Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/OjZxjF2XLWWUE663ywMJDMOaPQ8.roa
File: OjZxjF2XLWWUE663ywMJDMOaPQ8.roa (raw, json)
Hash identifier: fpaBZSPSwFBq0eKY/naz3G7r2Tm2jfEjCswOVbGzCQ4=
Subject key identifier: 3A:36:71:8C:5D:97:2D:65:94:13:AE:B7:CB:03:09:0C:C3:9A:3D:0F
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018CC3B74529B85D74E0E764CEAA722FB4C2
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/OjZxjF2XLWWUE663ywMJDMOaPQ8.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41341
IP address blocks: 37.114.16.0/20 maxlen: 32
81.18.130.0/23 maxlen: 32
89.28.192.0/21 maxlen: 32
91.211.128.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:45:29:b8:5d:74:e0:e7:64:ce:aa:72:2f:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a36718c5d972d659413aeb7cb03090cc39a3d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:50:20:6d:fe:bd:1a:21:9e:5e:bf:74:1f:
9f:79:65:4c:96:77:be:46:97:cb:d4:f5:b5:05:67:
43:0c:70:2e:52:de:70:17:00:ad:7f:02:90:77:27:
81:96:2d:59:84:63:e4:5d:e9:3b:ab:a6:5e:2d:7d:
d0:1e:05:0c:6d:1b:78:96:fe:8e:72:42:80:16:db:
a3:a4:e3:89:0b:10:b1:e6:14:9b:d4:bb:ab:50:ef:
6d:70:2e:2a:b0:66:6c:83:f4:8f:fd:97:94:0e:60:
a1:86:3c:10:45:3f:72:8f:4b:88:86:85:2c:63:f2:
0c:fb:8a:8f:c9:7e:a5:08:99:a1:fd:4b:c9:8f:ab:
e7:ff:4b:12:6d:0f:84:18:0b:b4:c5:1b:73:3b:0b:
4f:0a:5f:c1:5d:33:95:dc:8c:e4:9e:ec:03:07:5f:
1f:e0:65:cc:ad:56:65:24:da:47:92:34:5f:52:cb:
9f:80:84:09:c5:6c:d5:0c:2a:6c:ec:11:21:b1:b1:
9b:40:9c:d2:ec:33:bb:11:64:72:ff:4b:08:f0:d4:
b8:8a:79:21:83:82:89:0e:bc:72:95:98:9a:53:3a:
b4:1c:30:5b:1d:49:e7:c7:90:f7:ac:63:3f:44:d7:
50:d6:94:d2:cf:91:70:ab:09:53:0c:55:20:7e:64:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:36:71:8C:5D:97:2D:65:94:13:AE:B7:CB:03:09:0C:C3:9A:3D:0F
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/OjZxjF2XLWWUE663ywMJDMOaPQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.16.0/20
81.18.130.0/23
89.28.192.0/21
91.211.128.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:8a:89:93:d2:67:52:a9:4f:18:a1:c6:8c:e8:6e:80:71:be:
fc:dd:5a:d3:b4:a5:58:fb:f6:cb:ec:7d:a5:6e:60:6a:2a:b9:
57:2a:56:01:30:84:5a:dc:03:73:c1:82:f1:f2:17:a7:09:8c:
56:4d:30:bc:c3:7a:6a:dc:8d:9f:ea:93:cd:f1:d0:70:9e:ae:
f1:26:8b:cf:19:19:c2:85:53:c5:f7:70:39:b5:dd:26:0a:ad:
ac:28:7a:9b:b4:ba:5a:d2:58:59:5a:aa:64:07:50:27:39:20:
41:78:80:7a:87:54:b8:50:5c:31:a0:d8:75:0c:eb:8b:dd:20:
f2:04:04:06:84:75:0a:57:32:1b:20:93:77:2e:05:bc:3f:f4:
05:3e:f2:44:63:ec:b5:eb:f0:0a:78:c0:84:36:ef:7c:ba:89:
ee:30:55:b0:2f:57:4d:56:e7:5d:7e:cb:d7:15:83:07:80:f1:
69:bd:da:c0:de:db:23:0a:22:5c:86:5c:4c:9e:be:94:04:61:
cb:65:c2:e0:93:35:da:cf:11:4a:bf:fb:4d:14:83:74:d3:b5:
6b:f4:99:d9:e5:71:c8:67:95:f2:ce:20:66:4d:f6:8c:72:f9:
a1:94:35:71:d6:58:53:3a:9f:e9:37:dc:8d:14:f2:ab:00:fa:
89:a2:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:12 2025 by rpki-client