Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oN6GGerp3RimiLx2osNeKAKJCvE.roa
File: oN6GGerp3RimiLx2osNeKAKJCvE.roa (raw, json)
Hash identifier: AYEIbi2NCnpi7mj4WBEC+m8XoollyBSfRK3vJeUAkro=
Subject key identifier: A0:DE:86:19:EA:E9:DD:18:A6:88:BC:76:A2:C3:5E:28:02:89:0A:F1
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019140B403DF2545891E6B95641238A4A4CC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oN6GGerp3RimiLx2osNeKAKJCvE.roa
Signing time: Sun 11 Aug 2024 09:10:24 +0000
ROA not before: Sun 11 Aug 2024 09:10:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.114.0/24 maxlen: 24
77.242.146.0/23 maxlen: 23
77.242.159.0/24 maxlen: 24
88.151.63.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 10:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:40:b4:03:df:25:45:89:1e:6b:95:64:12:38:a4:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 11 09:10:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0de8619eae9dd18a688bc76a2c35e2802890af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:58:87:d4:5c:39:08:18:0b:07:a3:96:a8:
2a:06:ff:33:df:06:e3:33:81:0e:9d:98:3e:af:6b:
de:c2:8c:3d:c3:ca:5f:fa:b9:42:94:1b:85:3c:e3:
a6:01:bb:30:38:58:86:0f:75:9d:6c:ef:ee:79:42:
76:97:44:a4:3a:58:1c:cf:17:3c:e7:ed:90:6d:8c:
be:a5:cf:63:a8:c6:f3:c9:c2:ee:f6:14:32:22:af:
ee:b2:29:ef:5b:b8:21:a9:a1:f5:c7:93:1b:80:f1:
f6:d4:af:d6:f9:67:de:df:69:34:7b:ea:85:f4:a3:
20:eb:a6:fb:d4:e0:42:30:e7:f1:73:88:31:6d:f6:
ac:a5:01:5d:f9:fd:f7:f0:d7:46:45:0b:82:89:60:
37:39:d8:ee:56:a9:76:f1:8b:98:02:8a:c2:32:14:
7a:e1:4a:ea:16:69:84:3b:5b:08:b1:5e:52:2a:f8:
e2:6d:96:5f:02:00:37:a2:ba:af:af:0d:3c:8d:e6:
be:a9:b0:61:f1:32:88:7c:a9:a2:73:54:2b:05:ac:
10:05:a6:dc:c7:cc:47:08:41:2a:68:e4:7b:bc:44:
98:01:a6:76:67:99:b5:8a:f4:3b:cb:d1:9b:15:96:
b5:09:c6:0e:7e:0d:bb:7e:13:7d:4e:f7:1f:e1:ce:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:86:19:EA:E9:DD:18:A6:88:BC:76:A2:C3:5E:28:02:89:0A:F1
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oN6GGerp3RimiLx2osNeKAKJCvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
77.242.146.0/23
77.242.159.0/24
88.151.63.0/24
88.209.203.0/24
88.209.229.0-88.209.230.255
88.209.232.0/22
88.209.255.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ab:22:42:2c:fb:ff:26:15:16:d0:22:9b:86:be:78:bf:2d:
6c:f8:dd:c6:d6:71:8b:6c:23:0b:4e:a3:c0:17:ab:90:40:18:
14:28:fc:8e:58:2c:32:f2:cb:0f:44:e6:11:06:32:4e:0d:e5:
6b:3f:93:58:40:f6:2b:92:d9:f1:df:b1:3f:35:0d:96:68:2a:
95:ba:c5:18:39:34:42:d8:0c:f2:59:e0:65:d1:f0:49:3d:97:
4c:cc:59:dd:13:75:bd:ff:12:77:4e:8e:49:ef:a1:45:9d:b6:
60:77:ea:68:bd:16:09:0d:cb:b9:c0:26:48:79:53:d4:f6:11:
15:f8:a9:c1:88:07:83:29:11:79:75:41:e3:4e:29:b4:b5:b2:
cf:69:5e:a7:e0:fa:5b:2a:8a:ab:f1:de:39:1a:aa:df:66:26:
f9:4b:65:d2:85:b8:36:9d:30:04:76:76:d3:8e:21:d6:b5:77:
84:69:8e:d3:57:dc:e7:fc:38:76:9d:67:b8:23:35:5e:50:67:
40:6c:88:e4:cf:6d:64:e4:ac:87:85:c3:c7:a5:af:aa:0b:91:
48:a5:c7:d7:72:3f:ea:6f:ef:b3:30:76:43:24:0a:87:d7:9e:
b2:8f:f9:e4:86:8d:de:7f:6e:5e:9c:88:79:73:b7:d6:4f:80:
1b:30:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 14:09:09 2024 by rpki-client on console-fra.rpki-client.org