Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/d17RpYvRYKSE2bXFWTRDsjhB0eU.roa
File: d17RpYvRYKSE2bXFWTRDsjhB0eU.roa (raw, json)
Hash identifier: TB8HxYJhcjAMncS3QR6y/Jrl3HNdkMvSe+WomYh5uLA=
Subject key identifier: 77:5E:D1:A5:8B:D1:60:A4:84:D9:B5:C5:59:34:43:B2:38:41:D1:E5
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 0185703072EC73193FF012934BE5BD02AE38
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/d17RpYvRYKSE2bXFWTRDsjhB0eU.roa
Signing time: Mon 02 Jan 2023 01:55:01 +0000
ROA not before: Mon 02 Jan 2023 01:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196752
IP address blocks: 164.138.30.0/23 maxlen: 24
37.252.120.0/21 maxlen: 24
91.213.195.0/24 maxlen: 24
164.138.24.0/21 maxlen: 24
185.24.220.0/22 maxlen: 24
84.22.96.0/19 maxlen: 24
84.22.96.0/22 maxlen: 24
84.22.100.0/23 maxlen: 24
84.22.118.0/23 maxlen: 24
84.22.122.0/24 maxlen: 24
46.19.32.0/21 maxlen: 24
46.19.36.0/22 maxlen: 24
2a02:2770::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:72:ec:73:19:3f:f0:12:93:4b:e5:bd:02:ae:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Jan 2 01:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=775ed1a58bd160a484d9b5c5593443b23841d1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:77:d2:77:4f:41:77:5a:6a:f3:37:36:be:
d2:2e:ce:e1:a9:5b:60:40:8f:8a:1e:4e:cc:c5:e8:
bf:8d:57:1b:a7:50:f2:c8:8e:db:a7:2e:45:d9:98:
0f:bb:78:2c:9d:51:5a:88:fa:f9:30:93:5a:9e:66:
8b:f4:b3:dc:db:f5:55:03:8a:2c:2b:65:86:02:a5:
d6:0c:4e:b9:c0:26:cd:f8:ae:89:c4:c8:42:5a:5c:
7a:78:f0:c6:f7:28:d9:75:59:b6:44:43:ac:ec:fe:
f5:01:cc:32:14:e2:96:ef:e9:5e:fe:7e:d3:be:b3:
1f:c6:f8:18:e4:ec:8e:ce:19:68:d6:6e:cd:15:66:
0b:23:53:88:3b:af:27:ad:e5:10:bf:41:51:f9:0f:
62:2c:6f:1e:bb:ff:e5:1e:49:9b:d4:e1:27:54:26:
a0:ac:51:19:19:af:f3:6f:a7:61:57:18:b4:b0:07:
df:5b:b8:21:34:af:e7:99:b3:75:e7:ce:6c:96:22:
13:ea:44:eb:07:27:07:fb:10:06:af:ef:2f:51:46:
f6:10:3e:90:fc:56:10:a4:d4:7a:f0:de:f4:7b:b5:
aa:10:7c:82:93:a9:4d:44:09:be:77:6b:4a:c1:9a:
80:f3:71:1e:ce:28:ae:d7:10:22:02:6b:3e:a6:11:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:D1:A5:8B:D1:60:A4:84:D9:B5:C5:59:34:43:B2:38:41:D1:E5
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/d17RpYvRYKSE2bXFWTRDsjhB0eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.120.0/21
46.19.32.0/21
84.22.96.0/19
91.213.195.0/24
164.138.24.0/21
185.24.220.0/22
IPv6:
2a02:2770::/32
Signature Algorithm: sha256WithRSAEncryption
28:ff:6f:55:96:76:6c:51:eb:04:ed:c2:33:94:6f:f5:88:ce:
63:82:d0:a7:6c:40:ac:7d:81:44:08:74:8a:51:71:e5:b8:d9:
7f:6d:f5:79:d9:98:1b:18:70:2b:27:a4:bf:37:0a:e0:df:32:
38:9b:79:b9:0f:24:90:b8:8f:31:eb:2f:c3:82:ef:4f:ac:90:
f3:cd:f2:be:92:61:40:9c:43:f3:fa:3d:eb:8a:ab:df:1c:f2:
a2:1d:7b:f1:c6:07:b1:23:87:3c:a2:47:e9:76:5d:5a:e3:42:
35:b4:7f:f7:c8:cf:6c:dc:9b:f6:d8:50:32:9f:8b:16:82:64:
f9:69:e3:08:c0:90:7b:d5:19:e8:90:7d:a4:72:ee:32:3a:c0:
6c:c3:ee:97:a5:da:ab:51:d5:c7:d8:93:64:89:26:be:cf:77:
a2:37:e6:b6:97:fc:4d:5b:07:e5:e6:f9:17:a4:3b:38:df:a7:
e5:f1:42:05:fe:13:25:fb:9d:df:c7:43:e2:bb:d5:cc:06:1b:
90:3c:74:ff:a8:ef:89:a2:38:3c:2e:25:a3:c5:f3:10:f0:6c:
58:64:08:69:53:75:3c:08:8e:69:2c:74:8a:02:2e:5a:bd:5d:
1b:7f:04:4f:51:d0:85:a0:b6:ed:f4:39:6f:78:fc:1f:ce:55:
06:de:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:20 2024 by rpki-client on console-ams.rpki-client.org