Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/ofIzznMaIOm4y3EkNZIpnGmaxUY.roa
File: ofIzznMaIOm4y3EkNZIpnGmaxUY.roa (raw, json)
Hash identifier: a+wuLnwCvT0kRc27e+3HnE6su/nfH6DuvMKOHIS4/gY=
Subject key identifier: A1:F2:33:CE:73:1A:20:E9:B8:CB:71:24:35:92:29:9C:69:9A:C5:46
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 018C528471E262DC1A43B003A194A698C8D6
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/ofIzznMaIOm4y3EkNZIpnGmaxUY.roa
Signing time: Sun 10 Dec 2023 06:57:40 +0000
ROA not before: Sun 10 Dec 2023 06:57:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213176
IP address blocks: 212.59.64.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
209.35.224.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
209.35.227.0/24 maxlen: 24
209.35.229.0/24 maxlen: 24
209.35.228.0/24 maxlen: 24
209.35.231.0/24 maxlen: 24
209.35.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:52:84:71:e2:62:dc:1a:43:b0:03:a1:94:a6:98:c8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Dec 10 06:57:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1f233ce731a20e9b8cb71243592299c699ac546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:43:2f:eb:51:1d:1d:2a:91:db:94:07:17:
cb:46:1a:77:69:3d:44:2d:bf:0b:5c:73:cb:ed:96:
a9:65:12:05:80:b8:8f:06:ec:c3:72:8e:00:a7:80:
a3:8f:03:b8:89:14:56:0e:4a:6f:9c:b1:c7:79:b2:
02:9b:b4:6d:5c:72:55:cb:fd:91:b9:3c:0c:97:79:
c8:5a:68:99:f1:90:15:a6:10:5d:4f:f0:30:38:75:
a9:1f:0a:92:d6:0d:14:59:69:de:73:a2:a9:72:f9:
23:bf:c5:5d:c2:0a:f8:35:25:27:4d:49:fd:e9:78:
56:ce:14:c2:cf:d2:1f:b3:66:2e:c4:bf:fa:27:37:
27:98:a5:d5:e7:1a:25:00:62:e2:df:a8:d6:14:cf:
a1:ca:4c:60:ea:b5:7f:61:eb:be:09:50:ae:bf:af:
1f:ae:2a:f9:a5:d0:e4:9f:10:ad:9c:87:9b:52:c7:
69:7c:fe:30:84:0e:ab:dd:cd:83:1a:83:1d:93:7b:
d8:f8:bc:cf:2f:f4:1d:74:eb:41:72:cf:94:ad:59:
d5:e2:8b:ab:20:f1:18:79:10:38:ad:d5:ad:0f:fd:
3a:0c:fa:64:4f:82:02:21:74:be:ed:2c:e1:c9:1b:
75:d6:cf:c9:9a:1f:79:5b:c7:8f:53:d6:f1:e3:3e:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:33:CE:73:1A:20:E9:B8:CB:71:24:35:92:29:9C:69:9A:C5:46
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/ofIzznMaIOm4y3EkNZIpnGmaxUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0/21
212.59.64.0-212.59.70.255
Signature Algorithm: sha256WithRSAEncryption
49:a6:2e:29:f9:0e:af:b7:59:0e:42:16:57:6f:e9:c5:89:cb:
56:6a:62:94:b6:4b:3d:5d:b8:c3:2b:45:38:2c:75:f7:75:eb:
c0:ca:9d:a9:8c:ac:79:33:52:8a:5f:58:83:9a:57:7d:6d:5c:
07:28:e4:78:17:c5:7f:49:51:30:da:41:ec:43:41:49:37:8e:
6b:c8:54:02:ac:97:68:e2:93:fa:c1:11:a1:18:ab:37:34:28:
3e:9c:29:64:e4:c7:8c:46:ec:a1:21:5e:49:f8:bb:4f:f3:82:
be:82:d1:31:78:4e:eb:69:05:12:2d:d1:39:14:e8:a6:66:d3:
47:5e:40:b5:7c:67:9d:52:88:37:ff:9d:fa:08:ae:6e:f1:dd:
3e:42:f8:e9:15:32:ce:ba:a5:96:89:4e:70:20:9c:8f:f8:97:
19:aa:6b:fd:af:47:0a:ad:1f:ed:50:6a:60:0e:0c:bc:96:e0:
30:5c:57:a6:c6:cb:90:bf:0f:11:33:2c:5c:15:58:99:45:c1:
42:87:64:f6:a5:21:a9:33:08:d3:63:8e:5b:b2:93:1f:54:05:
be:09:61:f6:3e:8b:13:9a:e5:42:eb:46:19:a5:16:52:cc:d0:
30:7b:6a:ec:70:10:b1:52:9c:20:85:dc:69:36:d6:23:2a:76:
5b:4a:10:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:13 2024 by rpki-client on console-fra.rpki-client.org