Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/OzRJyOJ3PCZCIoib4jwBxHgfZlM.roa
File: OzRJyOJ3PCZCIoib4jwBxHgfZlM.roa (raw, json)
Hash identifier: T3Mwe/eZpPhWDUfyI8z/o3f494BpcFPzrWJe2MKZemk=
Subject key identifier: 3B:34:49:C8:E2:77:3C:26:42:22:88:9B:E2:3C:01:C4:78:1F:66:53
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018FB9FEEBDD56A06C40E3A35A1AECDB2CF1
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/OzRJyOJ3PCZCIoib4jwBxHgfZlM.roa
Signing time: Mon 27 May 2024 12:20:42 +0000
ROA not before: Mon 27 May 2024 12:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
31.130.144.0/21 maxlen: 21
31.130.152.0/22 maxlen: 22
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 17
77.233.192.0/19 maxlen: 19
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 24
91.204.128.0/22 maxlen: 22
94.141.160.0/19 maxlen: 19
94.141.162.0/23 maxlen: 23
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/22 maxlen: 22
185.185.140.0/23 maxlen: 23
2a00:e78::/33 maxlen: 33
2a00:e78::/34 maxlen: 34
2a00:e78:6000::/36 maxlen: 36
2a00:e79::/32 maxlen: 32
2a00:e79::/36 maxlen: 36
2a00:e7a::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 11 Sep 2024 14:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:fe:eb:dd:56:a0:6c:40:e3:a3:5a:1a:ec:db:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: May 27 12:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b3449c8e2773c264222889be23c01c4781f6653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:42:c6:f9:bd:7e:a4:34:f1:c9:7d:ee:ce:
43:3f:bd:d2:f3:da:f8:6e:0b:94:27:07:4c:40:56:
96:8b:e7:7e:90:ce:54:a8:4f:25:d9:58:b5:58:eb:
80:fc:01:0e:d7:e5:ee:2f:62:a1:ac:01:09:68:5e:
f7:98:99:6c:0b:67:ea:8a:e7:c2:1a:46:bc:62:2c:
23:d9:8b:dd:3e:83:8c:99:04:65:37:d5:22:f6:cd:
7d:14:f7:f2:e3:3d:6c:21:11:79:dd:7b:9b:d5:be:
63:21:10:9a:54:4b:9d:cf:4c:9e:2a:a0:34:0a:1e:
32:02:f1:f6:fc:bb:07:22:80:f9:74:cf:09:b4:3b:
b1:09:fe:49:97:86:c6:d6:2a:4d:a5:df:eb:6f:a1:
24:21:a5:d0:7b:a9:3c:2c:b1:42:7e:f3:31:4b:07:
a2:94:73:b4:10:e0:e7:87:6f:e1:67:42:46:71:78:
23:2b:c0:0a:9d:aa:f3:53:16:1d:35:b9:20:b7:cb:
4f:f3:32:dd:de:6f:fd:b1:31:c4:39:1f:e0:7e:89:
c0:76:39:ba:a6:b8:03:12:69:cf:b5:8d:be:9c:2e:
ba:61:1f:c4:d5:4b:34:e4:bb:04:6f:aa:be:90:43:
39:89:f0:d7:fc:23:98:dd:03:a8:01:6f:69:29:3e:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:49:C8:E2:77:3C:26:42:22:88:9B:E2:3C:01:C4:78:1F:66:53
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/OzRJyOJ3PCZCIoib4jwBxHgfZlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
31.130.144.0-31.130.155.255
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/22
IPv6:
2a00:e78::/33
2a00:e79::-2a00:e7b:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:04:dd:7b:7c:c8:9c:cb:ec:6a:80:75:fe:96:e6:a7:08:96:
52:a3:d4:d7:bf:a2:7a:8f:30:f1:b0:3e:95:92:99:f5:e5:4d:
fb:c7:c3:b1:72:30:80:02:14:47:67:c4:7c:f3:1a:41:14:f4:
4b:d6:67:e0:b9:31:d4:df:58:68:64:1e:71:ea:cc:40:39:db:
c5:6a:e0:ba:13:08:3b:11:99:3c:19:79:a8:c8:22:4b:da:71:
d2:12:d4:97:eb:52:bf:0f:bb:3d:7b:a2:cf:83:a1:7e:91:1c:
24:8a:19:76:04:03:c0:2b:67:0f:bc:0e:75:56:b7:2b:7d:b9:
69:f0:62:1d:db:34:09:f7:ab:ab:c5:77:ba:70:8d:de:d5:11:
5e:a2:f7:5f:57:88:91:37:35:a2:49:bc:03:36:90:61:53:b9:
fd:74:3e:70:09:5d:d0:58:86:9e:82:be:78:26:bd:3a:54:ba:
2c:f0:33:88:a4:91:b4:0d:c2:a0:20:e8:43:85:5a:0b:08:0b:
00:30:58:2e:93:2c:76:58:f5:92:30:a3:cb:ad:9b:fd:ca:f2:
52:7b:e0:01:60:27:24:c1:78:b5:0f:f5:c9:2e:e9:0e:1b:e0:
b6:18:15:80:01:31:d0:ec:0d:a5:15:2e:c3:d2:92:22:37:de:
01:91:42:54
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAY+5/uvdVqBsQOOjWhrs2yzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjQwNTI3MTIyMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjM0NDljOGUyNzczYzI2NDIyMjg4OWJlMjNjMDFjNDc4MWY2NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JRCxvm9fqQ08cl97s5DP73S89r4
bguUJwdMQFaWi+d+kM5UqE8l2Vi1WOuA/AEO1+XuL2KhrAEJaF73mJlsC2fqiufC
Gka8Yiwj2YvdPoOMmQRlN9Ui9s19FPfy4z1sIRF53Xub1b5jIRCaVEudz0yeKqA0
Ch4yAvH2/LsHIoD5dM8JtDuxCf5Jl4bG1ipNpd/rb6EkIaXQe6k8LLFCfvMxSwei
lHO0EODnh2/hZ0JGcXgjK8AKnarzUxYdNbkgt8tP8zLd3m/9sTHEOR/gfonAdjm6
prgDEmnPtY2+nC66YR/E1Us05LsEb6q+kEM5ifDX/COY3QOoAW9pKT4jJwIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFDs0ScjidzwmQiKIm+I8AcR4H2ZTMB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvT3pSSnlPSjNQQ1pDSW9pYjRqd0J4SGdmWmxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBDBAIAATA9AwQDH4KAMAwD
BAQfgpADBAIfgpgDAwBNMgMEBU3pwAMEBE3zYAMEBFERkAMEAlvMgAMEBV6NoAME
Arm5jDAeBAIAAjAYAwYHKgAOeAAwDgMFACoADnkDBQIqAA54MA0GCSqGSIb3DQEB
CwUAA4IBAQAFBN17fMicy+xqgHX+luanCJZSo9TXv6J6jzDxsD6Vkpn15U37x8Ox
cjCAAhRHZ8R88xpBFPRL1mfguTHU31hoZB5x6sxAOdvFauC6Ewg7EZk8GXmoyCJL
2nHSEtSX61K/D7s9e6LPg6F+kRwkihl2BAPAK2cPvA51Vrcrfblp8GId2zQJ96ur
xXe6cI3e1RFeovdfV4iRNzWiSbwDNpBhU7n9dD5wCV3QWIaegr54Jr06VLos8DOI
pJG0DcKgIOhDhVoLCAsAMFgukyx2WPWSMKPLrZv9yvJSe+ABYCckwXi1D/XJLukO
G+C2GBWAATHQ7A2lFS7D0pIiN94BkUJU
-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:56 2024 by rpki-client on console-ams.rpki-client.org