Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/januXaNTjnLpQxg_AcZYndU7l0Y.roa
File: januXaNTjnLpQxg_AcZYndU7l0Y.roa (raw, json)
Hash identifier: XZ9jm6cGeLiQ8hil5n/yTZLjLhTYXadccQJUP5tmrOI=
Subject key identifier: 8D:A9:EE:5D:A3:53:8E:72:E9:43:18:3F:01:C6:58:9D:D5:3B:97:46
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018D67057CC728432DFA1819782D10294CA4
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/januXaNTjnLpQxg_AcZYndU7l0Y.roa
Signing time: Thu 01 Feb 2024 23:33:49 +0000
ROA not before: Thu 01 Feb 2024 23:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 5.133.100.0/22 maxlen: 22
31.40.204.0/22 maxlen: 22
37.221.76.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
85.8.160.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
176.53.156.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
194.93.60.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:67:05:7c:c7:28:43:2d:fa:18:19:78:2d:10:29:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 1 23:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8da9ee5da3538e72e943183f01c6589dd53b9746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:e6:61:67:25:1c:76:c2:80:43:3a:7d:bd:
a8:95:1d:b9:fc:94:66:75:9d:8e:81:70:0e:86:29:
50:f6:91:39:95:e6:d0:36:28:e8:ff:ac:e5:1a:75:
94:64:ee:34:9d:10:aa:9e:14:4b:7e:02:ed:0b:ee:
91:c4:6a:75:6b:80:e9:4a:9a:1e:2a:15:41:b3:67:
f6:b7:24:e4:cb:ef:63:af:d7:59:e0:5b:23:40:cb:
6d:29:75:af:58:bb:5d:83:96:42:17:64:e0:10:89:
78:bb:4e:50:f9:dc:98:cf:71:c8:40:73:53:7a:dc:
6e:fd:ed:f1:5d:2c:6e:93:45:47:91:a7:46:6a:57:
d3:41:a0:d0:ff:b1:2d:d5:b2:e9:df:b3:58:0d:f7:
18:95:cd:9d:12:f7:4a:25:40:d9:3c:fb:48:fa:39:
71:6a:7b:14:d5:35:c4:9e:87:c3:ca:80:08:4b:f7:
a0:6d:a7:a4:68:d1:aa:bd:24:9c:2a:60:ff:73:a6:
b4:08:00:40:50:1a:0c:a2:39:50:1c:73:19:7d:5b:
60:be:f6:70:10:eb:05:bc:0e:6a:d2:9f:57:bc:89:
ad:56:4f:a5:62:8e:75:93:6b:c0:93:99:a3:f6:8c:
30:23:13:57:47:1f:d9:3c:ad:c4:1a:be:4e:87:b1:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:EE:5D:A3:53:8E:72:E9:43:18:3F:01:C6:58:9D:D5:3B:97:46
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/januXaNTjnLpQxg_AcZYndU7l0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
31.40.204.0/22
37.221.76.0/22
83.171.244.0/22
85.8.160.0/22
92.249.60.0/22
176.53.156.0/22
188.119.68.0/22
194.93.60.0/22
212.87.196.0/22
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
15:8e:48:e1:c9:dc:54:a9:4d:eb:5d:c5:6d:34:f2:10:bb:cb:
a2:77:7f:27:81:5d:a4:62:d1:30:c2:47:09:3c:bd:cb:c1:7b:
75:8f:0f:a7:e6:4a:f0:fd:d6:55:85:ce:23:bc:ff:15:28:30:
b0:9e:86:ab:89:37:fa:f1:d0:63:56:34:33:da:4d:73:4c:db:
3b:4b:ae:93:d1:03:ce:af:88:56:17:50:42:76:1d:a3:c7:7d:
f3:9d:94:31:78:ba:81:ef:51:79:f8:ae:a3:94:97:9c:f0:29:
93:ab:c1:b6:66:c2:30:a3:41:5b:2c:d6:51:58:b0:1e:52:c3:
69:62:f4:0f:50:81:21:a5:b5:ab:ce:d7:47:5a:cd:55:67:4f:
e6:7e:97:bd:fe:58:f1:fb:00:f9:21:21:c7:80:ed:3e:3a:69:
87:5b:70:f3:c0:b5:67:7b:5c:e1:4e:6d:24:68:89:18:24:d5:
89:98:18:1c:3b:4c:14:1b:bb:f5:fc:37:19:7c:d3:a3:a9:f5:
61:3d:00:26:a1:cc:c1:50:77:b4:45:50:f9:d5:c7:61:63:02:
3d:73:16:f1:d1:bd:5c:52:40:08:2a:e1:9a:64:e5:89:c0:11:
b1:1c:5e:98:6f:f3:53:46:09:12:d3:a4:14:44:20:eb:32:6b:
8c:ee:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org