Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/XdZ8-qnICZqhksWsiw5MLTAlDRs.roa
File: XdZ8-qnICZqhksWsiw5MLTAlDRs.roa (raw, json)
Hash identifier: xloG6dNen4WPhrYR1Gcd8L/fYdQURKFOc/+HQ7IfMjI=
Subject key identifier: 5D:D6:7C:FA:A9:C8:09:9A:A1:92:C5:AC:8B:0E:4C:2D:30:25:0D:1B
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 018F867FAA2895E1A6EB9119827A8D621217
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/XdZ8-qnICZqhksWsiw5MLTAlDRs.roa
Signing time: Fri 17 May 2024 12:21:04 +0000
ROA not before: Fri 17 May 2024 12:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 2.58.76.0/22 maxlen: 32
45.67.4.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
46.254.105.0/24 maxlen: 32
80.73.243.0/24 maxlen: 32
87.236.144.0/24 maxlen: 32
92.119.168.0/22 maxlen: 32
93.157.108.0/24 maxlen: 32
137.59.4.0/22 maxlen: 32
146.255.187.0/24 maxlen: 32
178.212.226.0/24 maxlen: 32
185.72.240.0/22 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 Aug 2024 10:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:7f:aa:28:95:e1:a6:eb:91:19:82:7a:8d:62:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: May 17 12:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dd67cfaa9c8099aa192c5ac8b0e4c2d30250d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:25:66:38:3f:17:2b:26:e8:d8:62:5b:2f:
20:19:1c:f5:c8:9a:da:fb:31:08:db:6b:a3:9f:06:
94:8b:05:ee:a4:b4:bc:6b:4d:aa:f9:80:c2:6f:7a:
18:e1:64:5c:26:64:e8:af:b5:b5:4e:f2:cb:1e:b5:
09:c2:d2:12:d2:a6:82:3d:ba:41:2c:f0:4a:e5:84:
4a:34:8f:b0:2b:fe:bd:fe:00:28:f1:0e:aa:a4:09:
8a:33:95:ee:c7:48:9c:6c:d0:0a:b2:a0:6e:18:d6:
2b:ce:20:aa:c7:8f:2d:ff:80:59:3b:73:88:d9:f5:
d5:2a:ae:f2:5f:0e:dd:30:76:61:dc:f0:61:b1:7b:
23:b6:a2:bc:f2:4e:b0:d6:51:eb:d2:e1:4a:2c:43:
09:ef:1d:98:3d:66:8b:95:cd:dc:f1:a1:3d:8f:f0:
89:ea:09:6f:38:75:ac:15:f3:e1:c2:66:a7:d5:9c:
2e:83:9d:e0:cb:23:b6:ee:e1:8a:a1:b2:98:30:2c:
26:c0:ec:e8:8b:20:4c:f6:12:b8:0e:67:06:8f:7f:
2e:dc:89:f8:01:45:4b:26:cf:6c:27:5e:31:ca:37:
ae:05:fc:a4:70:61:59:42:ff:84:01:f2:86:1a:91:
1a:e6:73:18:00:ec:1f:4b:aa:d4:b4:f8:4d:64:9d:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:7C:FA:A9:C8:09:9A:A1:92:C5:AC:8B:0E:4C:2D:30:25:0D:1B
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/XdZ8-qnICZqhksWsiw5MLTAlDRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
45.67.4.0/22
46.16.32.0/24
46.254.105.0/24
80.73.243.0/24
87.236.144.0/24
92.119.168.0/22
93.157.108.0/24
137.59.4.0/22
146.255.187.0/24
178.212.226.0/24
185.72.240.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:f4:06:be:fa:18:42:86:96:7d:68:ad:6f:a8:1c:d4:20:a2:
54:4d:03:2d:a3:5d:60:3a:ec:b6:85:49:d0:14:55:d8:de:2b:
a3:ed:bd:c2:86:e3:d1:76:96:8e:94:97:2c:bd:bb:a2:bd:1f:
49:34:7c:2c:2d:28:b9:65:ea:b3:d4:39:aa:72:84:6e:18:5e:
c9:d4:cf:27:a6:6e:04:46:a0:d6:54:5c:45:3a:a9:66:89:8a:
9b:db:6a:a7:e1:89:3d:2b:ad:78:63:c3:e2:28:a6:0c:55:d4:
b3:3d:26:a5:53:fa:e9:2e:38:e3:19:df:74:08:ab:c2:d9:11:
7a:70:fe:95:a6:92:c4:01:e1:07:d4:7f:b1:68:28:0c:de:68:
04:f0:bc:b4:67:12:6b:dc:6f:a3:03:b1:b9:03:50:01:32:7f:
46:73:90:50:70:8c:79:71:6d:2c:89:bc:48:bd:06:e8:42:63:
2f:27:32:62:bb:29:95:54:ad:41:af:72:e1:41:37:26:ef:c8:
01:c5:38:4c:78:94:27:40:6c:f0:1c:35:48:35:d1:aa:96:65:
72:38:c6:93:47:3d:d1:dc:dc:a2:c9:dd:fe:98:03:b3:7c:c6:
b7:15:66:34:4c:54:21:02:d1:49:28:58:98:6e:c7:a0:26:26:
58:b0:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 13:00:29 2024 by rpki-client on console-ams.rpki-client.org