Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/OpsTHIrcVSmLEsETcMZwvnvSbRI.roa
File: OpsTHIrcVSmLEsETcMZwvnvSbRI.roa (raw, json)
Hash identifier: omndTbYNZdylgTRs5aKymfgMajo6F8enGCr/Vh7sMDs=
Subject key identifier: 3A:9B:13:1C:8A:DC:55:29:8B:12:C1:13:70:C6:70:BE:7B:D2:6D:12
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01856FF011AF165BDAC6ED2E0341F7807D0B
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/OpsTHIrcVSmLEsETcMZwvnvSbRI.roa
Signing time: Mon 02 Jan 2023 00:44:42 +0000
ROA not before: Mon 02 Jan 2023 00:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8947
IP address blocks: 37.140.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:11:af:16:5b:da:c6:ed:2e:03:41:f7:80:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Jan 2 00:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a9b131c8adc55298b12c11370c670be7bd26d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:3c:79:06:64:e0:41:fb:9d:0e:1f:9a:30:
0d:6f:e3:b9:0d:f2:4e:82:32:80:67:88:21:19:96:
48:54:55:5f:5c:97:cc:af:cc:c9:9e:d8:d3:3c:e5:
2d:68:39:f4:b8:a3:75:44:60:41:7d:1a:64:6d:82:
b1:91:7d:59:89:cd:c6:a5:ef:20:e0:56:c0:27:d0:
24:62:3a:b0:60:6d:82:a5:e3:ac:a0:43:44:4d:08:
5d:12:0e:65:63:64:93:63:1e:92:b5:b4:36:dd:b6:
77:27:0b:6e:0c:6d:5c:5d:e3:08:f3:09:e9:63:68:
51:dd:75:54:43:0b:d8:bb:0d:de:76:94:27:5d:0d:
d0:08:12:04:c9:b2:c2:0e:48:22:73:55:35:21:14:
16:1d:37:94:1b:0d:e0:33:a4:bd:3f:7d:1f:d0:40:
0d:bb:9a:69:7e:f2:46:00:94:05:94:04:fa:3f:23:
1c:74:c1:45:44:c4:e5:ea:08:0a:d6:4c:8f:f7:be:
ab:e8:5b:3d:b5:67:03:8a:a7:7d:de:01:93:17:56:
03:5a:71:4d:bc:80:18:fc:97:83:62:87:b2:78:ab:
10:58:2c:aa:8a:90:62:46:db:89:e2:e9:e4:d4:77:
4b:fb:bf:fd:c1:21:92:45:5f:32:cd:27:5e:3d:98:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:13:1C:8A:DC:55:29:8B:12:C1:13:70:C6:70:BE:7B:D2:6D:12
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/OpsTHIrcVSmLEsETcMZwvnvSbRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.208.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:12:68:8a:e5:5d:ff:ab:f5:98:96:f9:16:d5:ed:36:31:62:
ab:db:cf:4f:2b:2b:06:7a:a5:d8:77:21:0a:08:6b:05:bc:d3:
f0:c4:b9:e5:37:5e:60:76:99:51:cd:e1:cc:59:81:ae:47:59:
87:36:af:84:5b:45:58:c8:67:9c:dc:fa:2e:7f:27:02:64:52:
a1:1e:37:3d:b3:90:6f:6c:2d:18:16:5d:cc:2d:0b:da:bf:65:
8d:2b:85:28:90:5d:ff:59:77:7f:eb:aa:98:8e:04:32:f4:8b:
50:1d:94:a2:97:81:a2:60:97:65:ae:31:3a:d0:83:5e:f0:24:
e4:97:39:00:88:17:5f:33:b4:57:8a:6c:b7:bc:86:b1:a5:25:
86:0b:ff:30:94:d4:06:62:09:31:f8:cc:d3:bb:af:1c:d4:8b:
bc:02:cb:9e:7b:5c:48:45:ca:8d:14:f6:29:d7:25:c1:88:52:
a9:8d:62:ec:ba:21:c8:75:50:96:5d:94:98:69:a2:49:d0:96:
c3:98:72:cc:5e:52:37:9a:7b:c7:d4:af:f1:b8:b9:02:c4:65:
17:2e:e0:27:4f:0a:4d:98:90:3d:bb:95:b3:ca:37:20:41:a7:
b6:05:4f:82:58:13:3f:0d:90:ec:a9:e4:e6:eb:e3:4d:84:e9:
25:c2:f9:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8BGvFlvaxu0uA0H3gH0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2IwMzg1MjYwYWM2NmYyMWM0M2Y1YWI3OGJhYzY4MmU4
Y2U1NGYwHhcNMjMwMTAyMDA0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTliMTMxYzhhZGM1NTI5OGIxMmMxMTM3MGM2NzBiZTdiZDI2ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTA8eQZk4EH7nQ4fmjANb+O5DfJO
gjKAZ4ghGZZIVFVfXJfMr8zJntjTPOUtaDn0uKN1RGBBfRpkbYKxkX1Zic3Gpe8g
4FbAJ9AkYjqwYG2CpeOsoENETQhdEg5lY2STYx6StbQ23bZ3JwtuDG1cXeMI8wnp
Y2hR3XVUQwvYuw3edpQnXQ3QCBIEybLCDkgic1U1IRQWHTeUGw3gM6S9P30f0EAN
u5ppfvJGAJQFlAT6PyMcdMFFRMTl6ggK1kyP976r6Fs9tWcDiqd93gGTF1YDWnFN
vIAY/JeDYoeyeKsQWCyqipBiRtuJ4unk1HdL+7/9wSGSRV8yzSdePZgIuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqbExyK3FUpixLBE3DGcL570m0SMB8GA1UdIwQY
MBaAFP47A4UmCsZvIcQ/WreLrGgujOVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjIt
NzUwMzNmOGY3MjEwLzEvT3BzVEhJcmNWU21MRXNFVGNNWnd2bnZTYlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjItNzUwMzNmOGY3MjEw
LzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJYzQMA0G
CSqGSIb3DQEBCwUAA4IBAQBMEmiK5V3/q/WYlvkW1e02MWKr289PKysGeqXYdyEK
CGsFvNPwxLnlN15gdplRzeHMWYGuR1mHNq+EW0VYyGec3PoufycCZFKhHjc9s5Bv
bC0YFl3MLQvav2WNK4UokF3/WXd/66qYjgQy9ItQHZSil4GiYJdlrjE60INe8CTk
lzkAiBdfM7RXimy3vIaxpSWGC/8wlNQGYgkx+MzTu68c1Iu8Asuee1xIRcqNFPYp
1yXBiFKpjWLsuiHIdVCWXZSYaaJJ0JbDmHLMXlI3mnvH1K/xuLkCxGUXLuAnTwpN
mJA9u5WzyjcgQae2BU+CWBM/DZDsqeTm6+NNhOklwvmP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org