Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/JInjJPQ1vCn1QwVwsUBaBrOliaw.roa
File: JInjJPQ1vCn1QwVwsUBaBrOliaw.roa (raw, json)
Hash identifier: 3E+ZIr5Y0ksv+j6CiGqEnwOlPMcACEqJh+ALqvuR4uM=
Subject key identifier: 24:89:E3:24:F4:35:BC:29:F5:43:05:70:B1:40:5A:06:B3:A5:89:AC
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 0185714C113E450E4D95F74FCBC383199293
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/JInjJPQ1vCn1QwVwsUBaBrOliaw.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 5.133.68.0/22 maxlen: 22
83.142.144.0/21 maxlen: 21
212.106.96.0/19 maxlen: 19
91.90.96.0/21 maxlen: 21
82.210.0.0/19 maxlen: 19
195.15.128.0/18 maxlen: 18
185.5.108.0/22 maxlen: 22
78.31.40.0/21 maxlen: 21
83.118.192.0/19 maxlen: 19
178.16.160.0/20 maxlen: 20
159.180.224.0/19 maxlen: 19
82.210.32.0/19 maxlen: 19
94.228.176.0/20 maxlen: 20
2001:ab8::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:11:3e:45:0e:4d:95:f7:4f:cb:c3:83:19:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2489e324f435bc29f5430570b1405a06b3a589ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:c5:65:8f:68:a7:0e:2e:ee:7e:c5:8b:7a:
58:69:bf:54:90:4a:ad:9f:72:5a:52:73:fa:78:24:
6f:3b:00:07:75:9b:5d:79:c3:60:14:68:18:1e:97:
c9:27:f3:85:da:34:0a:21:0f:61:7c:14:4e:be:7c:
39:68:2c:67:37:bb:08:34:01:f1:e8:c8:92:8e:37:
b0:bb:e2:c3:12:0c:98:52:86:d1:a0:d6:7e:51:ae:
91:a5:77:83:24:a4:38:fe:a6:8d:62:a8:1f:86:d2:
ea:61:a0:9c:20:03:48:4a:c2:d9:4b:45:b3:ba:46:
da:30:cf:a6:9b:08:b1:e1:91:14:9f:3c:4f:09:db:
92:35:07:23:90:e2:cb:2d:6e:b7:55:f0:56:54:1e:
71:46:da:e0:7b:28:c3:be:1c:5b:9e:78:b1:9e:a2:
09:e2:bd:01:31:1a:88:6e:9c:3f:a2:1f:16:e3:d8:
b7:07:05:00:ab:33:91:38:55:9b:56:21:1b:28:f2:
76:06:41:7c:90:38:6f:1e:79:32:d2:de:7f:ef:5e:
5f:fa:86:fc:a2:ce:52:71:b0:16:c9:d0:26:79:74:
4f:dd:6a:fb:a8:f6:2a:f1:b2:41:44:d3:b1:c8:86:
06:aa:d3:48:27:38:fc:8e:0f:c4:b9:6f:26:48:86:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:E3:24:F4:35:BC:29:F5:43:05:70:B1:40:5A:06:B3:A5:89:AC
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/JInjJPQ1vCn1QwVwsUBaBrOliaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.68.0/22
78.31.40.0/21
82.210.0.0/18
83.118.192.0/19
83.142.144.0/21
91.90.96.0/21
94.228.176.0/20
159.180.224.0/19
178.16.160.0/20
185.5.108.0/22
195.15.128.0/18
212.106.96.0/19
IPv6:
2001:ab8::/29
Signature Algorithm: sha256WithRSAEncryption
44:8e:36:bf:0d:eb:f5:c5:90:68:dc:7f:a8:25:38:71:99:95:
58:1e:7a:15:63:28:6c:38:d4:cd:bc:88:b3:92:a0:d2:0c:1a:
99:79:aa:4c:a3:00:54:16:fc:18:ba:a1:ba:d7:e8:69:c3:9d:
f3:48:26:2d:5b:1a:34:6f:4a:35:d1:75:fd:fd:cb:5c:1d:18:
b6:d2:fe:c3:6f:99:3f:d0:cb:da:42:0d:6a:d5:e0:a4:8e:62:
f8:fd:74:a6:0f:22:81:db:d9:07:be:55:b2:49:f6:40:d6:bb:
71:39:96:d6:ca:0b:6d:fa:9b:4b:11:64:9a:10:bd:70:9f:cb:
d8:12:48:8f:68:65:3d:ce:da:25:f0:64:bb:e9:2f:64:b9:f9:
62:be:70:37:ec:65:a2:c8:ec:65:b1:a8:2d:16:ed:4c:30:62:
7f:d4:8a:c6:3f:78:f4:18:8d:54:b7:3d:c3:2a:5c:ac:cf:97:
11:56:04:b5:b1:46:f4:47:62:a3:88:3f:47:e4:ca:5a:fc:6b:
27:af:60:d7:93:d2:f6:81:62:48:04:bd:58:c0:4e:b7:b6:85:
c2:b4:1a:55:00:bc:2a:41:33:65:99:77:e3:de:42:d1:5f:d5:
69:ef:fd:2e:f7:aa:c8:57:f3:8f:50:fb:8f:4a:98:b9:70:34:
7d:9f:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-ams.rpki-client.org