Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/354XAWHns0l8Hb1NgeiUkG-OKHc.roa
File: 354XAWHns0l8Hb1NgeiUkG-OKHc.roa (raw, json)
Hash identifier: zooyP87bZLsVfsdiFwj5YzAkac+vIAoiFyYmqNqbwP8=
Subject key identifier: DF:9E:17:01:61:E7:B3:49:7C:1D:BD:4D:81:E8:94:90:6F:8E:28:77
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 018CC50138BF555C8776F8601C4E288403FB
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/354XAWHns0l8Hb1NgeiUkG-OKHc.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42739
IP address blocks: 188.112.57.0/24 maxlen: 24
92.55.220.0/24 maxlen: 24
92.55.226.0/24 maxlen: 24
77.242.224.0/20 maxlen: 20
77.242.233.0/24 maxlen: 24
77.242.234.0/24 maxlen: 24
77.242.235.0/24 maxlen: 24
188.112.0.0/18 maxlen: 18
185.46.92.0/22 maxlen: 22
78.159.64.0/20 maxlen: 20
78.159.83.0/24 maxlen: 24
92.55.192.0/18 maxlen: 18
37.139.147.0/24 maxlen: 24
37.139.148.0/24 maxlen: 24
37.139.149.0/24 maxlen: 24
37.139.150.0/24 maxlen: 24
37.139.151.0/24 maxlen: 24
37.139.146.0/24 maxlen: 24
37.139.144.0/24 maxlen: 24
37.139.145.0/24 maxlen: 24
2a02:7f0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jul 2024 09:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:38:bf:55:5c:87:76:f8:60:1c:4e:28:84:03:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df9e170161e7b3497c1dbd4d81e894906f8e2877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:20:6d:83:07:45:1c:2d:22:28:40:f7:26:45:
b7:e7:f5:91:ff:98:8f:79:4b:e7:7d:ef:1f:17:f1:
5f:22:92:f0:50:b3:20:80:e0:c5:28:d2:38:ce:e2:
ac:ae:81:19:a2:64:2f:43:2d:0a:ff:71:36:db:d7:
30:ba:39:0d:c0:de:71:ca:e0:87:2a:d5:6e:d7:ce:
31:de:5a:a6:c3:34:3f:cc:10:35:a5:2b:e2:e0:bd:
f9:9a:9a:16:f2:ee:42:4f:f2:17:b6:2c:ab:ba:44:
2e:23:78:00:16:95:85:7c:ad:a1:33:9e:87:5c:42:
e4:6f:5a:4c:3e:87:44:1e:af:c1:e2:d0:1d:3d:27:
94:e8:ab:3c:36:64:0c:c4:7a:2d:33:5c:fe:2f:39:
28:49:c9:83:ac:a7:df:91:83:61:2d:ed:5f:2c:76:
7d:08:62:43:1e:33:a5:4e:b7:f0:2b:02:fb:08:ac:
cf:96:22:48:81:eb:9c:e6:28:01:9b:e8:6e:a0:78:
62:78:11:14:ad:bb:1a:86:63:2c:ba:6f:11:a8:ae:
14:b5:ce:d1:3e:f4:f2:41:86:de:d4:c5:0f:4d:2e:
b5:ed:a8:5c:d2:eb:d3:3a:cd:0d:59:67:b0:51:f0:
80:81:f1:bd:df:7f:da:2b:b7:f5:08:77:09:47:ad:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:17:01:61:E7:B3:49:7C:1D:BD:4D:81:E8:94:90:6F:8E:28:77
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/354XAWHns0l8Hb1NgeiUkG-OKHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.144.0/21
77.242.224.0/20
78.159.64.0/20
78.159.83.0/24
92.55.192.0/18
185.46.92.0/22
188.112.0.0/18
IPv6:
2a02:7f0::/32
Signature Algorithm: sha256WithRSAEncryption
31:6f:c5:90:73:1b:a4:38:98:c4:02:35:c1:98:99:7e:9f:6d:
3c:14:be:b7:43:d4:c3:d9:4b:01:1a:76:2b:4e:cd:95:64:73:
94:c5:76:34:92:1c:6c:99:ed:a2:c8:c6:6e:15:e7:fc:d0:2a:
d1:fe:e4:48:c9:54:d3:57:96:9f:4e:75:c9:24:db:92:bc:c8:
a2:c8:29:ca:b6:e6:7e:57:7e:0a:ec:21:7b:86:3f:89:29:72:
84:06:fb:e5:9a:9b:15:32:b4:57:5a:bd:7f:42:93:cf:28:c2:
92:d3:e5:4b:a7:59:3a:68:9c:b7:86:69:b8:54:b3:ff:32:38:
15:fb:4a:d5:83:f3:6a:23:9d:f7:6a:78:23:82:e2:55:b3:01:
19:64:3e:7c:25:7e:7c:c9:a8:26:e1:34:07:59:fd:45:ea:7a:
39:c2:53:0f:e0:dd:12:f4:00:81:67:ce:24:3c:3c:da:91:7e:
4a:03:cd:af:32:e8:03:78:2c:5b:73:37:56:38:3a:c1:db:49:
ad:6b:a1:0e:76:2c:91:5e:f5:77:03:ce:f5:ef:d3:35:27:05:
19:9d:55:c1:ce:06:23:0e:d5:b2:62:6b:e1:c2:8e:11:d6:50:
05:f9:a1:1a:12:52:ff:76:53:50:4a:79:3f:35:df:9d:c9:42:
ff:73:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:53:26 2024 by rpki-client on console-ams.rpki-client.org