Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/Tvb1TMeSqUmbyQ-pKCXyzsrY9CY.roa
File: Tvb1TMeSqUmbyQ-pKCXyzsrY9CY.roa (raw, json)
Hash identifier: Z0byLUr9SNNpTwRmVTe+myZ0/dx2Z5Ok9ozpdkmI0uE=
Subject key identifier: 4E:F6:F5:4C:C7:92:A9:49:9B:C9:0F:A9:28:25:F2:CE:CA:D8:F4:26
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 0185710C0924C966956467C0CC0C23E17B47
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/Tvb1TMeSqUmbyQ-pKCXyzsrY9CY.roa
Signing time: Mon 02 Jan 2023 05:54:52 +0000
ROA not before: Mon 02 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44574
IP address blocks: 95.172.224.0/19 maxlen: 24
37.252.32.0/19 maxlen: 24
31.13.0.0/21 maxlen: 24
212.105.160.0/19 maxlen: 24
5.153.96.0/21 maxlen: 24
185.196.80.0/22 maxlen: 24
141.138.224.0/19 maxlen: 24
159.20.32.0/19 maxlen: 24
5.153.192.0/19 maxlen: 24
91.199.78.0/24 maxlen: 24
31.12.96.0/19 maxlen: 24
151.249.0.0/18 maxlen: 24
93.121.0.0/17 maxlen: 24
2001:67c:2544::/48 maxlen: 48
2a00:10e8::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:09:24:c9:66:95:64:67:c0:cc:0c:23:e1:7b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Jan 2 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef6f54cc792a9499bc90fa92825f2cecad8f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:32:14:6d:32:6c:87:0d:88:f7:1b:90:9c:
80:e0:99:da:ec:64:da:43:e7:48:5d:a8:1e:26:6b:
0d:a9:f3:1c:2a:66:29:1f:9c:00:5b:05:eb:61:15:
8a:8d:83:56:ad:f3:8b:85:2c:ef:8b:d0:17:dc:ac:
3a:e1:b9:f1:24:31:cb:13:ce:72:21:73:c3:1d:2b:
45:ae:7e:a6:64:97:a5:aa:57:1f:a3:90:38:06:5b:
bb:64:63:bf:15:59:84:f3:b6:a8:cf:4b:8d:d2:fc:
6f:c1:cc:df:cb:b0:27:6c:c0:d2:82:c4:60:4d:e5:
0d:e0:06:7c:4e:df:69:b7:b0:69:3e:3c:26:af:d7:
26:d6:f5:bd:d1:c8:e4:fa:4b:76:6a:06:84:a4:4d:
ff:ca:20:3b:d6:92:0a:07:5e:25:6d:d9:21:91:86:
aa:19:1b:99:4e:62:af:25:bf:6f:22:22:27:b8:00:
61:60:9b:e5:f2:8c:da:ab:0f:2e:c9:ac:e3:66:c4:
3d:3b:0c:05:38:81:89:26:5b:b2:83:64:ae:07:9b:
11:cc:1d:4e:43:95:4d:74:14:5e:fa:3b:92:d5:43:
49:77:e2:88:85:a6:6f:6b:15:0e:9e:d0:0a:f7:e9:
df:7d:31:79:87:98:d0:74:3c:33:e8:5d:a0:e1:bc:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:F5:4C:C7:92:A9:49:9B:C9:0F:A9:28:25:F2:CE:CA:D8:F4:26
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/Tvb1TMeSqUmbyQ-pKCXyzsrY9CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.96.0/21
5.153.192.0/19
31.12.96.0/19
31.13.0.0/21
37.252.32.0/19
91.199.78.0/24
93.121.0.0/17
95.172.224.0/19
141.138.224.0/19
151.249.0.0/18
159.20.32.0/19
185.196.80.0/22
212.105.160.0/19
IPv6:
2001:67c:2544::/48
2a00:10e8::/29
Signature Algorithm: sha256WithRSAEncryption
19:05:0f:13:29:28:e5:70:c6:ad:8d:91:f1:5a:e5:47:19:40:
bb:f0:e6:9d:06:40:c7:38:25:87:86:3d:43:55:4a:51:54:48:
9c:30:43:7b:fe:48:3e:a6:82:2e:04:6d:0a:bb:65:23:33:96:
de:64:6c:80:49:ee:fa:b6:14:9b:32:19:f7:95:17:a1:1d:e0:
7d:4c:c3:ba:34:1d:a4:e4:c0:0e:23:7e:cd:72:4a:a1:8d:d6:
a2:4d:b8:bd:a3:1e:30:c6:c3:6f:c5:4d:3a:30:50:f5:c4:f4:
4f:87:6d:54:45:c1:67:49:f7:74:aa:86:a2:11:88:ed:79:a4:
db:5a:d4:f8:c0:c8:a8:f1:1b:25:47:72:96:eb:98:51:85:51:
ee:ca:c4:b4:52:76:59:1b:cb:26:21:00:1c:ad:2a:c3:c8:2f:
2b:b0:8a:d5:f0:79:19:27:f5:c5:99:03:a2:97:21:26:70:80:
ea:48:ba:b9:cb:93:7c:54:9c:23:5b:42:96:ee:d1:f3:bd:3a:
63:f4:36:9d:56:40:f0:bb:2d:30:43:2e:30:c9:81:a7:c0:cf:
65:1a:5d:e4:7f:3b:d7:14:81:54:d6:16:72:58:32:e2:f4:ac:
30:ff:c4:c4:ec:6c:9c:23:b6:de:ac:ae:da:3e:72:7e:8d:3a:
ab:09:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:11 2024 by rpki-client on console-fra.rpki-client.org