Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Osl13NTLizvcXpcTgPZQl5gLMtU.roa
File: Osl13NTLizvcXpcTgPZQl5gLMtU.roa (raw, json)
Hash identifier: 9kUAPrPCF+oR+ilbnCsuWNvjKvL/NRA2VSCEf9mBJ+c=
Subject key identifier: 3A:C9:75:DC:D4:CB:8B:3B:DC:5E:97:13:80:F6:50:97:98:0B:32:D5
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018CF2EAC32AD8A64C0B7D38B67E48EEB5D5
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Osl13NTLizvcXpcTgPZQl5gLMtU.roa
Signing time: Wed 10 Jan 2024 10:28:40 +0000
ROA not before: Wed 10 Jan 2024 10:28:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 95.38.136.0/22 maxlen: 22
95.38.133.0/24 maxlen: 24
95.38.134.0/24 maxlen: 24
95.38.135.0/24 maxlen: 24
95.38.140.0/22 maxlen: 22
95.38.152.0/24 maxlen: 24
95.38.152.0/21 maxlen: 21
95.38.159.0/24 maxlen: 24
95.38.157.0/24 maxlen: 24
95.38.158.0/24 maxlen: 24
95.38.153.0/24 maxlen: 24
95.38.154.0/24 maxlen: 24
95.38.155.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.174.0/24 maxlen: 24
95.38.96.0/21 maxlen: 21
95.38.97.0/24 maxlen: 24
95.38.98.0/24 maxlen: 24
95.38.96.0/24 maxlen: 24
95.38.104.0/22 maxlen: 22
95.38.104.0/24 maxlen: 24
95.38.105.0/24 maxlen: 24
95.38.100.0/24 maxlen: 24
95.38.101.0/24 maxlen: 24
95.38.102.0/24 maxlen: 24
95.38.103.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.106.0/24 maxlen: 24
95.38.107.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.132.0/22 maxlen: 22
95.38.132.0/24 maxlen: 24
95.38.240.0/21 maxlen: 21
95.38.243.0/24 maxlen: 24
95.38.244.0/24 maxlen: 24
95.38.245.0/24 maxlen: 24
95.38.241.0/24 maxlen: 24
95.38.242.0/24 maxlen: 24
95.38.246.0/24 maxlen: 24
95.38.248.0/22 maxlen: 22
95.38.247.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.208.0/22 maxlen: 22
95.38.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 07:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:ea:c3:2a:d8:a6:4c:0b:7d:38:b6:7e:48:ee:b5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jan 10 10:28:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ac975dcd4cb8b3bdc5e971380f65097980b32d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:3f:d4:1e:02:57:be:e8:b9:08:4d:cd:ed:
c4:84:4d:cb:a0:8f:07:47:62:d6:f4:65:f4:b6:3c:
41:1e:89:4d:04:66:ef:97:a6:1d:75:68:77:62:6e:
04:f9:9f:5f:2d:69:58:4d:4e:83:f0:3b:44:64:ba:
db:28:ac:f9:8a:07:52:31:77:03:ae:d1:21:2f:48:
ca:40:43:c5:4d:5d:aa:78:d0:ea:79:6c:ea:ca:1c:
8f:d4:75:ab:7e:3a:26:d6:7e:98:5d:5e:b5:94:8b:
63:96:2c:65:9a:0b:e4:0d:3e:0e:79:af:c2:f4:91:
b5:31:a6:91:20:73:9e:d9:3f:38:49:aa:67:17:55:
6f:02:69:11:32:3e:e6:41:b2:77:2c:24:41:e6:80:
01:3f:49:fc:c4:90:21:07:4b:83:46:84:47:d8:20:
44:f0:af:51:6e:da:41:af:73:5f:07:f3:66:dd:14:
0b:f6:55:a7:48:fe:37:f9:7d:b6:0a:ca:d2:96:9d:
6a:49:e1:58:97:96:6a:5f:1d:af:47:47:b0:19:2c:
c4:ea:7d:fb:7d:de:df:b9:70:35:b9:01:47:b1:d0:
8a:05:bb:27:0a:b1:8c:86:78:4b:4f:40:05:55:7e:
7c:e3:e4:84:3b:13:05:c6:7b:be:dc:c3:a7:4f:86:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:75:DC:D4:CB:8B:3B:DC:5E:97:13:80:F6:50:97:98:0B:32:D5
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Osl13NTLizvcXpcTgPZQl5gLMtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.96.0-95.38.107.255
95.38.130.0-95.38.143.255
95.38.152.0/21
95.38.168.0/22
95.38.174.0/24
95.38.200.0/22
95.38.208.0/22
95.38.240.0-95.38.251.255
Signature Algorithm: sha256WithRSAEncryption
89:92:f7:72:e4:9d:53:c5:bb:aa:65:30:7a:46:e8:7d:d0:cd:
a3:04:64:0a:ff:c7:5e:4d:d4:41:d2:ba:81:37:f3:82:8a:9b:
d0:d3:6a:27:97:52:21:c8:da:ca:bb:54:60:9c:3c:66:04:9b:
b2:1d:92:f1:a4:e5:64:95:36:2e:a2:d1:c7:e9:01:66:8a:51:
1b:2b:45:59:25:a4:8c:df:5a:81:fd:56:94:fc:35:04:67:31:
e4:3c:b2:01:43:72:8f:1f:dd:54:a3:e6:45:d9:00:66:aa:cc:
ce:c5:1a:23:6c:97:11:a2:f7:75:ba:eb:4b:11:5e:e3:ee:45:
cf:af:7a:fa:7b:ee:b1:54:b1:37:b4:fd:44:7c:e4:da:b9:da:
17:77:d1:ac:ae:a6:f9:13:ff:57:2d:df:b2:c8:f4:21:10:e2:
a4:65:dc:18:e6:27:67:83:cb:7b:28:b4:61:fa:cd:04:ad:52:
19:57:bb:13:21:a9:3e:6f:97:7a:a0:3c:c0:40:22:c5:9c:83:
0e:28:c6:5d:4c:f1:ea:b5:32:12:b3:4f:95:7c:28:a2:f3:d6:
8b:89:b1:06:a6:50:75:e6:74:ae:9d:8e:b0:b8:a5:40:fe:de:
35:02:11:39:d4:f9:05:31:50:52:d8:7b:28:2a:95:83:52:56:
24:59:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org