Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/OCR0PujdSJ6yfvValRi3SsWsReI.roa
File: OCR0PujdSJ6yfvValRi3SsWsReI.roa (raw, json)
Hash identifier: nsCZdyUjqEIHVKNk/+nHoI9tDLWz4I2nSY9CQldOI3I=
Subject key identifier: 38:24:74:3E:E8:DD:48:9E:B2:7E:F5:5A:95:18:B7:4A:C5:AC:45:E2
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 018CC726A5E614F2A044DD5E2C123FBBD3F4
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/OCR0PujdSJ6yfvValRi3SsWsReI.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35491
IP address blocks: 194.24.180.0/23 maxlen: 23
46.148.64.0/20 maxlen: 20
46.148.64.0/24 maxlen: 24
46.148.67.0/24 maxlen: 24
46.148.68.0/24 maxlen: 24
46.148.69.0/24 maxlen: 24
46.148.70.0/24 maxlen: 24
46.148.71.0/24 maxlen: 24
46.148.65.0/24 maxlen: 24
46.148.66.0/24 maxlen: 24
46.148.76.0/24 maxlen: 24
46.148.77.0/24 maxlen: 24
46.148.72.0/24 maxlen: 24
46.148.73.0/24 maxlen: 24
193.151.112.0/22 maxlen: 22
193.151.112.0/24 maxlen: 24
193.151.113.0/24 maxlen: 24
193.151.114.0/24 maxlen: 24
193.151.115.0/24 maxlen: 24
91.192.120.0/22 maxlen: 22
91.192.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 05:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a5:e6:14:f2:a0:44:dd:5e:2c:12:3f:bb:d3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3824743ee8dd489eb27ef55a9518b74ac5ac45e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:15:6d:6d:6d:8f:3b:62:0a:a0:a9:d1:5d:
a3:72:a0:40:a4:52:2b:24:f8:76:e9:42:9d:14:01:
86:0b:82:4a:8c:11:9d:20:a5:96:a1:da:77:fd:97:
a2:70:66:d4:92:b7:24:44:d7:a7:9d:24:ba:84:a4:
87:ab:26:4c:ca:f6:34:4f:cd:39:6b:1b:0c:e3:4a:
e3:58:26:8e:a4:6e:a7:19:03:44:bc:15:1b:dc:06:
d6:5e:64:2a:00:97:5d:fd:b1:d2:0a:91:0d:2f:f3:
ed:03:98:cf:9d:06:67:ac:c9:53:34:46:bd:fe:b7:
f0:ec:bd:68:70:1c:2f:96:1e:14:b7:4e:eb:f9:ae:
7b:d3:94:50:1e:e4:ea:e1:3d:e7:0e:f8:cd:18:17:
1f:eb:e5:24:5d:5e:c9:cc:02:cd:4a:e0:52:f1:fa:
1e:8b:5c:e9:03:17:7b:87:33:84:fb:99:e8:1e:f2:
f2:9e:be:00:b0:16:b2:0e:44:f4:cc:ec:2f:c7:75:
54:12:ad:5c:3d:7b:64:29:e3:51:46:02:12:95:8e:
51:36:69:7e:d8:48:04:c3:5f:34:0c:9c:ea:4a:f8:
00:ec:da:7e:51:0d:bd:fc:d2:3a:f5:78:d1:22:79:
08:80:af:8d:e6:61:54:4f:b3:7c:9c:72:66:e4:8b:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:74:3E:E8:DD:48:9E:B2:7E:F5:5A:95:18:B7:4A:C5:AC:45:E2
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/OCR0PujdSJ6yfvValRi3SsWsReI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.64.0/20
91.192.120.0/22
193.151.112.0/22
194.24.180.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:55:46:b3:cb:49:17:df:24:d6:0a:b0:2c:44:e8:26:8e:3a:
ed:76:96:a6:3e:cf:08:3a:eb:7f:94:e5:80:87:83:8f:22:59:
09:f6:6b:96:ea:7c:73:b3:a0:ae:94:cf:6c:b6:7d:75:9e:c7:
61:0f:f6:cb:80:fd:e0:e5:4f:d9:48:a7:10:49:0e:31:5c:7a:
68:8f:ed:ff:53:2a:06:6a:9b:57:a6:1e:38:30:4c:e9:23:4e:
00:cf:ef:f9:bf:f3:2e:2d:c8:14:22:ca:c4:3b:14:8d:8a:24:
88:84:57:03:75:ed:f7:7a:f0:87:98:3a:85:bd:fe:5a:74:03:
b9:b0:ac:91:b2:9e:84:99:57:74:91:60:b8:91:cb:45:45:ef:
ce:25:18:bf:54:f4:bc:49:64:66:0f:9f:65:42:f8:94:75:41:
36:9b:be:85:11:49:17:74:f3:41:1c:b6:02:76:30:8e:7c:90:
d9:0d:6c:64:7d:2e:f9:2b:10:7e:e2:0f:8e:dd:31:68:8a:2a:
12:59:93:98:70:31:8d:c6:8e:34:58:68:5f:af:66:53:7d:91:
37:62:57:41:8a:86:87:91:60:ef:9b:56:be:d9:1c:02:73:95:
0a:cf:39:44:a6:83:4e:51:5e:03:15:7a:fc:a0:f6:a8:61:2b:
9f:ca:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 06:32:13 2024 by rpki-client on console-fra.rpki-client.org