Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/ocAE4rlXYIbnl2hTD6kmL1WVskg.roa
File: ocAE4rlXYIbnl2hTD6kmL1WVskg.roa (raw, json)
Hash identifier: 2APhUtzmMQVs4UxtWzaXZrj6NkIYq659Os+GVtGrNvY=
Subject key identifier: A1:C0:04:E2:B9:57:60:86:E7:97:68:53:0F:A9:26:2F:55:95:B2:48
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018D414DC39D8B10B200F5401145150F1E0A
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/ocAE4rlXYIbnl2hTD6kmL1WVskg.roa
Signing time: Thu 25 Jan 2024 15:47:11 +0000
ROA not before: Thu 25 Jan 2024 15:47:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 217.76.70.0/24 maxlen: 24
2a03:32c0::/48 maxlen: 48
2a03:32c0:1::/48 maxlen: 48
2a03:32c0:2::/48 maxlen: 48
2a03:32c0:3::/48 maxlen: 48
2a03:32c0:4::/48 maxlen: 48
2a03:32c0:5::/48 maxlen: 48
2a03:32c0:6::/48 maxlen: 48
2a03:32c0:7::/48 maxlen: 48
2a03:32c0:1000::/48 maxlen: 48
2a03:32c0:1001::/48 maxlen: 48
2a03:32c0:1002::/48 maxlen: 48
2a03:32c0:1003::/48 maxlen: 48
2a03:32c0:1004::/48 maxlen: 48
2a03:32c0:1005::/48 maxlen: 48
2a03:32c0:1006::/48 maxlen: 48
2a03:32c0:1007::/48 maxlen: 48
2a03:32c0:1008::/48 maxlen: 48
2a03:32c0:1009::/48 maxlen: 48
2a03:32c0:2000::/48 maxlen: 48
2a03:32c0:2001::/48 maxlen: 48
2a03:32c0:2002::/48 maxlen: 48
2a03:32c0:2003::/48 maxlen: 48
2a03:32c0:2004::/48 maxlen: 48
2a03:32c0:2005::/48 maxlen: 48
2a03:32c0:2006::/48 maxlen: 48
2a03:32c0:2007::/48 maxlen: 48
2a03:32c0:2008::/48 maxlen: 48
2a03:32c0:2009::/48 maxlen: 48
2a03:32c0:3000::/48 maxlen: 48
2a03:32c0:3001::/48 maxlen: 48
2a03:32c0:3002::/48 maxlen: 48
2a03:32c0:3003::/48 maxlen: 48
2a03:32c0:3004::/48 maxlen: 48
2a03:32c0:3005::/48 maxlen: 48
2a03:32c0:3006::/48 maxlen: 48
2a03:32c0:3007::/48 maxlen: 48
2a03:32c0:3008::/48 maxlen: 48
2a03:32c0:3009::/48 maxlen: 48
2a03:32c0:4000::/48 maxlen: 48
2a03:32c0:4001::/48 maxlen: 48
2a03:32c0:4002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:6000::/48 maxlen: 48
2a03:32c0:6001::/48 maxlen: 48
2a03:32c0:7000::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:8000::/48 maxlen: 48
2a03:32c0:8001::/48 maxlen: 48
2a03:32c0:8002::/48 maxlen: 48
2a03:32c0:8003::/48 maxlen: 48
2a03:32c0:8004::/48 maxlen: 48
2a03:32c0:8005::/48 maxlen: 48
2a03:32c0:8006::/48 maxlen: 48
2a03:32c0:8007::/48 maxlen: 48
2a03:32c0:9000::/48 maxlen: 48
2a03:32c0:9001::/48 maxlen: 48
2a03:32c0:9002::/48 maxlen: 48
2a03:32c0:9003::/48 maxlen: 48
2a03:32c0:9004::/48 maxlen: 48
2a03:32c0:9005::/48 maxlen: 48
2a03:32c0:9006::/48 maxlen: 48
2a03:32c0:9007::/48 maxlen: 48
2a03:32c0:a000::/48 maxlen: 48
2a03:32c0:a001::/48 maxlen: 48
2a03:32c0:a002::/48 maxlen: 48
2a03:32c0:a003::/48 maxlen: 48
2a03:32c0:a004::/48 maxlen: 48
2a03:32c0:a005::/48 maxlen: 48
2a03:32c0:a006::/48 maxlen: 48
2a03:32c0:a007::/48 maxlen: 48
2a03:32c0:a008::/48 maxlen: 48
2a03:32c0:a009::/48 maxlen: 48
2a03:32c0:b000::/48 maxlen: 48
2a03:32c0:b001::/48 maxlen: 48
2a03:32c0:b002::/48 maxlen: 48
2a03:32c0:b003::/48 maxlen: 48
2a03:32c0:b004::/48 maxlen: 48
2a03:32c0:b005::/48 maxlen: 48
2a03:32c0:b006::/48 maxlen: 48
2a03:32c0:b007::/48 maxlen: 48
2a03:32c0:b008::/48 maxlen: 48
2a03:32c0:b009::/48 maxlen: 48
2a03:32c0:c008::/48 maxlen: 48
2a03:32c0:d008::/48 maxlen: 48
2a03:32c0:e000::/48 maxlen: 48
2a03:32c0:e001::/48 maxlen: 48
2a03:32c0:e002::/48 maxlen: 48
2a03:32c0:e003::/48 maxlen: 48
2a03:32c0:e004::/48 maxlen: 48
2a03:32c0:e005::/48 maxlen: 48
2a03:32c0:e006::/48 maxlen: 48
2a03:32c0:e007::/48 maxlen: 48
2a03:32c0:e008::/48 maxlen: 48
2a03:32c0:e009::/48 maxlen: 48
2a03:32c0:f008::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 26 Jan 2024 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:4d:c3:9d:8b:10:b2:00:f5:40:11:45:15:0f:1e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 25 15:47:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1c004e2b9576086e79768530fa9262f5595b248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:df:db:7a:ba:dc:49:6d:d8:bb:50:cf:c8:
e1:da:43:1a:03:5f:df:22:12:3a:f4:e5:ea:73:66:
9b:41:60:14:60:31:78:de:86:e6:71:0f:bb:67:dd:
06:c4:15:59:4f:25:8d:f8:98:c9:2f:6a:10:49:85:
41:c4:a1:02:d3:a6:55:02:41:0a:cd:c5:71:bd:9c:
d3:03:9f:79:78:9d:33:45:b0:40:07:ce:bb:ea:82:
fe:99:a3:0b:43:1f:e5:3b:71:ce:0f:f8:4e:66:14:
dc:49:c3:33:ad:c3:ce:21:24:fd:61:2f:b8:be:fb:
7d:ac:6b:fc:1f:8c:55:43:98:01:67:af:82:f3:1a:
eb:12:08:eb:37:7b:0e:5e:4b:37:d8:29:dc:f1:c2:
2d:a4:87:3b:97:77:9f:11:be:78:25:05:ab:89:ea:
a3:33:7c:5c:2e:3b:1f:86:29:8c:ca:af:aa:0a:ca:
c1:78:96:ef:d8:86:c9:4b:21:ff:a3:81:ee:39:29:
3e:ed:c8:99:63:71:d5:a5:17:77:99:13:53:5c:ec:
9b:4b:b1:ad:dc:33:30:b4:18:d9:5b:da:86:89:8d:
4e:b1:3e:29:25:f5:40:87:b1:d1:fa:11:29:9e:c5:
b8:0d:e5:3c:69:51:5d:80:59:7a:ad:d0:f1:0b:19:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:04:E2:B9:57:60:86:E7:97:68:53:0F:A9:26:2F:55:95:B2:48
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/ocAE4rlXYIbnl2hTD6kmL1WVskg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.70.0/24
IPv6:
2a03:32c0::/45
2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:4000::-2a03:32c0:4002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:6000::/47
2a03:32c0:7000::/47
2a03:32c0:8000::/45
2a03:32c0:9000::/45
2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:c008::/48
2a03:32c0:d008::/48
2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
2a03:32c0:f008::/48
Signature Algorithm: sha256WithRSAEncryption
5b:61:c1:4d:14:29:37:ae:d3:31:dd:db:ea:6e:95:0f:d7:80:
cc:5b:90:03:60:ff:8e:b8:64:8e:88:3f:fc:b8:62:ab:3d:26:
47:31:8b:5a:90:6e:3f:05:dc:69:b1:a6:af:a5:d4:bd:b4:25:
d9:b7:3a:ee:3f:2d:8e:42:82:89:88:87:ce:32:92:4f:d0:58:
69:88:19:72:84:8f:97:f2:30:4c:1a:4e:4e:8b:33:a4:90:24:
65:c6:92:0d:b9:9f:10:29:c7:98:88:23:33:86:05:52:07:55:
80:3c:52:62:70:84:03:c5:90:57:a1:bc:2c:d2:f2:76:d4:a4:
b3:2b:40:ab:cf:96:dc:1c:f8:23:35:e6:a9:26:8a:fc:35:18:
e1:d7:21:4c:b0:5d:87:51:d0:8e:b1:4c:f6:60:05:1a:e5:31:
25:2a:73:28:17:c8:fa:26:6c:b6:fe:6a:5c:10:3c:38:9d:e4:
99:29:65:42:2f:88:ec:af:fe:f8:24:df:5d:f2:61:e7:34:9b:
cf:8c:48:72:0a:2b:83:58:d0:f5:4a:19:b5:8e:ef:73:41:c2:
36:16:d8:62:5f:98:49:ae:6c:2c:6f:84:53:66:12:88:0e:39:
9b:47:81:27:db:c3:b2:e3:99:5b:11:a0:26:79:c0:f9:c7:75:
11:d1:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org