Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/22VCEEjlci_wt84x1KVDy91fG20.roa
File: 22VCEEjlci_wt84x1KVDy91fG20.roa (raw, json)
Hash identifier: OZ2h1aaxrdY9J0niGySMny5UheSjsrnpXd9CWgAJOZw=
Subject key identifier: DB:65:42:10:48:E5:72:2F:F0:B7:CE:31:D4:A5:43:CB:DD:5F:1B:6D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018653F2E65B222C2E5F07BC8FF5F7C90D8C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/22VCEEjlci_wt84x1KVDy91fG20.roa
Signing time: Wed 15 Feb 2023 07:21:12 +0000
ROA not before: Wed 15 Feb 2023 07:21:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60808
IP address blocks: 5.34.208.0/20 maxlen: 24
188.253.96.0/19 maxlen: 24
185.215.246.0/24 maxlen: 24
185.36.192.0/22 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Feb 2023 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:f2:e6:5b:22:2c:2e:5f:07:bc:8f:f5:f7:c9:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 15 07:21:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db65421048e5722ff0b7ce31d4a543cbdd5f1b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:93:d7:38:44:8d:b3:ea:2e:f4:5f:71:9b:
f0:8e:dd:08:ea:2d:11:82:12:e7:2f:2a:d1:8a:7d:
4c:e3:13:5d:89:d6:c9:24:03:f5:58:63:96:6f:c3:
2e:63:a8:01:70:73:1b:37:82:d9:5a:92:d7:c4:2b:
9f:6c:56:54:ba:11:3d:b3:bb:48:50:7e:12:27:8b:
a9:7c:69:01:a0:9b:55:2f:b3:43:5f:e3:98:0a:0f:
95:f7:5a:96:36:b4:19:c5:8b:b3:1c:07:ac:a5:9e:
b6:78:b0:0e:38:97:1f:77:c3:36:bb:7c:f0:fd:8a:
ac:18:f8:38:ba:2f:6a:65:ee:a8:9d:bf:d1:50:9e:
03:39:e8:36:34:a8:11:42:a9:ee:b3:3e:7c:fd:5b:
14:3c:d5:57:b3:23:2f:ca:23:1c:85:69:08:37:06:
72:75:6c:ca:72:2a:f1:d8:28:3e:be:9a:02:71:65:
30:61:09:ce:09:ef:25:17:0e:26:f2:86:f2:06:cb:
8a:47:85:f8:7b:c1:b5:b7:8c:f2:73:94:22:fa:93:
42:c5:65:9c:5f:07:86:e6:34:85:80:70:2c:05:f5:
f8:1e:56:32:c7:19:cb:bc:6c:a3:5e:f8:5b:02:73:
d2:53:31:31:0f:fa:cc:8e:0c:33:2d:ed:1f:7b:be:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:42:10:48:E5:72:2F:F0:B7:CE:31:D4:A5:43:CB:DD:5F:1B:6D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/22VCEEjlci_wt84x1KVDy91fG20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.36.192.0/22
185.215.246.0/24
188.253.96.0/19
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:1f:5b:b0:ba:6c:cc:d5:d1:3c:d3:0c:6e:62:52:eb:2d:f8:
1a:0e:1d:6c:15:76:ff:0a:70:4a:f6:14:72:2f:8d:5a:40:81:
10:1c:a3:9d:7f:18:7f:f1:e3:9d:00:65:96:43:2f:c5:08:3e:
55:bc:cd:7a:90:ff:58:78:3e:22:37:25:26:34:e3:3b:db:8d:
c5:8a:1a:58:c0:bf:83:e9:ff:76:25:98:57:5e:3a:a4:8f:65:
1b:e0:f3:73:25:66:3a:d4:0b:17:5c:ee:74:05:51:b1:ff:2c:
bd:0d:ad:5f:a8:f8:97:4e:a5:88:72:b9:79:eb:23:bb:34:90:
e9:74:0c:4c:2a:83:ba:36:23:cd:63:9f:da:0b:74:d0:cb:58:
79:e4:c0:17:2f:1d:d4:45:b9:f6:7a:58:99:89:19:22:8d:6f:
c4:6f:26:04:c9:61:4b:81:23:e4:b0:06:6f:d7:8e:bd:79:5b:
a0:1c:d5:37:a3:28:bd:46:c5:80:ef:40:30:66:95:23:f1:1a:
7f:48:70:6a:a3:84:9c:14:70:7b:72:c4:08:66:91:24:46:a3:
62:c4:5d:f4:de:8c:d2:e1:1e:4e:06:44:9a:08:35:fe:2c:90:
a0:74:ba:f9:c3:c9:f5:f3:84:5b:3c:46:63:6d:3e:03:86:b9:
e1:f7:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:15 2024 by rpki-client on console-ams.rpki-client.org