Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/oC5R_onx8KW_ogBDjlNqY59XLIo.roa
File: oC5R_onx8KW_ogBDjlNqY59XLIo.roa (raw, json)
Hash identifier: b5dk3CZY6OfONI3oErZANhye/qkbqmtcfgoim3cOmew=
Subject key identifier: A0:2E:51:FE:89:F1:F0:A5:BF:A2:00:43:8E:53:6A:63:9F:57:2C:8A
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 0188E7DFFE58AC8162BCB845D438DA81421F
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/oC5R_onx8KW_ogBDjlNqY59XLIo.roa
Signing time: Fri 23 Jun 2023 10:49:56 +0000
ROA not before: Fri 23 Jun 2023 10:49:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42632
IP address blocks: 176.58.36.0/23 maxlen: 23
176.58.32.0/22 maxlen: 23
176.58.40.0/24 maxlen: 24
176.58.62.0/23 maxlen: 23
146.255.201.0/24 maxlen: 24
146.255.200.0/24 maxlen: 24
146.255.200.0/23 maxlen: 23
146.255.192.0/22 maxlen: 23
146.255.198.0/23 maxlen: 24
146.255.197.0/24 maxlen: 24
146.255.196.0/24 maxlen: 24
77.220.160.0/23 maxlen: 23
77.220.164.0/22 maxlen: 23
77.220.168.0/22 maxlen: 23
77.220.172.0/23 maxlen: 23
83.222.96.0/22 maxlen: 22
77.220.174.0/23 maxlen: 23
77.220.176.0/21 maxlen: 24
77.220.180.0/24 maxlen: 24
77.220.184.0/21 maxlen: 21
83.222.100.0/22 maxlen: 22
83.222.104.0/22 maxlen: 22
83.222.112.0/22 maxlen: 22
83.222.108.0/22 maxlen: 22
83.222.116.0/22 maxlen: 22
212.76.128.0/21 maxlen: 23
212.76.136.0/21 maxlen: 23
212.76.144.0/22 maxlen: 22
212.76.152.0/22 maxlen: 24
212.76.156.0/22 maxlen: 22
2a02:878:a::/48 maxlen: 48
2a02:878:a801::/48 maxlen: 48
2a02:878:1::/48 maxlen: 48
2a02:878:10::/48 maxlen: 48
2a02:878:a80e::/48 maxlen: 48
2a02:878:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:df:fe:58:ac:81:62:bc:b8:45:d4:38:da:81:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jun 23 10:49:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a02e51fe89f1f0a5bfa200438e536a639f572c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:3b:ee:00:98:c5:44:54:7c:47:e4:af:a0:
4a:8f:e5:49:27:09:53:29:88:32:17:88:e0:9a:32:
1b:e3:7b:e3:97:d6:a0:76:31:8b:7e:20:30:a4:82:
b4:6c:15:f8:5a:aa:3f:9e:b9:43:97:77:e1:57:46:
a8:0b:90:d2:6d:36:30:4a:ec:cf:c6:72:a8:1f:27:
e9:19:57:6f:9d:d9:a0:a1:59:b2:18:31:b8:86:9c:
45:a0:26:04:f2:33:93:c3:2a:bf:1f:c0:4d:81:6b:
42:af:8e:2e:f0:b2:75:10:b1:73:44:43:98:0d:8f:
e9:7c:4c:8b:43:a5:5b:f6:fb:5c:ff:90:d0:89:15:
14:65:15:21:85:0a:cb:33:55:4d:42:16:c9:34:01:
21:65:bb:f5:55:06:f9:56:5a:5c:5a:30:40:fb:6e:
d1:80:e5:c6:4f:ff:8f:88:10:69:4e:ed:70:79:de:
5d:95:19:37:b9:36:af:5a:cb:db:8f:0e:ff:4a:a8:
c3:78:fc:9b:10:3d:9c:43:63:6b:73:1f:1f:2e:eb:
f4:41:78:19:0c:e5:2d:fa:7e:b8:54:66:10:40:ca:
15:ae:3e:6e:f2:8c:f8:98:c6:e3:ae:7e:a2:01:17:
88:8b:d0:17:b5:0a:63:0c:41:47:91:cd:b0:d5:26:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:51:FE:89:F1:F0:A5:BF:A2:00:43:8E:53:6A:63:9F:57:2C:8A
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/oC5R_onx8KW_ogBDjlNqY59XLIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.160.0/23
77.220.164.0-77.220.191.255
83.222.96.0-83.222.119.255
146.255.192.0-146.255.201.255
176.58.32.0-176.58.37.255
176.58.40.0/24
176.58.62.0/23
212.76.128.0-212.76.147.255
212.76.152.0/21
IPv6:
2a02:878:1::-2a02:878:2:ffff:ffff:ffff:ffff:ffff
2a02:878:a::/48
2a02:878:10::/48
2a02:878:a801::/48
2a02:878:a80e::/48
Signature Algorithm: sha256WithRSAEncryption
5e:45:01:60:42:4c:b5:98:20:86:96:88:24:4c:72:07:c8:08:
5b:1f:f8:db:db:2e:1c:30:a0:dd:63:c9:c6:55:08:10:1b:36:
8f:a0:73:a9:bc:93:c3:97:47:91:fb:8a:ec:e0:a1:a7:6b:b9:
8a:9e:09:7c:21:6e:71:5c:9c:57:a8:d9:dc:3a:da:c6:22:a0:
e6:63:52:cb:e6:d2:9e:61:75:ba:d8:a3:dc:e4:6b:f9:c7:4c:
fc:a6:9f:c6:6c:08:5b:16:dd:85:74:e3:d4:01:80:96:8b:c2:
eb:49:a0:4c:a2:11:2e:ab:10:ee:70:fe:20:52:4d:5a:6e:a0:
03:08:a4:25:0e:b5:d9:ee:5e:6c:f3:fa:5e:d6:dd:54:8f:84:
15:f5:b2:7e:57:be:e9:35:86:24:cf:0d:fb:4d:c2:8f:fa:70:
2a:02:f9:4f:85:09:21:22:13:90:75:69:61:32:48:f0:18:8b:
5c:38:07:2d:63:42:08:b3:99:09:65:9c:d9:56:39:c6:9a:0a:
0d:75:c9:a0:c9:b9:9f:49:8e:2f:4e:64:7b:b2:38:47:b1:99:
1b:ed:54:15:1b:5a:bf:8c:f1:9c:69:33:6d:de:38:27:d6:74:
f0:0a:19:10:f5:1d:88:a0:8e:d3:62:ac:da:73:86:1d:b7:6a:
f3:0a:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org