Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/PoaR5pU9qrvKsAzGRLAm4ZS3GbU.roa
File: PoaR5pU9qrvKsAzGRLAm4ZS3GbU.roa (raw, json)
Hash identifier: fFB+F9mg3PGquaD0wnpjN7Uza+exWvgSZL9ibVvwe3E=
Subject key identifier: 3E:86:91:E6:95:3D:AA:BB:CA:B0:0C:C6:44:B0:26:E1:94:B7:19:B5
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 01856E2F80CCFCEC880AEDCEDE2E977E91C6
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/PoaR5pU9qrvKsAzGRLAm4ZS3GbU.roa
Signing time: Sun 01 Jan 2023 16:34:44 +0000
ROA not before: Sun 01 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60728
IP address blocks: 185.22.53.0/24 maxlen: 24
185.22.52.0/22 maxlen: 22
185.22.52.0/24 maxlen: 24
185.22.55.0/24 maxlen: 24
185.22.54.0/24 maxlen: 24
2a04:1d40::/32 maxlen: 32
2a04:1d43::/32 maxlen: 32
2a04:1d45::/32 maxlen: 32
2a04:1d40::/29 maxlen: 29
2a04:1d42::/32 maxlen: 32
2a04:1d46::/32 maxlen: 32
2a04:1d47::/32 maxlen: 32
2a04:1d41::/32 maxlen: 32
2a04:1d44::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:80:cc:fc:ec:88:0a:ed:ce:de:2e:97:7e:91:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e8691e6953daabbcab00cc644b026e194b719b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:c2:43:82:3d:6f:ca:57:8a:2a:4d:a7:db:
f2:65:f2:de:29:4a:5a:d7:a5:a5:bc:86:ab:f1:3c:
e7:77:1d:50:6f:45:b8:14:71:51:eb:cf:25:86:8a:
8d:92:c2:21:17:d6:22:74:37:33:69:3a:25:91:37:
73:fa:49:0a:cb:b1:7f:67:96:4d:49:18:5d:85:e8:
36:1a:f2:10:d1:ae:24:18:50:16:16:be:f0:a2:2a:
19:a2:86:58:19:1c:ad:c6:06:37:94:76:3d:3f:8e:
6e:16:d7:ee:df:e1:c4:b1:b7:8d:7c:e8:0b:8e:43:
18:9c:1d:38:de:79:0f:b3:7f:3d:38:f8:8a:ff:32:
db:6b:33:cd:59:50:60:45:2a:ee:15:30:19:62:7e:
6c:a9:c9:d1:01:b5:cd:04:4c:57:bb:c2:65:41:7b:
bc:eb:62:84:90:1f:32:cf:0f:3d:dd:c7:6c:58:d4:
c5:d2:08:bd:86:7c:6c:48:16:83:18:a1:5a:b7:98:
53:0e:b3:42:64:25:d9:db:f2:0b:6e:bf:0b:cf:fe:
a9:e0:d3:8c:37:ef:38:b9:58:87:fe:20:cf:b2:74:
21:39:c9:0d:5f:4a:75:07:2b:7d:4b:87:64:c1:80:
5a:14:4a:35:05:61:a4:d5:f5:49:41:14:0f:31:e9:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:91:E6:95:3D:AA:BB:CA:B0:0C:C6:44:B0:26:E1:94:B7:19:B5
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/PoaR5pU9qrvKsAzGRLAm4ZS3GbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.52.0/22
IPv6:
2a04:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
72:7f:c7:25:00:f5:b1:bc:5f:48:35:6f:da:f0:55:c1:3c:7d:
b8:dc:c4:78:55:16:7f:4c:c3:cc:6b:6c:34:77:01:26:38:2e:
ad:85:82:90:79:19:9a:92:09:5b:16:a5:f1:90:6f:68:76:76:
6b:7d:c6:02:05:54:69:44:1d:29:07:b0:bc:9c:25:a8:3f:ca:
29:78:8e:00:67:fb:a8:bf:18:8c:2f:55:bf:07:c8:85:13:27:
13:6b:b3:69:ce:59:ed:5c:9b:23:dd:b1:7a:5d:62:c5:9d:48:
79:d3:16:97:99:48:b4:43:91:c1:b7:57:95:4c:7e:eb:6f:af:
b4:ed:8b:32:75:40:dc:2a:97:3d:16:54:73:7e:b0:de:e9:56:
d6:c7:c8:6b:88:6b:37:d8:78:91:6e:8a:77:6b:23:d4:61:12:
d7:90:97:f0:21:43:f5:33:12:69:b5:92:ab:c2:19:28:c6:3b:
2a:8a:da:03:11:b8:e5:8c:6d:0b:69:26:ef:fd:81:8b:2d:1d:
bf:ad:d1:68:af:1d:c6:df:b9:c6:6b:da:71:ee:73:9f:b0:14:
4c:a9:df:57:98:c8:76:45:74:b5:c3:94:50:05:d9:50:aa:f4:
30:4e:66:f0:5f:97:8b:70:94:74:21:36:fd:1b:c2:f9:c4:1a:
ed:0f:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:52 2024 by rpki-client on console-fra.rpki-client.org