Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/aJtzgBgL1umxNQIjIMhRY3Me_8g.roa
File: aJtzgBgL1umxNQIjIMhRY3Me_8g.roa (raw, json)
Hash identifier: 1av0GrUCv/3GZun1JYzutKUdb1ylruVwwtRRA0VY4Mc=
Subject key identifier: 68:9B:73:80:18:0B:D6:E9:B1:35:02:23:20:C8:51:63:73:1E:FF:C8
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0189F4606FC61B1C00F26636ACC651757364
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/aJtzgBgL1umxNQIjIMhRY3Me_8g.roa
Signing time: Mon 14 Aug 2023 14:08:28 +0000
ROA not before: Mon 14 Aug 2023 14:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 5.252.20.0/24 maxlen: 24
5.252.23.0/24 maxlen: 24
5.252.22.0/24 maxlen: 24
5.252.21.0/24 maxlen: 24
45.83.180.0/22 maxlen: 24
2.58.124.0/22 maxlen: 24
45.150.110.0/23 maxlen: 24
92.118.124.0/24 maxlen: 24
92.118.125.0/24 maxlen: 24
92.118.127.0/24 maxlen: 24
92.118.126.0/24 maxlen: 24
2a0b:ec82::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:60:6f:c6:1b:1c:00:f2:66:36:ac:c6:51:75:73:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 14 14:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=689b7380180bd6e9b135022320c85163731effc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:d5:e7:48:94:28:c2:e8:6a:fb:25:34:93:
32:11:fd:5b:29:92:23:0b:56:6d:ca:a6:cf:5a:3a:
a4:c9:66:a4:dd:10:5b:30:00:9f:99:0e:47:ce:ac:
80:85:e7:81:ed:cf:cb:51:4b:e3:87:fa:c1:7a:44:
71:3d:94:5a:3d:66:d2:28:f0:5b:e4:f9:2e:de:0b:
51:b9:44:bd:12:18:da:70:14:78:02:96:42:3a:1b:
42:db:82:34:fb:97:5f:46:19:44:c2:1b:96:aa:40:
83:40:df:b4:d4:39:94:43:e3:ab:5d:29:01:a6:5e:
40:7b:fa:6b:8f:41:8d:0d:f5:37:fd:3e:e4:53:e9:
87:5b:be:20:7a:d7:6f:f4:59:1b:e4:b6:50:53:f7:
10:c4:d8:df:9e:98:ad:79:b6:f5:b1:a1:f7:1e:7f:
bf:ba:2b:a0:fd:de:42:e7:4a:5d:37:6b:a7:5b:30:
42:08:15:bf:63:eb:b1:18:4c:04:c0:f0:d0:08:a3:
cd:47:b5:3f:d1:38:3c:da:49:42:83:e1:b3:ac:0d:
c9:ac:e2:48:ef:2c:94:c9:cd:d6:f8:e0:c2:e6:3d:
a6:a2:68:19:af:c5:01:b2:ad:77:f1:f7:d3:65:c3:
43:50:0e:c3:d5:56:d0:fd:f6:6a:d1:5c:ac:dc:af:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:73:80:18:0B:D6:E9:B1:35:02:23:20:C8:51:63:73:1E:FF:C8
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/aJtzgBgL1umxNQIjIMhRY3Me_8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.124.0/22
5.252.20.0/22
45.83.180.0/22
45.150.110.0/23
92.118.124.0/22
IPv6:
2a0b:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
6e:8c:ef:73:ae:b5:14:68:e7:43:80:74:3a:fb:db:cf:be:78:
29:fa:9b:8e:e0:7f:4a:f4:c6:a9:57:fc:b7:68:60:a7:88:85:
83:01:73:28:2b:35:0c:e3:64:cb:a4:02:82:ea:95:4e:09:cf:
f7:a5:3a:2d:2f:f2:7b:41:0c:66:89:a6:e6:ef:56:92:af:3b:
b9:f5:f1:61:0e:ec:c9:89:80:ac:0b:b5:ee:6f:66:ac:e9:ee:
c5:b7:e4:8c:5d:a6:b6:d6:51:ca:e8:c2:e9:9b:87:08:c9:f1:
25:ce:ed:fe:e2:22:8b:ee:41:23:ce:54:4b:af:76:71:50:9f:
94:db:b7:a0:b4:84:16:44:60:0a:4b:c3:0f:45:38:bd:41:85:
d1:7a:45:ab:39:4c:5f:98:42:ff:80:49:50:14:5b:fc:61:37:
8c:f5:05:a7:50:cd:08:d0:ed:ae:13:83:ba:15:1a:05:a3:c4:
1a:f6:ca:ee:ea:a5:ed:f1:98:af:09:70:2f:a9:bf:2c:c4:36:
5d:e9:c5:8d:d6:70:40:bf:aa:4d:5f:59:2c:47:30:f0:10:77:
40:67:34:da:39:3c:93:1a:59:18:13:c5:24:9c:5e:2e:18:6a:
01:71:fa:cb:8b:a5:35:29:cf:d6:ce:03:23:51:24:ec:bd:53:
b3:95:69:3f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYn0YG/GGxwA8mY2rMZRdXNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjMwODE0MTQwODI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODliNzM4MDE4MGJkNmU5YjEzNTAyMjMyMGM4NTE2MzczMWVmZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPrV50iUKMLoavslNJMyEf1bKZIj
C1ZtyqbPWjqkyWak3RBbMACfmQ5HzqyAheeB7c/LUUvjh/rBekRxPZRaPWbSKPBb
5Pku3gtRuUS9EhjacBR4ApZCOhtC24I0+5dfRhlEwhuWqkCDQN+01DmUQ+OrXSkB
pl5Ae/prj0GNDfU3/T7kU+mHW74getdv9Fkb5LZQU/cQxNjfnpitebb1saH3Hn+/
uiug/d5C50pdN2unWzBCCBW/Y+uxGEwEwPDQCKPNR7U/0Tg82klCg+GzrA3JrOJI
7yyUyc3W+ODC5j2momgZr8UBsq138ffTZcNDUA7D1VbQ/fZq0Vys3K8nNwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFGibc4AYC9bpsTUCIyDIUWNzHv/IMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvYUp0emdCZ0wxdW14TlFJaklNaFJZM01lXzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCAjp8AwQC
BfwUAwQCLVO0AwQBLZZuAwQCXHZ8MA0EAgACMAcDBQAqC+yCMA0GCSqGSIb3DQEB
CwUAA4IBAQBujO9zrrUUaOdDgHQ6+9vPvngp+puO4H9K9MapV/y3aGCniIWDAXMo
KzUM42TLpAKC6pVOCc/3pTotL/J7QQxmiabm71aSrzu59fFhDuzJiYCsC7Xub2as
6e7Ft+SMXaa21lHK6MLpm4cIyfElzu3+4iKL7kEjzlRLr3ZxUJ+U27egtIQWRGAK
S8MPRTi9QYXRekWrOUxfmEL/gElQFFv8YTeM9QWnUM0I0O2uE4O6FRoFo8Qa9sru
6qXt8ZivCXAvqb8sxDZd6cWN1nBAv6pNX1ksRzDwEHdAZzTaOTyTGlkYE8UknF4u
GGoBcfrLi6U1Kc/WzgMjUSTsvVOzlWk/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org