Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/oNnorKzMgj1zvaj-4J4AOrXkTjk.roa
File: oNnorKzMgj1zvaj-4J4AOrXkTjk.roa (raw, json)
Hash identifier: ll+5DxHtH5gI+a83+qvHV+kswi5uZ2g+XBeUgbmJB48=
Subject key identifier: A0:D9:E8:AC:AC:CC:82:3D:73:BD:A8:FE:E0:9E:00:3A:B5:E4:4E:39
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D217FF970DCF5FA3B3321CE0AC87FA09C
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/oNnorKzMgj1zvaj-4J4AOrXkTjk.roa
Signing time: Fri 19 Jan 2024 11:34:11 +0000
ROA not before: Fri 19 Jan 2024 11:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Jan 2024 06:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:7f:f9:70:dc:f5:fa:3b:33:21:ce:0a:c8:7f:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 19 11:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0d9e8acaccc823d73bda8fee09e003ab5e44e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:73:4f:2d:4f:82:e9:41:d1:38:a9:30:6b:
d5:5b:48:89:5c:9c:6f:1d:b0:b0:ed:16:6c:55:26:
59:96:d8:17:45:1e:cf:4d:5b:12:32:6f:b7:1a:56:
01:d4:60:b6:87:c4:6f:01:39:0b:32:62:55:4f:f4:
19:1f:22:d2:f1:63:e8:70:00:b4:98:3f:02:fd:f7:
54:30:07:a6:8b:73:07:51:2b:be:ac:11:5c:ad:89:
58:9d:4c:ec:eb:6b:af:4e:d5:b5:20:dc:5c:e0:b6:
14:39:ac:30:4f:bd:48:98:c0:6f:41:7f:8c:3e:78:
48:aa:2d:f6:1e:af:af:b5:17:85:e2:e9:88:e7:eb:
88:57:1f:a2:6c:dc:c4:21:dc:02:62:cc:5f:7d:c2:
f5:ce:7e:7f:a4:8e:db:20:99:65:2d:ca:59:e9:37:
5e:5c:36:9c:75:16:11:a1:e8:03:d7:cd:de:e4:db:
f5:66:23:4f:d4:42:49:81:f5:90:63:ae:b0:7f:35:
82:11:09:89:aa:5a:d7:36:e2:8e:2d:48:1a:83:b9:
d5:53:21:e3:2f:78:7b:41:bf:49:15:a7:11:cb:90:
19:7d:b2:c3:49:32:52:30:9f:23:f2:d0:09:f8:f7:
37:3a:85:3f:d8:c6:ae:bc:82:14:95:1a:f0:0f:78:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D9:E8:AC:AC:CC:82:3D:73:BD:A8:FE:E0:9E:00:3A:B5:E4:4E:39
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/oNnorKzMgj1zvaj-4J4AOrXkTjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:3000::-2a03:32c0:3005:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7000::/47
2a03:32c0:8000::/45
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:bb:79:11:9e:54:44:85:55:d1:80:dc:f3:c4:b8:e7:18:5e:
68:ed:e1:c4:a9:e5:2a:15:48:27:ce:9a:de:e0:da:a9:fb:d1:
89:b8:ff:36:80:47:58:92:e1:96:d0:7b:b9:c9:2f:0e:6d:9b:
64:8e:30:de:6b:ef:95:8e:e6:2e:77:4e:2d:9d:65:e6:b4:f1:
b3:c9:82:58:b9:6e:6b:1d:56:8b:2a:c7:4a:37:4a:30:6a:e1:
c0:b5:61:74:86:83:a4:3e:55:fb:7d:cf:3e:c9:d7:b0:ff:c7:
8a:e8:be:d4:0c:95:e2:da:dc:f5:80:05:86:e3:59:cf:6d:94:
32:6d:2f:5f:78:0d:0c:13:6d:f5:95:e2:60:3b:56:b1:ce:e0:
d9:5e:c6:85:27:70:70:27:94:d0:7a:25:71:b3:d2:e9:c7:7a:
9f:36:93:15:b6:04:af:85:96:e7:25:5e:75:49:d0:f0:b6:a3:
6d:a6:89:3e:bf:aa:a5:5f:3a:06:e8:0f:44:63:e9:6f:56:a4:
0d:16:6a:2e:c6:a4:ef:76:05:74:a0:e9:ae:b0:e6:0e:e8:a5:
7d:91:0d:b4:41:e5:b1:00:80:2c:69:be:ee:4d:4b:25:93:3e:
ab:10:d7:96:1c:03:06:74:96:34:b7:6a:36:c9:56:a9:1a:2c:
ba:e6:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:33:59 2025 by rpki-client