Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/OKu0RQbklXjPV1m8DVQThctDhRE.roa
File: OKu0RQbklXjPV1m8DVQThctDhRE.roa (raw, json)
Hash identifier: Q3TYZ5lY8KtmVhc6afFkTaYeiUUflZ+VI+QZfnP7OnQ=
Subject key identifier: 38:AB:B4:45:06:E4:95:78:CF:57:59:BC:0D:54:13:85:CB:43:85:11
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 0191B171FAAA1502A177A4537C224AE5D519
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/OKu0RQbklXjPV1m8DVQThctDhRE.roa
Signing time: Mon 02 Sep 2024 06:35:22 +0000
ROA not before: Mon 02 Sep 2024 06:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48940
IP address blocks: 46.148.96.0/20 maxlen: 20
46.148.96.0/21 maxlen: 21
46.148.104.0/21 maxlen: 21
62.122.96.0/21 maxlen: 21
62.122.96.0/22 maxlen: 22
62.122.100.0/22 maxlen: 22
94.231.160.0/20 maxlen: 20
94.231.160.0/21 maxlen: 21
94.231.168.0/21 maxlen: 21
176.115.32.0/19 maxlen: 24
176.115.32.0/20 maxlen: 20
176.115.32.0/21 maxlen: 21
176.115.32.0/22 maxlen: 22
176.115.36.0/22 maxlen: 22
176.115.40.0/21 maxlen: 21
176.115.40.0/22 maxlen: 22
176.115.44.0/22 maxlen: 22
176.115.48.0/20 maxlen: 20
176.115.48.0/21 maxlen: 21
176.115.48.0/22 maxlen: 22
176.115.52.0/22 maxlen: 22
176.115.56.0/21 maxlen: 21
176.115.56.0/22 maxlen: 22
176.115.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 03 Sep 2024 09:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:71:fa:aa:15:02:a1:77:a4:53:7c:22:4a:e5:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Sep 2 06:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38abb44506e49578cf5759bc0d541385cb438511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:e4:20:9e:6d:ca:a9:e0:f3:89:f1:bb:e4:
f1:84:f6:ed:fb:3c:86:2a:d8:73:bc:21:7a:d1:f7:
bd:7a:ae:dc:a5:b9:f6:ea:a1:53:a2:84:35:16:78:
13:7b:b7:f7:b5:4c:d9:0b:8d:f4:9c:70:2c:13:41:
8f:d1:2b:02:56:c5:24:d3:07:d3:4c:a0:8c:2d:ac:
b1:0c:65:5c:b5:60:40:e4:6f:b9:56:38:6f:e1:db:
58:49:03:d4:48:12:83:cf:0e:86:54:7a:cd:9a:38:
5b:30:c9:6d:ce:60:0d:60:7f:61:53:d8:25:d3:f9:
23:15:21:06:e1:cf:f6:cf:f8:d9:2f:81:c3:f3:ad:
f3:3d:72:f2:33:e5:1c:3f:fa:d7:e0:be:db:b2:43:
4e:af:4e:e8:c9:0a:da:1d:2a:6d:02:e8:3f:71:a5:
f5:4b:68:96:53:90:18:b3:ca:35:29:19:4d:8c:8f:
8b:03:4f:a4:b0:fe:32:d6:b3:27:ab:26:f6:ca:61:
a6:09:6d:e3:31:61:67:88:3e:49:57:ad:e5:a5:b6:
ff:54:05:5c:11:ce:42:73:ff:ff:77:9a:58:6c:7d:
4b:c1:2d:8f:b0:7d:02:38:39:c6:36:3b:40:17:b3:
f5:65:48:72:50:c1:c6:d2:9c:b9:00:87:c8:c7:d6:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:B4:45:06:E4:95:78:CF:57:59:BC:0D:54:13:85:CB:43:85:11
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/OKu0RQbklXjPV1m8DVQThctDhRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.96.0/20
62.122.96.0/21
94.231.160.0/20
176.115.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:e5:f7:5b:70:19:e8:d7:2a:48:99:bf:6a:7e:a5:1e:70:59:
0d:13:73:f7:75:41:c3:e6:a4:c0:4c:56:f7:e6:6a:90:e6:96:
dc:75:56:d0:c6:a3:7f:da:04:8c:ad:18:f8:d3:9e:d0:d3:d2:
08:3f:13:55:b1:ad:e6:70:c7:16:0a:56:88:81:36:81:7c:db:
52:e5:75:8c:d6:bb:94:cd:ab:d5:f9:9f:1e:2e:b1:10:e5:df:
08:5d:19:90:f6:23:0d:20:5a:96:f8:e3:4e:40:d1:3f:8d:1d:
df:d8:51:98:54:8e:6d:9b:4f:df:8a:6c:b4:40:f2:75:4c:47:
70:76:90:58:fb:ff:9d:f1:46:bf:dc:39:d2:b7:02:1b:45:ad:
61:3f:a2:75:a2:14:34:fa:73:77:45:d0:91:89:cf:52:a4:23:
70:6e:a7:ba:ef:da:60:ef:f0:51:2d:85:88:c5:da:91:7f:d0:
00:05:e1:29:ec:71:10:fc:b5:38:0d:d4:17:72:7b:a1:f2:51:
4f:a8:7b:60:2f:73:f2:43:bd:3a:9c:d3:e9:86:26:f9:37:f5:
8c:a8:95:7b:ec:93:92:26:88:a5:c0:40:ef:a6:22:18:18:2b:
85:76:fd:d4:92:5a:a2:aa:3d:19:12:f0:54:23:3c:0d:73:15:
d0:df:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 11:37:23 2024 by rpki-client on console-fra.rpki-client.org