Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/lUQkKt57G9Sbcddhoaw6wR7TlCA.roa
File: lUQkKt57G9Sbcddhoaw6wR7TlCA.roa (raw, json)
Hash identifier: H7j4kjpqc5YtXLiLj+mkhs7fpolBn1/YtPvzYdBC/6w=
Subject key identifier: 95:44:24:2A:DE:7B:1B:D4:9B:71:D7:61:A1:AC:3A:C1:1E:D3:94:20
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 018750D1BAEA3A742E549723A35E7CCDF6F8
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/lUQkKt57G9Sbcddhoaw6wR7TlCA.roa
Signing time: Wed 05 Apr 2023 09:48:54 +0000
ROA not before: Wed 05 Apr 2023 09:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34177
IP address blocks: 5.133.68.0/22 maxlen: 22
83.142.144.0/21 maxlen: 21
62.244.117.0/24 maxlen: 24
212.106.96.0/19 maxlen: 19
91.90.96.0/21 maxlen: 21
62.193.32.0/19 maxlen: 19
82.210.0.0/19 maxlen: 19
195.15.128.0/18 maxlen: 18
185.5.108.0/22 maxlen: 22
78.31.40.0/21 maxlen: 21
83.118.192.0/19 maxlen: 19
62.244.89.0/24 maxlen: 24
178.16.160.0/20 maxlen: 20
159.180.224.0/19 maxlen: 19
176.57.32.0/21 maxlen: 21
95.141.96.0/20 maxlen: 20
82.210.32.0/19 maxlen: 19
94.228.176.0/20 maxlen: 20
78.109.240.0/20 maxlen: 20
185.41.4.0/22 maxlen: 22
2001:ab8::/29 maxlen: 32
2a01:4e00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:d1:ba:ea:3a:74:2e:54:97:23:a3:5e:7c:cd:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Apr 5 09:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9544242ade7b1bd49b71d761a1ac3ac11ed39420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:5a:5b:f6:c0:9a:c9:59:38:5a:1e:0c:6a:
04:08:4a:f5:0c:93:5a:fd:0d:5a:67:f6:a3:c7:46:
69:00:4c:6d:21:3a:f6:1b:15:c5:27:8a:a4:e9:32:
ae:62:d5:38:0f:73:1a:66:84:28:4c:56:34:6f:e7:
ad:3c:6c:75:71:b9:77:60:0a:1e:e6:d5:5e:b3:fc:
75:f9:01:d0:6f:9b:fa:d5:df:55:e7:73:d1:26:42:
65:01:6b:58:e4:27:79:fc:6a:e4:3e:49:89:7a:06:
d9:a5:5f:3d:2f:e6:bb:c0:08:c9:b8:37:35:0b:f6:
7b:a1:80:85:e7:10:2f:0f:0f:be:e8:e5:e9:12:9c:
1d:c7:0b:a3:69:48:1e:d3:89:69:67:8a:1d:f9:89:
90:f1:e8:5b:73:91:b6:38:00:46:6e:01:46:c7:0d:
98:61:63:71:77:42:71:04:db:b9:9b:1d:69:c8:a5:
ce:82:b2:21:1a:79:3c:c7:fb:e1:fa:8f:e2:3b:05:
81:71:e6:90:01:ad:11:16:e8:9b:90:b1:97:7d:f0:
92:48:e8:c0:23:14:a0:82:9d:67:4d:83:16:2a:f7:
4e:38:38:81:cc:d2:bc:e7:7c:c7:44:dc:df:92:42:
7d:65:7c:84:eb:ed:49:5f:df:2c:36:48:3e:d6:22:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:24:2A:DE:7B:1B:D4:9B:71:D7:61:A1:AC:3A:C1:1E:D3:94:20
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/lUQkKt57G9Sbcddhoaw6wR7TlCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.68.0/22
62.193.32.0/19
62.244.89.0/24
62.244.117.0/24
78.31.40.0/21
78.109.240.0/20
82.210.0.0/18
83.118.192.0/19
83.142.144.0/21
91.90.96.0/21
94.228.176.0/20
95.141.96.0/20
159.180.224.0/19
176.57.32.0/21
178.16.160.0/20
185.5.108.0/22
185.41.4.0/22
195.15.128.0/18
212.106.96.0/19
IPv6:
2001:ab8::/29
2a01:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
4f:b7:26:bf:81:58:3a:bb:3d:d9:29:9b:11:6c:3c:5c:40:8d:
05:67:05:3d:20:85:f3:e6:93:4a:35:27:4f:41:37:24:ab:03:
06:1e:71:9e:7a:b6:e4:59:74:82:20:54:6c:9c:e9:c4:fd:07:
69:18:66:5a:14:b7:22:80:db:12:6e:ba:dd:fc:cb:b9:8b:bf:
67:1b:3f:ea:9b:f7:ff:b2:6c:4a:92:eb:ff:6c:e0:a3:d2:c4:
25:f4:d1:67:93:65:ff:87:97:08:8e:65:03:3a:32:26:d0:5b:
fb:c2:8a:a8:b4:41:06:2f:16:3c:b1:e2:f0:75:b3:8c:48:e1:
15:a3:ee:df:d6:1d:5f:4e:98:a7:2a:24:88:13:eb:bb:1b:53:
c0:cc:dc:35:30:34:6d:b1:0f:36:d2:17:ea:52:65:ee:77:ec:
86:8d:99:57:1c:a0:5e:e2:c8:a7:61:2f:0e:42:69:27:01:6a:
2e:b8:42:aa:ea:32:7a:29:79:73:eb:dc:9e:65:72:20:64:d6:
09:e1:5d:08:2d:46:6a:4f:f4:f7:64:b1:50:1a:68:07:a0:7e:
2c:13:6f:e3:20:92:09:1c:bf:a2:85:b3:52:f4:f3:41:0e:06:
01:af:a9:23:61:93:7d:02:5e:cd:22:af:a2:2f:1f:a0:f4:43:
42:52:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 09:09:52 2023 by rpki-client on console-ams.rpki-client.org