Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1uvSVBedwK3bwRSRxPI13mJdl3g.roa
File: 1uvSVBedwK3bwRSRxPI13mJdl3g.roa (raw, json)
Hash identifier: BXbvr3Ny68ONkK5UoSX+xlJwvZDXPx52FH9jspOXbB8=
Subject key identifier: D6:EB:D2:54:17:9D:C0:AD:DB:C1:14:91:C4:F2:35:DE:62:5D:97:78
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0187696A88E02A26B0984A24B87BDFA22349
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1uvSVBedwK3bwRSRxPI13mJdl3g.roa
Signing time: Mon 10 Apr 2023 04:26:42 +0000
ROA not before: Mon 10 Apr 2023 04:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 62.182.32.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
139.28.240.0/22 maxlen: 22
5.133.100.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
31.40.204.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
194.169.92.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
37.221.76.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
77.241.72.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
176.53.156.0/22 maxlen: 22
194.93.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 May 2023 06:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:6a:88:e0:2a:26:b0:98:4a:24:b8:7b:df:a2:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 10 04:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ebd254179dc0addbc11491c4f235de625d9778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:44:92:65:6d:08:ce:cd:61:6a:a0:94:2e:
a3:36:b0:28:05:aa:ea:c8:7e:61:51:26:80:8f:b9:
21:92:39:9d:fe:da:e2:64:33:9e:15:6a:57:95:11:
c0:ba:f3:77:b8:77:45:ac:e1:4d:c5:f9:79:cb:7d:
c4:ce:35:ef:59:7a:a2:d2:a2:16:80:9d:00:42:94:
4d:5a:db:4b:af:08:64:54:88:d8:04:e9:e8:2c:6c:
07:21:ee:23:d4:e9:a1:30:9f:74:c4:75:be:46:7a:
ac:ce:99:33:a1:4b:50:53:28:3b:1d:35:e6:46:23:
bf:5b:03:6e:b8:bc:6e:ae:a5:4f:4f:63:3a:6e:f4:
51:fc:42:72:c0:0c:4f:95:f3:31:f3:c3:6b:76:cc:
1c:58:32:69:d2:d7:c2:b1:9f:fb:86:ec:da:b2:f9:
f4:14:43:0c:6b:08:df:91:c2:44:d4:3b:12:3c:18:
59:e0:f3:f5:78:36:63:1a:d1:02:71:94:9c:11:f8:
1c:9d:a0:b7:f0:e3:cc:13:33:f4:be:c2:69:ac:fe:
aa:0e:51:0a:9a:61:ab:be:53:2e:04:5c:26:cc:4e:
d3:3c:48:21:f8:af:f9:13:8b:96:1d:5f:d7:ea:35:
69:61:03:81:86:6d:8f:e5:15:7d:2d:a1:16:da:e7:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:D2:54:17:9D:C0:AD:DB:C1:14:91:C4:F2:35:DE:62:5D:97:78
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/1uvSVBedwK3bwRSRxPI13mJdl3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
31.40.204.0/22
37.221.76.0/22
62.182.32.0/22
77.241.72.0/22
84.54.0.0/22
85.235.72.0/22
139.28.48.0/22
139.28.212.0/22
139.28.240.0/22
176.53.156.0/22
176.96.128.0/22
193.32.204.0/22
193.38.44.0/22
194.93.60.0/22
194.169.92.0/22
212.87.196.0/22
Signature Algorithm: sha256WithRSAEncryption
82:2d:80:18:0a:74:d8:d9:e1:10:20:5a:d6:fb:61:55:0e:ec:
ba:c9:ef:37:7e:c6:e0:aa:26:f4:dd:e0:ef:80:ef:5b:36:6a:
8d:0b:55:e9:84:de:9c:c6:a3:b0:ac:e8:5a:4d:9c:5a:c9:ac:
5e:b0:22:d4:70:30:df:e3:5b:f3:13:a5:ef:33:7a:18:74:42:
39:63:d7:e2:0d:db:92:12:79:7a:84:fb:ab:fe:c2:39:44:d9:
12:57:1e:98:c9:a9:bd:ec:04:f7:29:a5:6a:c2:e9:ee:69:b8:
7c:9b:88:75:53:f6:fe:8e:8e:98:4b:de:c2:ea:a4:ea:a3:5d:
1d:70:19:81:d4:f5:34:bc:5c:74:05:ec:65:ad:0c:88:cf:82:
b9:50:70:4d:f4:0e:f8:03:0e:36:4b:47:b6:72:5c:ab:d8:be:
7e:a7:30:8b:2f:49:34:26:83:a6:07:b9:f7:3e:08:7b:1e:7c:
57:41:13:e7:5f:5c:10:25:6b:4b:f1:46:20:ef:5d:7f:40:cb:
79:7b:a9:37:15:aa:c2:bc:6c:5d:0b:15:bc:fb:26:4e:52:d4:
36:e7:82:1a:d8:46:bd:7e:a8:19:b3:6c:28:dc:f2:9a:b5:f8:
91:b0:68:89:74:41:b1:0c:5f:84:f1:29:07:1c:84:f5:b7:67:
b4:7b:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org