Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OhS-UD2CI-Ae5VWJ7Uz7UieEB-c.roa
File: OhS-UD2CI-Ae5VWJ7Uz7UieEB-c.roa (raw, json)
Hash identifier: tfm3nAZk1Lu6830rVVaXSwUw+6LGGePoLoQcIbWSDlM=
Subject key identifier: 3A:14:BE:50:3D:82:23:E0:1E:E5:55:89:ED:4C:FB:52:27:84:07:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F57B3DF811D73EC7530AE613DA6C0B2E4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OhS-UD2CI-Ae5VWJ7Uz7UieEB-c.roa
Signing time: Wed 08 May 2024 10:15:56 +0000
ROA not before: Wed 08 May 2024 10:15:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 37.252.27.0/24 maxlen: 24
79.99.76.0/24 maxlen: 24
81.168.50.0/24 maxlen: 24
81.168.67.0/24 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.54.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.105.0/24 maxlen: 24
82.152.140.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
82.153.34.0/24 maxlen: 24
82.153.35.0/24 maxlen: 24
82.153.135.0/24 maxlen: 24
82.153.159.0/24 maxlen: 24
82.153.201.0/24 maxlen: 24
82.153.202.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
82.153.226.0/24 maxlen: 24
82.163.0.0/24 maxlen: 24
82.163.15.0/24 maxlen: 24
89.213.98.0/24 maxlen: 24
109.176.193.0/24 maxlen: 24
109.176.201.0/24 maxlen: 24
109.176.202.0/24 maxlen: 24
109.176.244.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.84.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.130.156.0/24 maxlen: 24
213.210.58.0/24 maxlen: 24
213.210.59.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
213.218.231.0/24 maxlen: 24
217.144.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 07:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:b3:df:81:1d:73:ec:75:30:ae:61:3d:a6:c0:b2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 8 10:15:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a14be503d8223e01ee55589ed4cfb52278407e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:43:29:d7:34:72:67:00:92:50:4a:0d:73:
fa:95:77:56:5f:41:58:a9:43:04:12:bb:35:d7:cd:
f7:17:91:41:57:4f:85:2d:f5:49:d9:e8:50:00:8b:
b6:0b:3a:3e:ea:cc:72:e9:96:d5:d8:e6:6d:aa:3f:
46:3c:a2:da:17:38:e2:dd:04:bf:db:de:78:e0:32:
6d:2f:6c:12:95:f7:48:9c:a4:73:b8:2e:9c:95:1d:
12:31:4a:93:54:6f:5b:fa:9f:3d:85:c9:02:1e:a6:
28:ac:c4:fb:75:81:21:41:f7:cc:ab:02:e9:8e:54:
08:09:5a:b1:10:f6:31:b7:15:0b:22:f4:21:ab:25:
d5:ea:83:34:94:d4:6f:48:56:34:c2:41:5f:94:a5:
a7:69:73:9a:17:8f:64:3f:44:f2:95:1e:f0:2d:37:
04:55:a5:b6:09:ac:74:17:e3:ca:05:b0:30:7b:c9:
c1:69:9f:ae:4a:1e:4c:ab:9d:05:3e:fd:57:7b:ce:
87:dc:54:52:24:54:58:10:ba:2c:7b:5b:b9:7f:c6:
63:f5:37:d9:48:09:5c:6e:41:78:6a:38:89:f9:54:
7e:3c:9d:73:ec:6f:14:4a:ae:5b:9c:71:21:26:b5:
85:74:0e:74:47:0d:f1:2a:56:f8:89:a9:95:2a:e5:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:BE:50:3D:82:23:E0:1E:E5:55:89:ED:4C:FB:52:27:84:07:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OhS-UD2CI-Ae5VWJ7Uz7UieEB-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.27.0/24
79.99.76.0/24
81.168.50.0/24
81.168.67.0/24
82.152.12.0/24
82.152.54.0/24
82.152.98.0/24
82.152.105.0/24
82.152.140.0/24
82.152.142.0/24
82.153.34.0/23
82.153.135.0/24
82.153.159.0/24
82.153.201.0-82.153.202.255
82.153.205.0/24
82.153.207.0/24
82.153.226.0/24
82.163.0.0/24
82.163.15.0/24
89.213.98.0/24
109.176.193.0/24
109.176.201.0-109.176.202.255
109.176.244.0/24
212.38.79.0/24
212.38.84.0/24
213.130.130.0/24
213.130.149.0-213.130.151.255
213.130.156.0/24
213.210.58.0/23
213.218.227.0/24
213.218.231.0/24
217.144.158.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8d:63:de:41:57:59:5e:3c:c0:eb:b7:66:46:53:b8:3a:a9:
1d:fb:fa:c1:9f:74:1c:2f:f4:f0:35:2e:55:c0:4f:13:76:2d:
f3:cd:ed:8c:6e:4c:a1:a0:0c:60:02:53:60:fd:45:ee:4e:1f:
c8:7d:f8:86:9b:c6:97:c1:07:59:96:5b:06:ca:54:9b:14:2e:
f7:ba:30:22:35:5c:19:26:a2:26:84:3e:7a:9d:92:f4:cb:66:
80:41:99:80:8b:ec:79:c6:40:cc:6e:10:e2:99:aa:e2:c5:fb:
90:1f:33:96:54:7e:41:68:20:10:a9:78:63:cc:80:b9:6c:ae:
df:1f:03:4e:cf:04:cb:a2:05:ed:2d:ba:46:d4:87:94:97:fd:
b7:8d:29:3b:fc:d1:56:82:5c:35:b7:fe:69:ad:b6:b6:85:d5:
6a:2a:66:36:a7:0c:e7:ae:a5:99:d2:07:2c:ca:07:6c:da:f8:
95:fb:fc:58:56:14:f7:97:79:86:de:c4:1f:c4:f2:28:02:09:
53:97:1c:f8:fe:18:3d:cd:e0:1d:8f:13:35:22:1a:ad:39:ff:
d6:99:6c:c3:66:c4:d7:76:da:cc:ee:a4:a8:6d:52:de:6d:9a:
5a:c1:d3:d1:d5:df:fe:3e:8c:ee:43:8b:c5:9a:a7:be:23:0c:
4a:0d:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org