Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/OqqZUeqSeyMKIRdz0tw1Gn6jzUg.roa
File: OqqZUeqSeyMKIRdz0tw1Gn6jzUg.roa (raw, json)
Hash identifier: WY+O8h2qaij9usDIKbMrBtgGypQi7a18ghauEYFL658=
Subject key identifier: 3A:AA:99:51:EA:92:7B:23:0A:21:17:73:D2:DC:35:1A:7E:A3:CD:48
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01930C0912F470D25AF62C266009F3CAE75E
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/OqqZUeqSeyMKIRdz0tw1Gn6jzUg.roa
Signing time: Fri 08 Nov 2024 13:49:01 +0000
ROA not before: Fri 08 Nov 2024 13:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 46.226.160.0/21 maxlen: 32
89.169.32.0/22 maxlen: 32
89.169.52.0/22 maxlen: 32
92.246.136.0/22 maxlen: 32
213.108.21.0/24 maxlen: 32
213.108.22.0/24 maxlen: 32
213.108.23.0/24 maxlen: 32
217.144.185.0/24 maxlen: 32
217.144.186.0/24 maxlen: 32
217.144.187.0/24 maxlen: 32
217.144.188.0/24 maxlen: 32
217.144.189.0/24 maxlen: 32
217.144.190.0/24 maxlen: 32
217.144.191.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:09:12:f4:70:d2:5a:f6:2c:26:60:09:f3:ca:e7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 8 13:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aaa9951ea927b230a211773d2dc351a7ea3cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:11:cf:cb:0f:9d:cb:f4:92:41:90:cc:eb:
6c:07:29:3a:a7:44:e9:ca:cf:7a:89:e8:6e:c4:55:
f0:bb:f9:98:f3:3d:89:11:9d:5f:05:cf:c7:0a:65:
8a:8e:4d:de:7b:29:78:17:7a:c1:b3:8a:99:8f:bf:
04:03:74:26:60:a5:32:d9:1b:58:a0:b8:b3:f1:42:
03:a1:32:af:85:6b:f5:26:f8:d6:d6:24:bb:3d:f0:
3d:fb:14:5f:39:e7:f5:55:4c:e0:d6:89:81:4e:05:
2c:31:ac:6f:de:06:bc:09:e9:3a:3f:83:06:61:71:
7a:27:9b:eb:9c:99:1b:c7:81:a1:7e:f5:e2:25:a6:
12:b2:a8:fd:a7:0e:bf:d4:e1:26:71:df:0e:01:0f:
91:40:58:9f:af:b2:dc:c6:2a:bc:cf:b9:e2:f6:30:
2f:db:7a:e1:aa:64:4a:9a:85:40:be:d1:cb:70:b0:
4e:5b:1f:bc:e2:57:8b:a3:f7:b6:f2:5f:02:15:88:
1d:70:b7:d8:71:a4:44:96:b8:3e:99:f1:16:3f:f1:
63:65:fc:6a:8f:7e:65:c8:1e:13:9d:ba:38:05:71:
f1:38:27:6f:d8:8e:27:b0:71:66:5c:59:91:bc:76:
b5:7f:81:3e:65:c4:5c:39:1d:52:5c:b0:90:8d:3e:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:99:51:EA:92:7B:23:0A:21:17:73:D2:DC:35:1A:7E:A3:CD:48
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/OqqZUeqSeyMKIRdz0tw1Gn6jzUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
89.169.32.0/22
89.169.52.0/22
92.246.136.0/22
213.108.21.0-213.108.23.255
217.144.185.0-217.144.191.255
Signature Algorithm: sha256WithRSAEncryption
74:2c:49:3f:8e:f0:30:7f:3a:6c:fd:1c:91:16:57:6b:eb:14:
49:bf:37:f8:83:75:44:c9:52:4f:67:a1:3a:1a:3f:4f:35:84:
e4:24:4b:e4:46:5c:fe:04:0c:4e:59:81:41:b1:8f:fd:e6:a4:
91:7d:6c:5b:18:48:37:3a:ff:75:3c:61:15:e9:9e:1a:e2:d2:
62:02:bb:b4:ce:4c:2b:69:77:3c:c6:4b:f6:60:1e:79:5f:45:
d4:91:a9:71:0f:fb:ac:1e:16:be:98:85:1a:e8:3f:83:1e:35:
47:37:f2:93:39:73:e9:dd:c3:bc:ce:f7:4b:38:6d:a0:bd:bb:
85:d8:63:19:07:21:d2:45:15:28:12:62:a1:4e:92:29:2c:87:
e6:0e:b3:34:44:9e:3a:6e:1f:18:47:69:70:b1:39:e0:9f:21:
48:4a:cf:b1:c7:eb:a0:08:b2:be:55:f5:1e:44:4b:df:88:2d:
d5:47:d9:8e:fb:c3:01:31:eb:44:71:29:4e:78:08:17:52:78:
92:b1:d1:13:96:d0:f6:aa:93:6f:89:6a:f2:65:fc:3a:fb:58:
be:7f:a1:d0:f3:c3:88:8d:73:5d:2d:6d:cd:a1:e3:86:ad:6c:
f3:5b:2e:a1:b4:25:66:47:e9:b1:fe:b2:3b:5f:21:57:5f:f7:
a6:68:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:12:37 2024 by rpki-client on console-fra.rpki-client.org