Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/oxjo2laT6Lj_JrYsb2I8INYfROc.roa
File: oxjo2laT6Lj_JrYsb2I8INYfROc.roa (raw, json)
Hash identifier: R2IpDfAqwQdhvkhrzC/mSBD9L+KHMS9CLQWgPfcILjI=
Subject key identifier: A3:18:E8:DA:56:93:E8:B8:FF:26:B6:2C:6F:62:3C:20:D6:1F:44:E7
Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial: 01856F1DBFC98409D09B4137DCD15D09F292
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/oxjo2laT6Lj_JrYsb2I8INYfROc.roa
Signing time: Sun 01 Jan 2023 20:54:58 +0000
ROA not before: Sun 01 Jan 2023 20:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39923
IP address blocks: 185.58.96.0/22 maxlen: 22
185.35.164.0/22 maxlen: 22
195.189.202.0/23 maxlen: 23
194.146.23.0/24 maxlen: 24
185.111.204.0/22 maxlen: 22
185.111.204.0/24 maxlen: 24
185.111.205.0/24 maxlen: 24
185.111.206.0/24 maxlen: 24
109.68.160.0/21 maxlen: 21
109.68.164.0/24 maxlen: 24
91.238.219.0/24 maxlen: 24
2a02:2a08::/32 maxlen: 32
2a04:6480::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 30 Jun 2023 07:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:bf:c9:84:09:d0:9b:41:37:dc:d1:5d:09:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Validity
Not Before: Jan 1 20:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a318e8da5693e8b8ff26b62c6f623c20d61f44e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9d:9f:d3:fb:e3:66:46:af:0a:42:f0:9f:8a:
3e:ae:72:9b:8c:e9:8a:aa:b3:94:3b:90:80:0b:ec:
03:b1:4d:89:45:30:f5:9e:81:36:03:ea:a2:1d:d3:
3d:fa:6c:55:8c:64:df:1e:f3:2a:bf:fb:82:f0:a8:
65:56:4c:65:d7:b6:58:2c:1f:53:80:bb:e3:c7:0f:
11:f9:0e:04:f1:a9:ee:e6:9e:96:36:bb:4c:ac:99:
f3:40:60:82:21:37:09:5a:aa:ff:e9:27:96:6b:2c:
85:a2:de:f8:dc:8a:30:28:f1:11:fc:c9:ee:af:3a:
fa:2b:d8:4b:d9:9a:42:c8:af:cd:14:a8:8c:ca:e3:
26:98:cd:c2:35:3b:31:58:ff:ec:96:9a:d7:c0:77:
a4:0d:7f:09:e6:f2:38:87:7d:00:fe:ce:bc:a9:f2:
d3:b9:d3:68:6d:2e:c7:ad:ff:e9:a8:8e:7e:65:aa:
a8:58:12:eb:d5:a3:4c:9d:87:53:7e:ad:d3:44:62:
c0:e3:d7:f0:a4:59:e8:db:5f:00:d8:b4:ba:ac:48:
20:53:6a:ea:39:eb:e0:24:df:b3:94:66:5d:6e:a2:
56:86:85:a7:72:09:ad:3c:fa:cb:29:43:46:50:d1:
94:70:75:af:56:ee:1e:41:a2:f7:f3:2a:0f:bf:91:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:E8:DA:56:93:E8:B8:FF:26:B6:2C:6F:62:3C:20:D6:1F:44:E7
X509v3 Authority Key Identifier:
keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/oxjo2laT6Lj_JrYsb2I8INYfROc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.219.0/24
109.68.160.0/21
185.35.164.0/22
185.58.96.0/22
185.111.204.0/22
194.146.23.0/24
195.189.202.0/23
IPv6:
2a02:2a08::/32
2a04:6480::/29
Signature Algorithm: sha256WithRSAEncryption
8a:c0:f3:51:55:30:b8:1f:ac:3f:9b:94:36:0d:12:ed:fb:37:
63:f1:4a:c5:30:c9:c4:65:0d:cb:62:47:94:95:9c:6a:27:5b:
59:5c:b1:01:12:4a:d0:3e:21:99:16:67:62:4d:1e:d6:e6:d1:
65:11:f7:14:66:fe:80:a6:1a:50:3a:3d:b8:28:61:76:d4:4d:
0a:45:34:7a:9c:8f:aa:7b:a0:dd:c1:b1:c0:82:a5:04:48:69:
27:f3:10:4e:00:ce:97:39:13:3e:69:7f:17:b1:75:6b:aa:19:
d7:a6:15:5a:58:9e:a9:92:73:af:b9:e7:10:d4:a0:85:65:77:
70:9c:38:3b:41:28:b7:a6:bf:22:f8:73:24:d2:e0:e7:94:06:
f5:eb:38:fc:0d:37:b2:60:f7:66:a5:6c:52:24:24:e7:ed:81:
b8:22:2d:e3:a4:ae:7f:c1:12:bb:cd:ff:e6:3a:40:68:e8:77:
53:6d:12:7b:97:98:0d:ff:1c:9b:1f:8c:22:cf:d3:3d:d3:e6:
25:18:5b:d5:a5:ef:4b:31:e0:16:14:53:c5:98:dc:5f:4b:4d:
a5:04:de:02:b6:ae:51:24:c2:2e:f0:b1:02:b5:2c:56:ae:41:
28:a9:bf:47:bd:a7:a9:93:20:a6:4c:6c:86:d8:e6:5a:4f:54:
75:a1:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org