Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1R2BOn2URhWpvQPoKwAWDUH1Qaw.roa
File: 1R2BOn2URhWpvQPoKwAWDUH1Qaw.roa (raw, json)
Hash identifier: qiHnrhqwfZu9MTw7/riowyTEimauobdNJB49JUS1ynY=
Subject key identifier: D5:1D:81:3A:7D:94:46:15:A9:BD:03:E8:2B:00:16:0D:41:F5:41:AC
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A99507AE1DD8F5DCD0740A3512A0E0F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1R2BOn2URhWpvQPoKwAWDUH1Qaw.roa
Signing time: Sat 25 Mar 2023 21:07:47 +0000
ROA not before: Sat 25 Mar 2023 21:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 178.20.28.0/22 maxlen: 24
45.159.21.0/24 maxlen: 24
45.159.22.0/24 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
77.83.24.0/22 maxlen: 24
194.99.26.0/24 maxlen: 24
193.151.190.0/23 maxlen: 24
193.151.189.0/24 maxlen: 24
83.97.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:99:50:7a:e1:dd:8f:5d:cd:07:40:a3:51:2a:0e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 21:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d51d813a7d944615a9bd03e82b00160d41f541ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:bd:ab:e6:21:c4:6c:c7:40:03:2b:90:7a:
07:f4:3b:04:8a:ce:70:60:30:87:8d:54:56:f8:cb:
51:02:4f:50:fe:de:66:a2:c6:1b:b0:49:24:48:c4:
26:3a:f0:d5:1f:c2:41:cf:a4:cd:3a:7c:e2:44:eb:
51:86:4f:28:98:16:64:f6:45:3b:71:c3:7f:6e:d0:
cb:1b:4a:c1:1d:9f:ba:72:4f:73:34:4c:d0:7e:4a:
ec:1a:92:68:60:df:f9:c2:59:2c:ad:8f:f1:70:c6:
cc:af:fd:68:f9:71:7d:8e:fe:b6:3b:01:9c:a2:fd:
aa:4b:75:b9:f6:32:3a:2c:b6:51:5c:19:0c:6c:78:
bd:06:9f:34:60:7d:6b:08:fa:27:b3:73:8c:75:0b:
6d:e1:2b:a9:85:ab:da:8f:43:38:02:c1:c9:8b:5d:
ef:8f:6d:6e:1f:99:0a:f9:9c:64:a6:6d:57:77:6a:
9d:60:a0:00:c4:eb:95:a6:14:29:1c:a2:e5:a8:4d:
4a:6a:f4:26:10:cd:d3:dd:65:c4:ec:9b:f0:0f:e4:
9a:69:86:3a:c3:86:82:e4:c1:03:4e:78:c0:a3:ec:
44:c6:c1:51:46:a1:f9:45:c4:42:9e:f7:0c:04:89:
f0:10:fa:e3:70:10:90:72:f5:fb:b3:2c:e3:0c:ed:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:81:3A:7D:94:46:15:A9:BD:03:E8:2B:00:16:0D:41:F5:41:AC
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1R2BOn2URhWpvQPoKwAWDUH1Qaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.21.0-45.159.22.255
77.83.24.0/22
83.97.116.0/22
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
193.151.189.0-193.151.191.255
194.99.24.0/24
194.99.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9e:41:85:9e:ae:dc:14:e9:d4:a1:00:67:0b:c8:14:66:ee:
05:a2:88:42:31:17:27:60:bb:86:77:4d:7c:d4:6f:fc:a1:bd:
a5:1d:d7:f5:b5:31:a5:2b:4e:23:30:dc:5c:aa:ed:d9:71:70:
05:6e:a1:09:3b:eb:26:f9:32:be:fd:74:7c:80:63:ac:54:3c:
97:db:82:96:c1:14:93:54:7a:f3:19:6d:94:15:fb:4c:02:bc:
62:ac:7f:69:51:8a:a2:22:77:3a:49:40:b5:79:b7:4b:dd:f7:
38:8b:50:bb:ba:c4:c5:79:3e:0a:3f:86:8b:aa:1d:f0:05:01:
ce:3b:ea:07:09:e2:9a:d8:fd:8a:50:a9:8d:a8:79:ce:f4:36:
c4:4c:1f:6f:d0:f0:47:98:30:d6:bd:7f:3d:13:a9:58:6e:b9:
11:aa:10:d4:36:41:e5:0e:39:3b:f7:77:00:51:23:cd:ad:41:
fc:aa:eb:7d:b4:7b:bd:7a:90:2c:fe:f1:c0:80:9e:6f:ef:f8:
41:a2:c0:75:46:cc:a7:86:e7:21:f4:f1:e8:22:78:3d:84:dd:
a9:b7:22:b1:47:8e:4c:25:e2:a7:53:b3:db:90:bc:42:a4:77:
c9:0e:4d:98:0d:83:79:c7:e4:bd:c0:16:1a:0a:57:b6:41:f5:
8c:8a:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org