Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/olVxNU6KNsmlTBeP2JgIhsy7FeM.roa
File: olVxNU6KNsmlTBeP2JgIhsy7FeM.roa (raw, json)
Hash identifier: vofT5qsB0m6oMkGxdiIgVrCXt/BrY5NowPn1rZsqbU4=
Subject key identifier: A2:55:71:35:4E:8A:36:C9:A5:4C:17:8F:D8:98:08:86:CC:BB:15:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E424C119ED9BB12F0F16570417449486A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/olVxNU6KNsmlTBeP2JgIhsy7FeM.roa
Signing time: Fri 15 Mar 2024 13:27:45 +0000
ROA not before: Fri 15 Mar 2024 13:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 45.87.120.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
93.115.104.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 05:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:4c:11:9e:d9:bb:12:f0:f1:65:70:41:74:49:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 15 13:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a25571354e8a36c9a54c178fd8980886ccbb15e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:2b:e6:db:fa:e2:1d:16:01:b1:ac:b1:67:
ff:7c:6c:18:28:8f:22:78:bd:9f:2e:a8:84:f2:2a:
7a:22:94:b9:ce:a3:5e:ca:f1:45:b3:fe:c6:4d:1b:
2d:1c:bc:f3:b5:2e:66:7a:16:ac:fb:6c:66:93:61:
d7:a3:e7:0b:16:3d:2d:21:d7:a2:89:2a:02:31:5a:
a6:40:76:f8:51:bf:8e:05:d5:d1:bf:61:5d:33:d9:
a7:5a:d7:ff:63:dd:b0:05:7d:e2:be:9b:9e:14:66:
44:fa:80:75:1c:c8:65:1e:a9:87:86:ff:e1:10:38:
a8:f1:04:01:f9:4c:c4:b2:c3:a9:8d:50:f4:c0:18:
04:17:65:86:48:81:40:4a:53:2b:d6:d6:c5:ab:c9:
3a:69:a8:39:6e:ef:5a:45:b6:ed:45:24:0a:0d:54:
f8:15:0d:63:f1:b8:db:e6:eb:b9:d0:9f:c9:9e:22:
92:39:cc:3b:4a:37:95:6e:b1:51:30:7b:4b:ad:e6:
c3:02:9f:96:94:ff:fd:a8:a6:3b:26:39:6e:71:d2:
6c:cb:cd:03:cf:13:c2:58:c6:91:e7:bb:6b:c5:14:
94:b5:57:e1:84:91:56:9f:70:6c:c2:fd:5f:67:bc:
41:ca:e8:6f:91:a1:7f:45:c7:5d:52:61:2e:82:83:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:71:35:4E:8A:36:C9:A5:4C:17:8F:D8:98:08:86:CC:BB:15:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/olVxNU6KNsmlTBeP2JgIhsy7FeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.120.0/24
45.88.12.0/24
45.88.14.0/23
62.192.152.0/24
77.81.100.0/24
77.81.182.0/24
79.110.227.0/24
89.35.129.0/24
89.40.36.0/24
89.45.35.0/24
93.115.104.0/22
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.212.119.0/24
188.212.121.0/24
188.215.31.0/24
188.241.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:61:28:b7:42:20:57:da:16:f0:cd:9e:68:1e:d6:49:b0:ec:
00:ba:c7:7c:de:9d:61:9f:f1:0a:d3:5b:c7:32:61:cf:6f:4b:
fb:bc:cc:6c:a1:60:9c:70:65:38:37:28:0a:42:00:5a:86:3a:
a3:73:3c:c7:bb:bd:d8:92:ca:21:ac:29:c8:3d:f3:b8:87:37:
36:50:b9:4f:c2:9c:da:f8:f3:73:09:84:77:c3:b0:1c:a4:79:
37:d7:12:27:41:3a:2d:26:dd:11:33:09:04:9d:ea:3d:80:d4:
40:aa:d4:d2:8b:ff:6b:f2:b8:f8:75:1b:ff:b7:9e:06:6a:f7:
9f:8f:af:ee:c7:f6:96:3a:44:36:ca:24:f2:5e:6d:fb:ce:3b:
63:f6:53:1d:7c:31:c3:f5:4e:69:f5:ba:a1:ae:30:d2:0c:03:
1f:cf:1b:3b:0a:4e:6d:4f:25:17:75:32:d0:c9:83:a0:2f:15:
c9:f4:18:3d:d4:f8:6a:ac:46:e6:df:13:2b:f9:92:a7:38:cd:
e2:71:42:9d:9c:fa:45:69:9e:a4:93:0c:f4:41:fa:86:fe:da:
56:08:5c:c5:09:d7:c6:c0:48:de:67:3b:93:74:ef:78:15:9e:
2f:bc:3e:02:88:5e:e5:e7:d3:02:e4:30:ee:69:d9:dd:4e:d1:
f0:b0:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org