Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/O0gUa9wnGYknU3xRAzMGxF8dtz8.roa
File: O0gUa9wnGYknU3xRAzMGxF8dtz8.roa (raw, json)
Hash identifier: 4wfNMho5O4TFl6jxh0iAmC9+tuaTi6tIf/QJJ51w0E8=
Subject key identifier: 3B:48:14:6B:DC:27:19:89:27:53:7C:51:03:33:06:C4:5F:1D:B7:3F
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 0189C526708C6F94D32B05C434174C0742FB
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/O0gUa9wnGYknU3xRAzMGxF8dtz8.roa
Signing time: Sat 05 Aug 2023 10:02:57 +0000
ROA not before: Sat 05 Aug 2023 10:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56484
IP address blocks: 93.187.39.0/24 maxlen: 24
185.52.116.0/22 maxlen: 22
185.52.118.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
93.187.37.0/24 maxlen: 24
93.187.38.0/24 maxlen: 24
93.187.32.0/21 maxlen: 21
93.187.32.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
93.187.34.0/24 maxlen: 24
93.187.35.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
2a00:dd00:6::/48 maxlen: 48
2a00:dd00::/32 maxlen: 32
2a00:dd00:4::/48 maxlen: 48
2a00:dd00:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:26:70:8c:6f:94:d3:2b:05:c4:34:17:4c:07:42:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Aug 5 10:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b48146bdc27198927537c51033306c45f1db73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:52:c1:c2:a7:56:f6:c1:34:88:ec:b3:9b:
4b:a3:63:04:3b:54:61:47:82:38:f7:72:4a:04:0c:
90:9c:e3:e5:65:5c:29:55:7c:13:ef:e6:44:60:fd:
fc:47:f7:13:f6:3b:15:9c:cc:ce:cd:9c:9d:4b:98:
23:f2:0f:ff:05:b8:b9:76:da:06:70:d4:fa:1f:98:
0f:68:2f:58:7e:30:72:f4:e6:79:f6:9e:5c:04:6d:
bb:22:64:e2:b6:33:83:0b:1f:0e:25:2c:2f:7b:b7:
e3:c2:5e:d7:1f:eb:09:f9:54:07:f7:66:c2:34:d4:
38:86:fb:7a:10:ef:17:a3:86:5a:c4:cc:4b:4b:77:
9f:76:12:a8:28:16:d6:ff:0e:7c:53:32:0a:f7:b6:
51:58:98:fd:46:d6:26:d8:9b:4f:dc:85:bf:e5:bf:
cd:39:f0:62:be:55:77:9d:4a:2f:9a:bf:f7:26:3a:
53:1e:60:40:0e:ff:dd:a4:8e:d6:d2:4b:eb:f1:22:
b8:f2:ee:29:b8:fd:13:a2:84:71:9d:6c:66:fc:e7:
a2:b4:a7:73:c4:7a:ff:45:37:42:f0:06:75:c4:ad:
2f:f1:ba:2d:3c:f8:08:04:26:15:6c:ae:4f:0d:6a:
a8:b2:49:ea:31:07:65:7f:80:72:b9:d6:e8:73:8f:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:48:14:6B:DC:27:19:89:27:53:7C:51:03:33:06:C4:5F:1D:B7:3F
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/O0gUa9wnGYknU3xRAzMGxF8dtz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
64:8d:7c:88:02:de:0d:ff:85:84:fd:e8:bc:de:68:8e:3e:e1:
a0:8f:1f:dd:7b:b3:bf:44:53:fa:6b:c1:0a:3f:c6:13:50:96:
3a:a9:14:b4:d0:16:26:ad:8e:cf:40:a1:38:2c:99:14:2d:57:
42:ea:33:09:84:cc:8a:fa:75:d9:d3:48:c9:c2:e8:f2:d7:37:
44:8a:39:9c:47:71:63:a5:0d:51:bb:c8:df:36:d2:ab:a5:b9:
58:cc:01:2e:ee:10:1d:0c:fe:d0:29:11:a9:db:bc:ca:7e:31:
06:97:56:ff:56:3b:91:d3:f2:28:a5:3b:d9:7e:10:45:97:67:
4a:86:70:3c:3d:14:a3:c3:34:18:a7:53:29:c2:c7:dd:14:7d:
73:d0:bd:da:35:90:5c:18:b5:6c:66:11:8c:c7:60:dd:c7:26:
6e:99:8e:07:3f:84:5d:90:5b:38:ce:d1:0e:ab:04:24:dd:37:
f0:8d:2f:27:83:bb:70:46:d7:21:54:a6:06:c6:3f:c7:83:c6:
85:ca:0d:84:4c:49:2c:4b:7a:12:15:1f:db:37:13:06:86:6e:
7e:ac:59:de:28:23:1a:12:fb:6a:b9:00:1e:7a:9a:f8:d1:46:
9e:a1:ad:60:e7:68:7c:48:fb:91:c7:74:9d:bc:65:52:93:40:
68:f8:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:42 2024 by rpki-client on console-ams.rpki-client.org