Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/mOGKcY2aQxYDWb319bUwqk79gBQ.roa
File: mOGKcY2aQxYDWb319bUwqk79gBQ.roa (raw, json)
Hash identifier: r3Q9ZtPidXZ9urQ9HUFgr5IG7XqnnJtnB9B4yUuGgBE=
Subject key identifier: 98:E1:8A:71:8D:9A:43:16:03:59:BD:F5:F5:B5:30:AA:4E:FD:80:14
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 018C2C00D6A8383192B0360B47E2995CE062
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/mOGKcY2aQxYDWb319bUwqk79gBQ.roa
Signing time: Sat 02 Dec 2023 19:28:21 +0000
ROA not before: Sat 02 Dec 2023 19:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51020
IP address blocks: 5.62.136.0/24 maxlen: 24
5.62.142.0/24 maxlen: 24
185.69.4.0/23 maxlen: 23
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 22:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:00:d6:a8:38:31:92:b0:36:0b:47:e2:99:5c:e0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Dec 2 19:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98e18a718d9a43160359bdf5f5b530aa4efd8014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:b9:36:c7:bd:dc:00:b2:42:9c:93:3a:da:
6a:35:64:8c:d2:1d:5a:db:53:a4:67:a0:1e:9b:bd:
79:0f:27:af:5e:18:b3:f5:36:3f:8a:2c:82:e5:a4:
3e:7d:2f:c5:45:c8:b8:9b:d6:78:8f:b6:e5:c9:b0:
41:cd:d7:1d:d8:4d:89:0b:a4:d7:d9:11:47:51:ea:
40:78:7b:db:89:0b:e6:c8:b3:84:be:c1:d8:56:ea:
c7:7d:ac:08:d2:20:a8:a0:f6:e4:31:67:69:7a:1a:
de:9a:81:71:79:ee:77:c7:3c:18:ee:ad:9e:ad:34:
75:84:6f:b1:b3:8f:70:9c:98:44:f7:6c:91:eb:32:
4c:ba:f0:9d:7d:18:e5:91:86:6a:c0:3d:34:bd:ec:
17:39:ae:15:9a:cd:f9:6e:57:5d:a2:bb:42:f7:f3:
2f:c5:88:e3:40:bf:bf:00:47:58:a4:35:16:a1:3b:
da:cf:82:79:8b:e8:46:c9:d2:bb:36:46:34:85:70:
f1:ab:38:bc:10:d4:3d:e2:0f:c4:9e:88:2c:7d:76:
01:31:9f:b7:1f:20:be:25:4b:04:d7:cf:ee:b6:4e:
53:2a:c9:9d:63:ce:a1:62:5b:98:1e:c7:d3:b2:be:
10:37:8c:0a:eb:f4:49:c5:04:5b:df:65:77:66:50:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:8A:71:8D:9A:43:16:03:59:BD:F5:F5:B5:30:AA:4E:FD:80:14
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/mOGKcY2aQxYDWb319bUwqk79gBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0/23
5.62.136.0/24
5.62.142.0/24
37.77.48.0/24
37.77.50.0/23
185.69.4.0-185.69.6.255
Signature Algorithm: sha256WithRSAEncryption
c5:48:6f:e4:47:5d:8b:a3:c2:40:e7:b2:7c:87:f2:1b:3f:ce:
48:f2:8f:84:f9:64:de:95:b7:f9:f1:b9:32:55:b2:a5:f1:8d:
de:e0:3a:a5:bf:23:13:9c:12:a7:d7:34:3c:72:f7:27:50:27:
f9:8a:16:f7:65:ad:6d:7a:e6:c7:7f:2f:50:95:92:46:cb:74:
9e:82:93:f3:be:97:a9:0d:0f:52:89:4e:e8:be:64:5e:16:68:
95:0c:25:89:6b:14:c5:3e:6f:18:83:3b:3e:8b:cc:34:e3:3c:
8f:a1:1d:dc:21:fe:df:77:b3:72:89:b1:1b:af:72:2e:4b:fd:
ea:82:e9:a6:b5:15:a0:bd:57:25:6f:ad:3b:61:61:a8:a4:7d:
c3:cb:16:3e:bd:09:0f:5b:b8:55:91:6d:78:ff:06:d3:ab:80:
08:c6:65:27:bb:36:3c:fb:29:d3:3c:7c:c5:0a:b6:26:16:8a:
b8:30:99:3c:3c:b8:37:88:16:e7:cb:62:6f:7d:49:ec:9b:78:
94:af:75:bb:48:b7:43:be:35:13:65:13:2f:03:b5:5d:65:82:
0e:af:f2:13:17:0b:59:a1:29:6c:20:6c:63:e0:44:e4:c5:ba:
ea:22:5f:23:6f:09:5d:4b:5f:fd:66:ef:28:5f:ca:f0:ac:c3:
99:df:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-fra.rpki-client.org