Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/OkO_3TBLiYHfE0e9XCsFyXEZwPc.roa
File: OkO_3TBLiYHfE0e9XCsFyXEZwPc.roa (raw, json)
Hash identifier: axL1OegJ3HwHEu37CqWMitZlGl4auy1rvtBbTSazTP0=
Subject key identifier: 3A:43:BF:DD:30:4B:89:81:DF:13:47:BD:5C:2B:05:C9:71:19:C0:F7
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 0189CEDDF0B0E2B111CF98846DEC0AACCFBF
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/OkO_3TBLiYHfE0e9XCsFyXEZwPc.roa
Signing time: Mon 07 Aug 2023 07:19:58 +0000
ROA not before: Mon 07 Aug 2023 07:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42705
IP address blocks: 80.251.0.0/20 maxlen: 20
80.251.10.0/24 maxlen: 24
80.251.11.0/24 maxlen: 24
85.31.64.0/19 maxlen: 24
5.11.16.0/24 maxlen: 24
5.11.17.0/24 maxlen: 24
5.11.16.0/22 maxlen: 22
5.11.18.0/24 maxlen: 24
5.11.24.0/23 maxlen: 23
5.11.24.0/21 maxlen: 21
5.11.21.0/24 maxlen: 24
5.11.24.0/24 maxlen: 24
5.11.26.0/23 maxlen: 23
5.11.25.0/24 maxlen: 24
5.11.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 09:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:dd:f0:b0:e2:b1:11:cf:98:84:6d:ec:0a:ac:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Aug 7 07:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a43bfdd304b8981df1347bd5c2b05c97119c0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:a4:66:1e:ee:59:68:c1:dc:26:44:a7:91:
cf:62:98:f9:ce:e4:95:a4:5f:2d:7c:ed:0c:74:7c:
fa:d7:40:66:c8:0a:04:69:16:37:09:ca:8f:53:7d:
96:52:11:2f:82:8b:bb:43:b7:fd:2a:c3:fe:26:8a:
db:26:3e:94:27:49:42:07:f2:30:f2:12:3a:8d:82:
9d:17:38:fb:57:71:68:36:00:7a:c5:65:7b:34:3a:
53:eb:d5:bd:60:18:b8:2c:ab:c8:56:e5:7b:e1:43:
1c:10:ba:b7:6e:56:34:e3:8e:d1:86:76:c4:85:83:
1b:8c:90:04:48:f3:43:6f:15:a9:db:c3:26:74:74:
04:73:a5:00:99:c8:32:c4:50:9b:2d:63:c6:7d:d7:
fe:9a:c4:19:ae:b2:99:e4:09:a9:0c:8b:4f:1f:e1:
ff:26:88:fe:ca:ca:4f:be:07:09:76:c6:ea:d9:33:
eb:7b:24:0a:22:08:c7:c8:fc:c9:8d:de:72:54:06:
33:90:b6:3e:f3:6b:de:1b:54:20:e5:5e:52:c5:e7:
b1:59:81:c2:27:7e:0c:72:02:0c:6a:a1:57:be:95:
46:73:37:bf:35:dd:60:c1:96:80:ae:a3:e4:04:03:
94:46:d8:5e:58:f2:aa:cb:10:21:31:83:7e:8a:af:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:BF:DD:30:4B:89:81:DF:13:47:BD:5C:2B:05:C9:71:19:C0:F7
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/OkO_3TBLiYHfE0e9XCsFyXEZwPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.16.0/22
5.11.21.0/24
5.11.24.0/21
80.251.0.0/20
85.31.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:c0:f0:2e:4f:cf:c2:2d:49:34:22:ee:50:ac:13:bc:f4:e3:
35:74:fe:b0:37:1c:d7:0b:97:51:43:a9:35:23:58:38:16:85:
c0:0c:25:89:f2:52:04:12:18:67:70:8a:0f:4c:96:02:4e:c5:
fb:e1:9b:7b:3a:7e:a5:f1:c0:15:6e:ec:26:79:7a:2d:d7:c9:
c4:2d:7a:a9:d3:02:0f:03:b5:78:c0:b6:ea:38:57:3e:b4:84:
28:ed:92:d9:c3:10:03:2a:08:07:f2:b5:d0:a5:59:13:4d:4e:
d9:34:1d:8b:53:f3:42:02:cb:5d:fd:1f:d3:f7:09:af:fa:cb:
04:0d:ba:57:d0:23:7d:00:cd:98:78:a6:8b:c4:e2:44:7d:10:
87:9d:49:69:d5:87:91:d3:b8:e2:ec:14:34:b7:8e:2c:03:be:
f4:8f:23:00:1c:10:c4:f7:95:32:0a:d1:1a:2c:1f:f5:66:53:
ed:80:34:62:7c:38:5d:ab:eb:51:ae:67:7a:83:0f:00:09:7e:
37:29:54:5f:92:1b:4b:09:e1:7f:72:64:88:17:a5:73:2a:79:
b9:f1:cd:c4:f5:05:60:49:72:04:3f:0f:4b:ac:77:8f:ed:c9:
b5:23:3f:37:c2:be:38:54:96:95:10:cb:0e:c6:06:aa:74:4a:
03:a8:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org