Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/AdZvQ2DQTVU8ryKuwU7NVUSFZio.roa
File: AdZvQ2DQTVU8ryKuwU7NVUSFZio.roa (raw, json)
Hash identifier: TJ5qk5UY107GL40ukNcOaJ4KyVxAU+FHqj2pc8CG+dA=
Subject key identifier: 01:D6:6F:43:60:D0:4D:55:3C:AF:22:AE:C1:4E:CD:55:44:85:66:2A
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018E80AADD56FAAC46A70ABDE2DDF1F85F2A
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/AdZvQ2DQTVU8ryKuwU7NVUSFZio.roa
Signing time: Wed 27 Mar 2024 16:07:45 +0000
ROA not before: Wed 27 Mar 2024 16:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56884
IP address blocks: 62.122.188.0/24 maxlen: 24
84.246.111.0/24 maxlen: 24
91.247.178.0/24 maxlen: 24
176.97.213.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
194.26.223.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
2a13:8e00::/29 maxlen: 29
2a13:9300::/29 maxlen: 29
2a13:a700::/29 maxlen: 29
2a13:da00::/29 maxlen: 29
2a13:fe00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 May 2024 13:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:aa:dd:56:fa:ac:46:a7:0a:bd:e2:dd:f1:f8:5f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Mar 27 16:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01d66f4360d04d553caf22aec14ecd554485662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:41:ab:f3:56:2d:87:5c:5b:be:43:0f:e8:
71:1f:52:65:5d:4b:40:15:c9:cd:b9:48:e0:f2:76:
8f:90:2b:b1:84:0b:25:b2:0e:fe:e5:00:be:de:8d:
5c:69:9c:17:8d:0f:75:70:83:86:1a:df:8a:0b:f8:
d4:98:c6:7c:20:46:d9:7f:25:47:e5:84:de:68:00:
bd:fd:b8:4d:e9:ec:f7:b9:81:50:72:07:c4:55:46:
67:b0:2d:0b:8e:89:ca:01:68:3f:76:5d:4f:ff:43:
96:f2:06:a3:eb:09:5c:b1:46:58:39:ab:f3:c4:fd:
42:d4:da:97:62:99:ca:59:71:d1:2e:bf:7d:91:41:
ef:14:41:ce:ae:d5:ce:9c:1d:04:e1:c0:3b:43:b9:
79:fb:41:a6:33:96:15:67:9e:56:10:e2:ad:56:ba:
12:1d:82:2e:f0:2b:e1:39:40:35:f0:58:e7:81:55:
b1:28:bf:29:2f:3f:2f:71:ec:9b:f2:c4:3a:ec:8e:
88:67:be:8c:7c:5e:11:c4:d5:bc:a5:35:3a:a2:5b:
aa:54:87:73:e8:96:8c:61:20:24:36:a8:77:a9:0c:
a8:ff:16:0c:b9:2b:46:9c:19:11:98:a4:99:66:9e:
bd:c4:01:cd:9a:f3:a3:91:20:96:53:29:09:7e:34:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:6F:43:60:D0:4D:55:3C:AF:22:AE:C1:4E:CD:55:44:85:66:2A
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/AdZvQ2DQTVU8ryKuwU7NVUSFZio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
84.246.111.0/24
91.247.178.0/24
176.97.213.0/24
178.23.188.0/24
194.26.223.0/24
213.232.252.0/24
IPv6:
2a13:8e00::/29
2a13:9300::/29
2a13:a700::/29
2a13:da00::/29
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
96:01:56:19:fa:8a:11:d6:d9:aa:0b:b0:d8:55:ab:f0:07:fa:
c9:4f:d6:3e:cd:da:9d:f4:ab:83:88:d4:31:ea:e5:b7:a4:82:
7a:31:67:0d:db:63:ae:c9:89:2c:46:93:86:76:b3:fc:8d:35:
e5:48:90:e7:87:fa:90:c0:80:2b:e3:0e:a7:67:c4:4c:d1:e3:
33:85:59:0e:aa:f8:09:0c:cf:96:c4:60:8d:37:bb:5b:b2:a2:
19:51:53:07:6f:19:79:cd:c2:aa:01:30:e2:53:5c:ae:79:b6:
8c:d9:7f:38:ae:3a:dd:93:bf:09:fe:1e:f9:b9:a0:7d:f9:71:
64:6a:7c:bd:8a:1c:47:fe:67:9d:82:80:cd:4f:73:6c:00:78:
3d:8a:fe:2b:55:d9:b8:74:df:99:bb:4d:42:dd:77:e5:a3:a7:
66:84:cf:c8:2a:47:41:d9:b1:7a:25:50:3b:bd:7b:a0:2d:ef:
22:bc:02:d6:7b:2b:31:82:c1:4f:20:6d:74:8b:6b:ee:c4:c2:
66:6b:f6:73:05:e0:91:c5:53:e5:e3:dc:cb:07:e0:09:ca:27:
2d:05:9c:14:81:c3:cf:6c:da:0e:f3:12:ec:ec:a4:15:5b:2c:
11:e1:71:78:ae:28:80:70:0a:95:85:76:75:27:41:b4:14:42:
e0:2d:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:58 2024 by rpki-client on console-ams.rpki-client.org