Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Wr2AjbSn_j2Gsfqbib7N16PiKO0.roa
File: Wr2AjbSn_j2Gsfqbib7N16PiKO0.roa (raw, json)
Hash identifier: dY1gV811RD1bQSgOZxjbaqs84HYMza68pEbVX//bafs=
Subject key identifier: 5A:BD:80:8D:B4:A7:FE:3D:86:B1:FA:9B:89:BE:CD:D7:A3:E2:28:ED
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0188341737004501B6C80974125808CB3D57
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Wr2AjbSn_j2Gsfqbib7N16PiKO0.roa
Signing time: Fri 19 May 2023 12:58:36 +0000
ROA not before: Fri 19 May 2023 12:58:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 37.221.76.0/22 maxlen: 22
62.182.32.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
5.133.100.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
31.40.204.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
194.169.92.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
194.93.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 May 2023 17:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:17:37:00:45:01:b6:c8:09:74:12:58:08:cb:3d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: May 19 12:58:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abd808db4a7fe3d86b1fa9b89becdd7a3e228ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:ab:4e:44:51:a6:7e:57:ba:d9:3d:2b:18:
e9:62:d4:06:46:1a:2f:89:05:53:a7:6e:97:5c:4e:
28:f7:2c:a3:b3:b6:5d:42:15:5f:b6:6a:29:8e:ac:
bd:94:6d:b2:8b:20:22:3d:16:59:5a:54:cc:84:ef:
45:9b:7a:23:b5:40:78:ee:1e:80:fa:e6:21:02:1b:
b6:f7:bd:28:db:f3:2f:cf:61:04:88:1f:da:fc:4d:
49:74:07:a3:08:46:a0:a4:32:4c:34:62:ea:b5:8b:
0a:0e:29:99:75:2e:bf:60:5c:42:80:24:a7:0b:d2:
8c:b7:b2:13:b9:26:5e:6d:ad:e6:72:b4:68:d5:e5:
53:73:2d:4a:ad:da:47:68:79:4c:34:f5:bd:92:6e:
55:6f:c7:14:d1:30:4f:a5:ae:6f:42:44:80:80:c8:
be:5f:91:7c:e6:6c:80:68:e1:c5:9c:b3:5b:9b:64:
da:af:67:37:0e:b8:f0:f2:00:ec:9d:32:94:51:0e:
b1:9a:e2:84:64:22:d8:71:a0:f2:8c:af:61:bd:2d:
aa:7d:02:3e:9d:8e:c7:bd:b5:99:bd:1b:61:fb:95:
4f:2d:56:2f:13:f6:96:c6:b7:7f:51:bb:4f:ce:7d:
69:fc:13:d9:d0:4c:9e:3a:c0:37:e8:a1:76:f3:99:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BD:80:8D:B4:A7:FE:3D:86:B1:FA:9B:89:BE:CD:D7:A3:E2:28:ED
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Wr2AjbSn_j2Gsfqbib7N16PiKO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
31.40.204.0/22
37.221.76.0/22
62.182.32.0/22
84.54.0.0/22
85.235.72.0/22
139.28.48.0/22
176.96.128.0/22
193.38.44.0/22
194.93.60.0/22
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:7b:f1:5d:83:50:58:d5:11:ed:c4:4b:97:e1:e1:ba:c7:91:
71:0b:f4:e9:ff:14:a3:d0:5d:10:36:87:f8:d2:5e:d0:b7:83:
b8:6f:5c:f7:52:2f:a4:1b:07:38:ae:f5:10:12:4e:93:78:f3:
a9:9b:e9:dd:d5:c8:a2:86:50:3d:ff:e6:71:2a:f3:38:08:ed:
10:06:5c:f7:32:13:61:ba:41:51:49:4e:14:e7:4b:fb:8c:b5:
ad:13:c0:c0:f8:72:25:1b:b8:ea:c4:cc:2a:c2:5b:8e:8a:01:
42:d1:00:9e:6d:d2:9f:01:43:17:cd:8b:7e:61:2d:a3:c6:38:
54:17:a6:a4:39:ba:34:cf:70:63:3e:b2:4e:f2:e4:a7:2f:fd:
20:e9:d6:2c:7d:9d:f4:2a:32:7b:ef:2f:9b:ae:e0:cf:81:34:
6e:99:7f:e5:56:7c:19:9d:ef:8c:27:ba:6e:c7:e9:ab:96:06:
d1:79:5f:35:f0:63:66:8a:5e:13:05:0d:62:57:b1:73:8d:32:
17:4c:72:c7:18:46:c1:d1:78:a0:4e:59:ce:93:81:53:5e:d6:
40:72:75:e7:fe:2c:65:3a:8e:f9:41:54:6b:ae:aa:f2:89:9e:
63:54:c5:07:fe:e6:73:85:85:e0:aa:1d:ad:40:72:a7:9e:6f:
0e:f0:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org