Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OA_PTtC5ZQQhSjJoWGy7pO1C1dY.roa
File: OA_PTtC5ZQQhSjJoWGy7pO1C1dY.roa (raw, json)
Hash identifier: DETY9aj+AMbaqZ59WegttPbFK8y+Bf2OAJO8nEpyCTc=
Subject key identifier: 38:0F:CF:4E:D0:B9:65:04:21:4A:32:68:58:6C:BB:A4:ED:42:D5:D6
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01859FEEB74681285BB5B44370AD84D9CADA
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OA_PTtC5ZQQhSjJoWGy7pO1C1dY.roa
Signing time: Wed 11 Jan 2023 08:24:59 +0000
ROA not before: Wed 11 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 88.15.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 12 Jan 2023 09:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:ee:b7:46:81:28:5b:b5:b4:43:70:ad:84:d9:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 11 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=380fcf4ed0b96504214a3268586cbba4ed42d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b4:f0:af:58:2e:15:d6:38:5b:36:87:21:a5:
8b:9e:37:09:83:64:2f:32:37:59:a8:c8:e5:bb:3d:
c3:da:dc:a9:9a:8d:05:54:2d:f5:26:20:7d:ef:c4:
b9:22:ce:8d:9b:b7:de:8b:c1:d3:6a:44:00:b0:ca:
f1:14:f9:a0:db:a3:99:35:62:a1:b0:2c:ab:9f:03:
34:a9:c1:0c:ef:4c:31:73:2f:72:d5:b2:17:de:43:
aa:0b:69:e1:22:50:64:f5:17:42:49:7d:b3:1d:59:
3e:b7:03:a8:bd:a7:92:df:ef:67:a3:e8:b1:57:21:
f5:18:39:7e:be:bb:b9:00:88:f5:dd:4f:bd:ca:67:
35:8b:3e:20:0b:74:7c:b7:26:d0:a9:27:0d:75:25:
5d:8c:8b:02:c9:f9:da:b7:a1:8e:2d:a6:4b:2b:05:
3a:43:17:1b:bd:72:74:d6:11:05:ae:9c:d7:38:0a:
83:69:7c:b9:84:cc:df:86:e3:3d:e2:4d:09:9c:92:
80:74:15:77:48:5b:83:ba:f6:fe:6e:6b:9c:7d:b2:
25:30:79:94:d6:df:39:e6:3c:9e:cc:89:5a:c0:26:
f7:cd:db:ac:b8:f6:bc:48:3f:11:d5:59:2c:7d:6a:
70:03:73:59:6a:4d:53:14:07:22:1a:8b:e9:5c:54:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:CF:4E:D0:B9:65:04:21:4A:32:68:58:6C:BB:A4:ED:42:D5:D6
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OA_PTtC5ZQQhSjJoWGy7pO1C1dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.137.0.0/16
83.57.0.0/16
83.59.0.0/16
88.8.0.0/14
88.13.0.0-88.15.255.255
88.24.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a1:a4:54:77:bb:bb:5a:90:20:64:dd:58:73:24:11:03:d5:4a:
38:ca:e2:16:41:11:de:0f:2d:9e:23:04:4a:9a:2f:05:53:58:
fd:c4:b4:b3:39:ea:14:dc:5a:3b:0a:a3:07:b4:1a:85:4e:1a:
59:76:f4:22:24:38:1d:3d:32:ce:89:ea:16:4f:0b:e2:86:7f:
9e:b2:6c:6e:8c:9c:6a:14:95:00:29:84:6a:f2:71:a3:42:06:
cd:e2:da:7e:32:10:4b:27:1f:75:b4:75:6c:5f:d0:65:65:03:
a7:86:b3:68:3a:50:90:86:be:76:3a:a8:ea:91:75:d9:b4:52:
3c:9b:41:da:fd:46:86:57:98:f4:8e:51:95:24:41:99:67:ff:
18:c9:cb:c0:51:a3:9c:0d:53:7c:ef:c7:c6:c5:c0:75:3d:16:
bd:08:1d:ef:63:eb:70:2d:50:9a:c0:7b:43:4b:b8:f0:ff:b5:
e7:7d:26:2e:7e:71:75:ba:21:a8:4b:6a:d8:38:25:d6:60:aa:
e2:c0:ec:2b:02:d9:05:64:74:46:09:0c:79:bd:6f:eb:2e:97:
03:9e:92:59:ca:fa:1e:e7:8a:ee:cf:64:46:ec:4e:d4:09:4a:
55:c6:30:78:c3:ef:ee:99:29:35:f0:7f:83:9f:c6:31:25:87:
d0:65:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org