0a:72:32:fc:3d:fb:
d1:32:57:c4:e6:6a:7e:5a:9d:3f:69:f3:fe:25:52:a9:ad:dd:
e5:47:f1:af:48:75:1c:8f:62:6e:38:6d:89:ac:3f:8d:53:33:
bd:83:d5:14:ba:97:1f:f5:b2:75:19:70:ed:18:3c:f5:75:de:
a1:c5:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:48 2025 by rpki-client