Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/97OaQQDadBq7qiUQLXCWAfojqec.roa
File: 97OaQQDadBq7qiUQLXCWAfojqec.roa (raw, json)
Hash identifier: b9Pu6obAhFl4v0eqK5oYiApgdYW7J89KLcIZ+m24tg8=
Subject key identifier: F7:B3:9A:41:00:DA:74:1A:BB:AA:25:10:2D:70:96:01:FA:23:A9:E7
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 018D4535842E78649237DA95525A86211537
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/97OaQQDadBq7qiUQLXCWAfojqec.roa
Signing time: Fri 26 Jan 2024 09:59:11 +0000
ROA not before: Fri 26 Jan 2024 09:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210403
IP address blocks: 78.24.248.0/21 maxlen: 24
78.138.45.0/24 maxlen: 24
78.138.58.0/24 maxlen: 24
185.98.131.0/24 maxlen: 24
185.238.116.0/24 maxlen: 24
193.203.239.0/24 maxlen: 24
194.126.193.0/24 maxlen: 24
213.156.132.0/22 maxlen: 24
213.255.195.0/24 maxlen: 24
2a00:7ee0:40::/44 maxlen: 48
2a00:7ee0:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 21 May 2024 09:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:35:84:2e:78:64:92:37:da:95:52:5a:86:21:15:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Jan 26 09:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7b39a4100da741abbaa25102d709601fa23a9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:78:06:83:93:16:23:aa:4a:9f:a4:11:6d:
e7:ca:90:04:c0:76:7f:f1:1a:69:31:07:7d:0e:65:
77:e5:8b:44:1f:fd:65:53:ea:d3:d2:31:92:33:eb:
77:98:4d:e6:78:bd:30:dc:a8:cf:10:9d:66:f7:8a:
8b:86:eb:89:7f:0f:6c:d1:c4:51:ac:fa:eb:53:02:
58:11:d0:28:c8:03:da:c0:a1:25:52:42:40:da:34:
a1:b0:02:d0:f9:dd:10:2c:8d:08:83:ca:48:3b:20:
cf:01:c9:ac:31:e9:bf:44:62:5d:81:de:4f:0a:61:
63:3c:9b:a8:f1:b6:92:ed:03:ca:3f:37:ae:f6:3a:
2b:24:5d:a0:b9:c6:d9:31:ce:63:35:82:44:72:db:
d7:68:58:a9:b1:72:12:38:eb:0d:89:a2:02:b3:4c:
13:af:48:88:6e:46:ec:36:29:2f:a7:45:fc:35:0a:
63:7a:26:49:8e:b6:d1:45:ff:63:03:7b:30:6d:42:
1f:05:85:d7:0e:3c:0e:36:92:1d:f9:64:c2:fc:fb:
92:e9:9c:28:86:fb:b5:f7:3b:a8:fe:8e:f1:33:fd:
d1:5c:e7:49:4e:d3:b4:07:64:d6:2c:38:da:e8:d7:
74:14:d2:d1:00:5f:d4:ef:90:25:fb:bb:19:39:a1:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:9A:41:00:DA:74:1A:BB:AA:25:10:2D:70:96:01:FA:23:A9:E7
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/97OaQQDadBq7qiUQLXCWAfojqec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.248.0/21
78.138.45.0/24
78.138.58.0/24
185.98.131.0/24
185.238.116.0/24
193.203.239.0/24
194.126.193.0/24
213.156.132.0/22
213.255.195.0/24
IPv6:
2a00:7ee0:40::/44
2a00:7ee0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
0d:1b:77:05:3e:74:20:1c:e5:e4:a5:ae:ba:64:b8:a2:03:f2:
a1:84:03:fc:94:3f:62:af:19:dd:9d:38:e9:93:49:70:40:72:
54:c8:7a:2a:90:18:df:6c:ea:b5:8b:13:58:25:48:f9:dc:83:
ba:f2:0c:0b:19:a8:8c:f1:2a:c6:ae:4c:cf:e9:36:20:88:84:
cd:b0:da:b3:be:8d:59:0e:9a:af:09:89:8f:c7:e8:06:24:42:
f1:cc:46:f1:6d:b1:e2:12:de:63:0f:35:f8:ff:8e:30:d7:8a:
24:a3:7d:ea:3d:16:ef:15:50:fb:ad:26:f1:a5:4a:b4:66:38:
c1:9a:ae:a9:86:b1:16:f6:02:a9:28:47:00:04:87:5f:88:88:
8a:95:09:d2:7f:9c:d1:f5:45:8a:6e:17:3d:9a:25:95:c4:b3:
21:bc:df:d8:84:5a:3a:7e:6e:50:cc:64:5a:87:03:c7:e1:b2:
42:3f:07:4d:1f:28:46:6f:e3:e2:69:d4:92:c0:34:8f:ae:91:
93:ec:e2:56:ab:f6:c6:b8:bf:d2:66:2a:a4:7a:fc:1d:ca:bf:
92:1f:13:8d:a9:27:ab:de:15:48:4d:70:14:a3:98:17:23:af:
6c:c2:ab:9b:1c:7b:14:19:b0:e9:cd:f0:e0:ab:91:79:15:42:
5a:b8:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:41 2024 by rpki-client on console-ams.rpki-client.org