Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/OELmciL7VYlHh-pIlKkZbteG5Mo.roa
File: OELmciL7VYlHh-pIlKkZbteG5Mo.roa (raw, json)
Hash identifier: R5upC5IL+XTwopY7OG5buArT18NLLE789paL3g8gstA=
Subject key identifier: 38:42:E6:72:22:FB:55:89:47:87:EA:48:94:A9:19:6E:D7:86:E4:CA
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 018CC26D181D63CF984D58272A4D6796A972
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/OELmciL7VYlHh-pIlKkZbteG5Mo.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60672
IP address blocks: 193.192.2.0/23 maxlen: 23
94.126.41.0/24 maxlen: 24
94.126.44.0/23 maxlen: 23
94.126.42.0/24 maxlen: 24
94.126.46.0/24 maxlen: 24
193.193.162.0/23 maxlen: 23
178.18.120.0/22 maxlen: 22
31.24.104.0/21 maxlen: 21
31.28.64.0/24 maxlen: 24
31.28.66.0/24 maxlen: 24
31.28.71.0/24 maxlen: 24
31.28.69.0/24 maxlen: 24
31.28.73.0/24 maxlen: 24
31.28.76.0/22 maxlen: 22
31.28.87.0/24 maxlen: 24
31.28.88.0/21 maxlen: 21
2a10:6740::/32 maxlen: 32
2a01:8000::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 10:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:1d:63:cf:98:4d:58:27:2a:4d:67:96:a9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3842e67222fb55894787ea4894a9196ed786e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:eb:3e:f3:72:84:62:f8:6b:9c:a6:4c:18:
f3:d0:f2:ee:20:0e:c8:40:bd:ab:ea:87:18:99:d0:
85:30:8a:f0:7a:dc:6e:09:5b:4e:e5:78:1f:27:4f:
9e:44:52:53:49:db:c9:5d:7d:22:06:31:af:7e:22:
72:ad:c9:22:b1:1d:bb:9b:7c:da:29:da:43:fd:83:
5f:8d:55:7c:0d:fb:5b:9f:f3:6d:11:38:0b:de:1f:
53:9e:c8:00:10:f3:0d:d7:3a:b7:7f:44:73:65:a7:
74:28:82:2e:ab:16:74:a7:a4:01:4b:be:c3:89:ff:
84:0a:f5:90:da:8b:62:23:59:4b:a6:7d:b4:8b:5b:
83:40:45:77:1a:6a:7f:2c:ec:6c:a0:11:60:9f:2f:
97:63:23:78:49:9e:c2:3e:80:cb:3e:59:1c:e1:0e:
36:01:85:6f:3e:9d:0d:ba:61:08:78:25:f6:2a:bd:
92:40:84:53:c4:32:b7:3a:6b:9e:33:c8:b1:3c:77:
ce:c1:19:0d:77:6f:56:ec:8f:e9:f4:71:bf:b8:3a:
d3:16:e8:72:ca:63:2b:6c:00:c5:e0:d9:35:86:39:
c5:4e:45:2d:1e:2e:9c:2c:bd:f8:5d:14:3b:86:7c:
b4:6e:32:60:34:ba:10:72:12:6c:e2:61:b1:a2:6d:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:E6:72:22:FB:55:89:47:87:EA:48:94:A9:19:6E:D7:86:E4:CA
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/OELmciL7VYlHh-pIlKkZbteG5Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.104.0/21
31.28.64.0/24
31.28.66.0/24
31.28.69.0/24
31.28.71.0/24
31.28.73.0/24
31.28.76.0/22
31.28.87.0-31.28.95.255
94.126.41.0-94.126.42.255
94.126.44.0-94.126.46.255
178.18.120.0/22
193.192.2.0/23
193.193.162.0/23
IPv6:
2a01:8000::/32
2a10:6740::/32
Signature Algorithm: sha256WithRSAEncryption
b0:2c:00:38:92:7e:7d:61:3c:66:44:ad:d2:52:7e:9a:93:07:
92:92:c0:76:77:bd:a7:5e:45:7b:c0:60:6d:92:6e:76:d9:47:
3c:fb:8a:ce:cc:8b:75:55:1b:79:9c:6a:61:1d:f1:90:cb:56:
b0:ec:c6:2a:eb:42:7d:f2:57:be:0d:d2:bb:20:37:22:97:3a:
ce:b9:73:5b:ef:bb:51:e7:27:68:11:0f:4c:86:9e:86:1b:69:
e8:2a:5d:fc:0f:03:cb:1a:ac:9e:8f:0c:dd:0a:5c:68:00:57:
b6:51:00:d5:f3:6d:32:57:93:b5:d7:5d:40:3f:4d:80:48:3e:
88:49:9f:15:80:e8:d3:c4:f3:c4:79:c1:65:e6:cb:15:6b:44:
57:3b:cb:5e:81:19:ec:5b:48:b0:80:36:9d:c7:d3:c7:c5:30:
11:93:72:ae:66:77:13:11:5a:63:dd:6c:84:1b:21:66:93:9d:
ea:ae:54:23:7c:70:af:8a:4b:8f:90:be:a8:23:ed:38:2f:2e:
b1:4a:d9:f7:6c:91:8b:61:2a:0c:f1:81:ef:f0:b0:23:7e:71:
ea:cf:0f:0c:4b:09:ae:ce:cb:76:c3:ae:4f:17:8b:bc:71:82:
9a:3f:23:f9:65:24:f4:4e:3e:88:c6:98:31:0a:3d:65:9f:10:
e7:69:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:29 2024 by rpki-client on console-fra.rpki-client.org