Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/OfQYw1Luy8yYd_ZVsPRs0AD6FNM.roa
File: OfQYw1Luy8yYd_ZVsPRs0AD6FNM.roa (raw, json)
Hash identifier: gAQD0c1CvVaBNVXNFyQio0sG2kRmyIsofCI4EGTr3sU=
Subject key identifier: 39:F4:18:C3:52:EE:CB:CC:98:77:F6:55:B0:F4:6C:D0:00:FA:14:D3
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019402017AA4E0D34E924A8B779AC10BF8AD
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/OfQYw1Luy8yYd_ZVsPRs0AD6FNM.roa
Signing time: Thu 26 Dec 2024 08:07:18 +0000
ROA not before: Thu 26 Dec 2024 08:07:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.10.0/24 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.14.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.22.0/24 maxlen: 24
140.150.23.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
140.150.34.0/24 maxlen: 24
140.150.35.0/24 maxlen: 24
140.150.36.0/24 maxlen: 24
140.150.37.0/24 maxlen: 24
140.150.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:01:7a:a4:e0:d3:4e:92:4a:8b:77:9a:c1:0b:f8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Dec 26 08:07:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39f418c352eecbcc9877f655b0f46cd000fa14d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:22:50:bb:2b:4a:ee:b8:37:52:9b:6a:ff:
5b:ec:01:9a:ee:db:8b:d2:f5:0f:de:59:6f:38:4d:
0d:a0:b1:11:df:eb:45:20:b5:fd:1e:b2:7e:7e:2f:
73:39:20:ed:99:85:d4:36:3d:b9:b4:c1:72:3e:09:
77:36:a8:c6:b5:fa:ec:8b:53:7c:35:87:c7:8d:2e:
c7:b8:68:f7:68:ef:51:d8:4a:56:12:37:f3:90:a1:
e2:97:d6:40:01:37:96:0c:b0:03:9e:0d:42:3c:04:
ff:c2:fb:a9:0b:b4:b0:42:7e:e7:3e:6b:da:f3:79:
4a:bb:a8:6f:26:c0:6f:c3:5e:bf:8f:64:f9:98:e4:
af:cf:99:c9:f5:6e:cb:99:1d:e8:dd:ed:4c:f8:43:
e5:35:1b:7a:9b:38:17:a3:f4:79:e0:20:4e:97:11:
b7:f0:c0:f0:e5:58:da:c6:b5:65:ac:2b:a7:94:7c:
91:6b:19:70:fc:73:48:1f:71:aa:58:43:10:90:47:
24:a5:3a:37:69:d9:58:a5:7e:52:be:d3:d6:84:5a:
e6:fe:fc:a2:d0:2b:ca:0b:36:a5:59:7e:46:2c:0e:
7c:10:c7:f9:b4:cd:d0:dc:7f:64:d9:c0:2a:d5:c4:
65:f2:74:60:fa:7b:29:56:bb:75:66:1f:dd:f2:6e:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:18:C3:52:EE:CB:CC:98:77:F6:55:B0:F4:6C:D0:00:FA:14:D3
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/OfQYw1Luy8yYd_ZVsPRs0AD6FNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0/21
140.150.10.0/24
140.150.12.0/24
140.150.14.0/24
140.150.18.0/23
140.150.21.0-140.150.25.255
140.150.28.0-140.150.38.255
Signature Algorithm: sha256WithRSAEncryption
26:54:61:0d:d2:b6:09:a9:09:08:56:77:6f:0f:e0:24:1e:52:
e4:f9:13:27:0c:ab:a3:01:64:e0:aa:83:f6:a5:7e:f3:fd:9d:
c4:41:c7:67:d7:84:0b:95:e7:e1:bf:d4:d7:98:f4:3e:01:ab:
db:bc:ad:71:16:af:9d:95:bc:a9:8d:02:ac:01:b9:e6:21:b0:
f2:1d:a1:f6:45:3c:4a:61:cd:b1:f2:d0:f3:64:6c:ac:1a:21:
20:cd:53:70:f3:45:5c:95:4a:b0:03:8b:53:b4:1a:53:d9:e7:
6e:4f:47:49:f6:89:22:11:bd:23:e9:f9:22:65:70:91:67:5a:
34:82:7a:68:19:98:ba:22:6c:27:f7:5d:e5:50:b4:47:3b:d8:
cc:1a:a7:aa:49:83:4f:02:0c:fe:4d:66:14:06:f0:fa:02:9e:
07:4b:5f:0f:9d:3e:6e:de:42:37:09:a9:e5:56:85:c2:a4:18:
6e:22:4c:25:43:7a:92:db:a9:c2:7a:4e:f2:5d:ab:83:a2:4b:
af:b2:7e:a7:23:fe:43:ba:16:50:ed:32:f9:0c:b1:20:51:e3:
58:59:12:0d:8c:7b:e2:7a:a1:45:18:5a:c4:e0:2c:ec:13:f1:
3a:cf:78:37:f8:f1:40:ec:e3:fd:f0:ff:8f:77:4b:a5:49:96:
72:ba:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:21:46 2025 by rpki-client