Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1-DP2OFC6GrOJ1BZch7_Lr_o2Xs0.roa
File: 1-DP2OFC6GrOJ1BZch7_Lr_o2Xs0.roa (raw, json)
Hash identifier: PWPw7hDDYo3wClY8WBHhaSS/UTzjYmhdzUPD5LzPLV0=
Subject key identifier: F8:33:F6:38:50:BA:1A:B3:89:D4:16:5C:87:BF:CB:AF:FA:36:5E:CD
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018A07DE4218196D1E5D7F399B3EDE34646A
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1-DP2OFC6GrOJ1BZch7_Lr_o2Xs0.roa
Signing time: Fri 18 Aug 2023 08:58:40 +0000
ROA not before: Fri 18 Aug 2023 08:58:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.85.107.0/24 maxlen: 32
193.232.136.0/24 maxlen: 32
193.232.135.0/24 maxlen: 32
193.232.140.0/24 maxlen: 32
194.190.120.0/24 maxlen: 32
194.190.119.0/24 maxlen: 32
194.85.177.0/24 maxlen: 32
194.226.100.0/22 maxlen: 32
193.232.87.0/24 maxlen: 32
195.208.208.0/21 maxlen: 32
193.232.244.0/24 maxlen: 32
2001:7f8:20:201::/64 maxlen: 128
2001:7f8:20:401::/64 maxlen: 128
2001:7f8:20:1101::/64 maxlen: 128
2001:7f8:20:601::/64 maxlen: 128
2001:7f8:20:801::/64 maxlen: 128
2001:7f8:20:101::/64 maxlen: 128
2001:7f8:20:301::/64 maxlen: 128
2001:7f8:20:501::/64 maxlen: 128
2001:7f8:20:701::/64 maxlen: 128
2001:7f8:20:901::/64 maxlen: 128
2001:7f8:20:202::/64 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:de:42:18:19:6d:1e:5d:7f:39:9b:3e:de:34:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Aug 18 08:58:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f833f63850ba1ab389d4165c87bfcbaffa365ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:5c:52:05:95:82:28:6a:74:25:c3:56:51:
c2:f2:fd:11:94:86:de:4e:3b:7d:b2:f6:46:4f:44:
71:71:05:cb:c3:28:09:25:d5:c3:d6:8b:61:19:45:
28:14:b8:fa:24:93:cf:fd:51:5f:64:19:30:45:96:
21:df:d2:1e:cc:2a:f6:3d:21:eb:62:ab:72:a0:6c:
17:14:4d:9d:bc:2c:83:82:cd:17:c0:ec:d3:e0:9b:
85:6e:95:91:75:d8:67:e5:4e:58:be:02:75:63:33:
cf:d3:06:15:27:d6:a7:e2:dd:2b:bc:4b:e9:df:6a:
60:10:1a:ff:7a:6c:35:f2:12:b2:94:ac:f9:ed:bb:
90:ec:c1:d4:51:8a:1b:7a:19:0d:e5:da:b3:00:c4:
99:c0:54:0a:a0:64:49:e6:3b:90:2d:cd:a1:28:d0:
e9:62:ec:e1:f4:30:9e:20:0e:30:1a:8f:fb:01:62:
1d:ed:1e:ee:3a:f8:e2:b6:85:d4:a5:aa:08:66:13:
52:d3:d3:8b:dd:91:85:79:94:4d:1f:61:93:bf:eb:
16:e8:0d:55:71:29:9e:9b:85:a9:1b:f3:cd:7a:06:
fb:af:2d:ea:05:94:f2:f7:1a:25:e2:72:95:67:2d:
1d:8c:06:a4:88:d2:43:8b:54:5b:e9:a1:e6:de:53:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:F6:38:50:BA:1A:B3:89:D4:16:5C:87:BF:CB:AF:FA:36:5E:CD
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1-DP2OFC6GrOJ1BZch7_Lr_o2Xs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.87.0/24
193.232.135.0-193.232.136.255
193.232.140.0/24
193.232.244.0/24
194.85.107.0/24
194.85.177.0/24
194.190.119.0-194.190.120.255
194.226.100.0/22
195.208.208.0/21
IPv6:
2001:7f8:20:101::/64
2001:7f8:20:201::-2001:7f8:20:202:ffff:ffff:ffff:ffff
2001:7f8:20:301::/64
2001:7f8:20:401::/64
2001:7f8:20:501::/64
2001:7f8:20:601::/64
2001:7f8:20:701::/64
2001:7f8:20:801::/64
2001:7f8:20:901::/64
2001:7f8:20:1101::/64
Signature Algorithm: sha256WithRSAEncryption
61:a0:b5:2f:52:34:32:b1:30:a6:ac:1b:34:36:5a:ad:d4:e5:
da:cd:31:a3:ea:62:7b:7b:89:47:14:b9:e5:b0:16:cb:03:8f:
21:55:e0:24:40:9d:ef:fb:bd:0b:05:73:d1:1e:10:2b:94:a9:
be:05:94:9c:7a:ea:33:f6:9b:d1:89:b8:9d:29:44:e7:88:f9:
b9:b9:49:9f:44:a4:51:f2:78:2d:28:d3:d6:f0:14:44:aa:ad:
dc:18:6f:6b:3f:8c:2f:5b:74:75:44:11:59:ff:ee:fc:3e:d3:
a2:b9:a2:fc:1a:6f:07:ec:a4:21:8c:da:67:31:ec:0d:3f:b1:
95:81:7e:3c:4d:2b:16:fb:26:7c:25:49:18:b1:b7:95:79:a6:
78:e5:20:e2:3d:34:97:72:6b:c5:da:a0:88:50:0c:d9:97:54:
48:e7:65:59:fb:ac:9c:e4:bd:52:44:98:ef:8b:04:72:c5:00:
d0:bf:17:8f:ee:82:63:cf:b1:4f:1f:1e:ff:3b:30:2a:85:45:
12:37:f9:c4:85:cb:2c:b0:7a:4b:49:f9:99:8a:e6:79:39:41:
76:11:86:0e:21:5d:5b:39:d5:10:81:44:df:f9:16:67:2a:d5:
8a:70:34:69:25:da:ce:37:88:a1:e5:0e:46:65:0e:2b:8f:00:
c9:2e:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org