Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2O1A3QVyLgAesEBp0MdTvhyE6Kc.roa
File: 2O1A3QVyLgAesEBp0MdTvhyE6Kc.roa (raw, json)
Hash identifier: Zus117n90/SN5ROKs3WZ3MxPxW/LQtQSUKDrCEEJUmE=
Subject key identifier: D8:ED:40:DD:05:72:2E:00:1E:B0:40:69:D0:C7:53:BE:1C:84:E8:A7
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018DA20F8383CAA45037C85F248A2F89F277
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2O1A3QVyLgAesEBp0MdTvhyE6Kc.roa
Signing time: Tue 13 Feb 2024 10:42:22 +0000
ROA not before: Tue 13 Feb 2024 10:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/21 maxlen: 24
85.142.80.0/20 maxlen: 24
85.142.96.0/22 maxlen: 24
85.142.100.0/23 maxlen: 24
85.142.112.0/22 maxlen: 24
85.142.128.0/20 maxlen: 24
85.142.212.0/22 maxlen: 24
85.142.240.0/23 maxlen: 24
85.142.242.0/24 maxlen: 24
85.143.40.0/21 maxlen: 24
85.143.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 12:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:0f:83:83:ca:a4:50:37:c8:5f:24:8a:2f:89:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 13 10:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8ed40dd05722e001eb04069d0c753be1c84e8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:99:5e:55:e3:18:53:5a:dc:9a:69:d1:90:
d7:de:74:34:9b:2e:11:db:a2:e5:51:03:e6:c9:89:
d1:89:62:cd:b2:2d:de:c5:5f:51:8c:4c:d0:b4:f6:
ca:57:bc:1d:f9:f7:5b:78:b9:e6:ae:77:38:05:bb:
5e:02:56:a9:84:29:5b:a0:4e:2c:d8:3c:38:51:ad:
2c:d9:76:34:93:ed:26:2e:36:06:cd:52:97:9b:cd:
3d:cd:2b:60:d8:4f:fa:e5:0f:7b:09:5d:e2:e6:10:
ed:af:f0:44:b6:11:c4:82:de:23:c9:37:4f:9e:fb:
a5:64:62:9e:52:b8:0f:2f:91:03:84:96:e9:74:cf:
b8:5e:cf:d3:ee:08:5b:98:c2:8b:03:20:40:df:4d:
0c:8c:95:58:86:1c:63:ec:2f:57:7e:15:db:65:cf:
fe:78:7d:1f:ed:7a:3d:b8:a4:e7:b4:73:f3:e9:44:
da:37:a6:ea:94:1e:08:6e:03:7a:6f:50:77:5a:1a:
50:00:de:c7:1e:43:95:49:ce:1a:bd:f8:9c:94:61:
2e:dd:98:1b:fd:2e:16:d9:87:c7:6e:af:ec:13:aa:
a3:33:54:f1:13:17:15:dc:b9:8d:10:ac:e7:a3:f4:
ba:30:b2:34:b2:34:37:9a:e9:4e:10:53:de:90:10:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:ED:40:DD:05:72:2E:00:1E:B0:40:69:D0:C7:53:BE:1C:84:E8:A7
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2O1A3QVyLgAesEBp0MdTvhyE6Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0-85.142.101.255
85.142.112.0/22
85.142.128.0/20
85.142.212.0/22
85.142.240.0-85.142.242.255
85.143.40.0-85.143.63.255
Signature Algorithm: sha256WithRSAEncryption
4b:43:e2:21:c7:d4:d5:4f:b8:69:fd:58:4a:c8:63:44:64:1c:
ba:33:41:8d:bb:e4:ab:9d:ed:3f:7c:66:c3:e2:46:13:cc:d5:
c9:11:62:c8:76:3d:c6:df:a7:91:e5:a3:af:fe:45:5f:b4:91:
71:ec:8b:b0:a6:67:9d:27:c5:4d:77:0f:88:e1:be:42:07:e1:
83:32:f0:ab:eb:2d:47:08:5c:2d:14:39:13:93:b2:42:54:da:
68:f7:21:76:7c:4d:17:19:32:9c:6c:6f:1b:95:34:9c:33:f4:
5d:bb:38:f8:48:54:87:ab:e8:a9:57:53:a2:25:12:5c:c6:6c:
54:1d:fb:84:06:d0:39:8e:74:7d:31:f8:4a:2d:3c:4a:44:c4:
06:25:bf:94:f5:82:89:bc:86:f9:45:94:f6:91:02:1d:05:3b:
cd:78:ff:0d:0a:81:57:be:e0:db:27:7e:76:92:f8:20:f1:9c:
a9:76:66:9a:1b:a9:a7:10:fd:0d:da:52:6c:b5:7a:0e:1e:cd:
62:eb:cf:2f:18:a0:8f:12:e5:43:bd:01:d0:8d:58:c1:c4:ed:
ea:b8:52:12:15:0d:ec:e9:a9:23:a8:db:38:c8:45:22:1d:cc:
01:df:b1:9d:c6:75:fb:c4:29:43:ba:f0:d3:e9:aa:bb:9b:82:
f3:02:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org