Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/0TEQUymYclSzXDHOKiT61gQZ4es.roa
File: 0TEQUymYclSzXDHOKiT61gQZ4es.roa (raw, json)
Hash identifier: oDpZQM3kFrO+ejvmirWVITIV66ghs/qawmbtFh1m80Q=
Subject key identifier: D1:31:10:53:29:98:72:54:B3:5C:31:CE:2A:24:FA:D6:04:19:E1:EB
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 0187B32C5CCE27FD2A655BC0A9919CF08985
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/0TEQUymYclSzXDHOKiT61gQZ4es.roa
Signing time: Mon 24 Apr 2023 12:10:41 +0000
ROA not before: Mon 24 Apr 2023 12:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61400
IP address blocks: 62.76.24.0/22 maxlen: 24
91.107.85.0/24 maxlen: 24
91.107.84.0/24 maxlen: 24
91.107.86.0/23 maxlen: 24
91.107.86.0/24 maxlen: 24
185.126.92.0/22 maxlen: 24
185.62.103.0/24 maxlen: 24
46.21.252.0/22 maxlen: 24
62.76.112.0/22 maxlen: 24
185.111.216.0/23 maxlen: 24
185.111.219.0/24 maxlen: 24
185.111.218.0/24 maxlen: 24
212.8.232.0/22 maxlen: 24
89.248.236.0/24 maxlen: 24
185.40.28.0/22 maxlen: 24
31.200.248.0/21 maxlen: 24
62.76.88.0/22 maxlen: 24
91.227.34.0/23 maxlen: 24
62.76.100.0/22 maxlen: 24
2a03:220::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Nov 2023 06:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:2c:5c:ce:27:fd:2a:65:5b:c0:a9:91:9c:f0:89:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Apr 24 12:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d131105329987254b35c31ce2a24fad60419e1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:5f:ef:d7:8a:26:52:ce:b0:a6:a9:10:01:
9e:8c:aa:c7:e5:ed:5f:56:6b:8c:cd:c5:96:dc:f2:
82:62:06:83:23:b4:59:10:89:60:68:be:04:6b:84:
9a:af:f5:e3:c0:9f:f7:50:b0:15:64:e0:52:2d:ee:
1b:15:1c:c9:5d:c4:40:aa:66:3f:4e:04:84:d9:9d:
64:2e:43:81:d5:a3:a3:68:a0:b9:18:df:ee:b4:83:
d6:7d:49:93:ec:dd:18:3a:4f:d8:18:9a:7d:58:18:
5b:9b:56:49:b3:c4:fc:1d:77:31:18:f3:bc:aa:33:
dc:95:17:74:ac:d2:ca:d7:0b:e5:6b:ba:d9:c8:ea:
24:43:20:a3:06:fc:7c:02:72:9f:ec:61:9d:13:11:
b3:ed:0c:4e:94:4d:1e:49:86:b4:a3:7b:0b:ae:9e:
b5:4a:6c:77:02:86:f7:e8:96:d6:fe:ce:45:54:d6:
73:de:76:33:ae:b0:be:ef:94:14:38:42:10:25:62:
2d:4a:d0:f1:c6:08:c3:39:6a:c9:b2:23:ec:d1:c9:
d1:2b:ae:b2:44:3f:13:29:16:a3:11:f5:10:a3:91:
e2:45:b1:9f:32:14:32:9d:07:46:c2:91:35:6f:7e:
9f:82:7a:b6:73:7a:13:40:e9:91:c2:4b:73:79:e8:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:10:53:29:98:72:54:B3:5C:31:CE:2A:24:FA:D6:04:19:E1:EB
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/0TEQUymYclSzXDHOKiT61gQZ4es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.248.0/21
46.21.252.0/22
62.76.24.0/22
62.76.88.0/22
62.76.100.0/22
62.76.112.0/22
89.248.236.0/24
91.107.84.0/22
91.227.34.0/23
185.40.28.0/22
185.62.103.0/24
185.111.216.0/22
185.126.92.0/22
212.8.232.0/22
IPv6:
2a03:220::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0e:1c:ec:25:77:ca:b7:91:76:e2:e8:8c:21:48:39:56:58:
34:7f:52:18:0b:0f:15:e2:fb:a0:c7:0a:8a:c5:b2:2a:e7:7f:
5a:52:79:de:37:0c:8c:80:ee:a8:42:52:18:07:4f:2c:b3:e1:
7d:99:e6:b9:70:26:f9:52:ba:1b:42:4f:6d:b8:e6:76:b0:a9:
aa:33:d1:df:a9:60:3c:ed:c6:97:86:83:82:ca:24:37:44:cf:
c8:bd:95:ca:44:3b:4a:84:e5:81:0a:9c:79:20:22:07:e0:25:
73:05:43:4d:51:e8:93:67:ed:22:eb:c2:92:60:8f:6d:4a:0b:
70:48:69:c6:cd:6a:da:6e:e5:d2:08:66:60:5f:f9:ce:54:f9:
36:9b:59:44:2f:1b:68:c5:ba:bf:5b:0e:04:24:12:e5:7c:e5:
71:dc:fe:ac:08:d1:56:b4:9d:bb:ae:24:a6:cb:e7:d8:3c:60:
90:31:6c:04:26:ae:68:7b:76:d8:3f:9d:3c:0e:3e:42:41:93:
a6:f2:a6:b3:d6:48:3e:bb:51:cc:34:b9:f2:65:ba:6c:17:24:
a3:ce:08:1c:6a:69:4a:2a:9e:83:44:73:46:0d:16:75:b4:3e:
b0:67:57:dc:fd:8d:70:14:f1:7a:b3:ef:1e:a8:3c:88:63:52:
8d:0a:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:22 2024 by rpki-client on console-fra.rpki-client.org