Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/u41uIj8VF7xUBMct-1wQWVwW72w.roa
File: u41uIj8VF7xUBMct-1wQWVwW72w.roa (raw, json)
Hash identifier: 4XkcsS6zXPKW2b+b6ggbr7oji9KQZxkt3M+/32ACNv8=
Subject key identifier: BB:8D:6E:22:3F:15:17:BC:54:04:C7:2D:FB:5C:10:59:5C:16:EF:6C
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 0189ED9AE5013450E0C6453CBA3DAA45B4C2
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/u41uIj8VF7xUBMct-1wQWVwW72w.roa
Signing time: Sun 13 Aug 2023 06:34:58 +0000
ROA not before: Sun 13 Aug 2023 06:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 5.44.248.0/24 maxlen: 32
45.67.4.0/22 maxlen: 32
137.59.4.0/22 maxlen: 32
92.119.168.0/22 maxlen: 32
185.72.240.0/22 maxlen: 32
46.254.105.0/24 maxlen: 32
46.16.32.0/24 maxlen: 32
2.58.76.0/22 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 21 Aug 2023 01:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:9a:e5:01:34:50:e0:c6:45:3c:ba:3d:aa:45:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Aug 13 06:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb8d6e223f1517bc5404c72dfb5c10595c16ef6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:79:90:f9:b3:da:0e:0a:d1:8b:23:6c:37:
a4:4d:55:25:fa:76:2c:80:54:90:c0:7b:e4:16:12:
61:b6:c2:58:1a:19:f1:6a:f8:7e:c6:4d:be:e8:1e:
6b:71:3f:ce:60:70:61:95:f1:63:a1:21:56:f7:09:
6c:73:d4:d2:b3:25:28:0d:9d:c6:29:5d:e0:0b:bb:
b6:38:35:d7:9c:71:b1:c3:77:54:03:08:38:af:bf:
aa:23:e6:88:32:58:17:f0:fb:b6:51:99:4b:3f:34:
cb:08:b2:5b:cf:1f:8f:5a:5f:19:41:cb:48:bb:05:
33:6f:c3:b6:e5:c6:1c:4a:59:fe:2b:35:00:54:e3:
7b:69:1b:b4:c4:b2:f1:d6:1d:3f:72:67:7e:cf:a4:
d7:3b:d1:22:f1:0a:66:89:31:c4:0c:13:64:cc:87:
4d:1d:a0:77:ae:a8:de:ff:44:33:62:87:6f:91:5d:
c8:79:2f:38:55:a0:db:10:72:24:38:30:45:ca:d3:
34:13:5d:14:4e:4a:9c:e8:8b:7a:4f:f8:12:02:b1:
9b:50:13:ce:f9:bb:9b:d6:c2:82:6b:a6:fc:24:91:
cd:c1:08:64:34:01:64:4f:86:af:d6:c8:f9:78:c2:
44:77:07:a0:81:9e:c8:08:04:ea:0f:32:3f:6c:29:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:6E:22:3F:15:17:BC:54:04:C7:2D:FB:5C:10:59:5C:16:EF:6C
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/u41uIj8VF7xUBMct-1wQWVwW72w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
5.44.248.0/24
45.67.4.0/22
46.16.32.0/24
46.254.105.0/24
92.119.168.0/22
137.59.4.0/22
185.72.240.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:2c:ba:7b:71:6e:6f:ca:71:b9:57:85:19:8c:95:74:4a:80:
2f:c6:d2:18:14:7e:53:e9:c7:f6:58:cb:be:b4:06:bd:7d:d3:
c0:cb:aa:f8:2a:d7:fb:69:81:3a:08:2f:e4:34:3c:92:b0:4c:
a6:dd:62:e2:8e:6f:c6:ef:07:d3:2e:a4:bb:0e:2a:23:0c:e7:
5a:fc:63:1d:93:11:28:24:df:fa:cb:4c:56:19:fe:eb:a5:4a:
dc:ce:d7:5e:5d:72:0e:61:fe:65:5c:44:ad:39:78:49:f1:d3:
4c:95:11:44:e2:42:09:5e:52:7c:6b:53:e5:2b:be:07:25:54:
63:3f:7f:a2:56:10:f5:5b:45:af:7a:4a:0b:0a:72:88:17:b4:
d2:38:b7:e6:48:d4:24:40:7e:11:4a:63:60:e7:66:f6:82:45:
65:4e:f3:f2:67:9b:7d:01:11:06:78:fd:ad:09:91:a4:20:18:
2b:96:d3:95:b9:f6:d5:13:1c:3e:68:55:d8:07:bd:95:2b:8f:
32:ee:ce:6f:04:24:3e:5f:bb:38:62:7d:18:8a:53:62:3b:dc:
96:b8:40:f7:68:dc:6b:80:e3:1c:0d:1f:40:b0:80:6d:6a:14:
36:6b:4f:63:c5:90:55:31:ea:09:15:d2:01:7a:1d:e7:01:df:
c7:77:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:07 2024 by rpki-client on console-fra.rpki-client.org