Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/mSWp2RwaIN5BHf9ds3cbIiFYAQE.roa
File: mSWp2RwaIN5BHf9ds3cbIiFYAQE.roa (raw, json)
Hash identifier: roI3oiillu6Q/R9/nm86DKBVvYv1uZWpKaWwXGsPkOw=
Subject key identifier: 99:25:A9:D9:1C:1A:20:DE:41:1D:FF:5D:B3:77:1B:22:21:58:01:01
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 018CCA2B3261E34B54420DF86A9BB1455256
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/mSWp2RwaIN5BHf9ds3cbIiFYAQE.roa
Signing time: Tue 02 Jan 2024 12:34:37 +0000
ROA not before: Tue 02 Jan 2024 12:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6735
IP address blocks: 62.68.0.0/19 maxlen: 19
5.252.124.0/22 maxlen: 22
45.87.16.0/22 maxlen: 22
195.245.0.0/18 maxlen: 18
185.218.168.0/22 maxlen: 22
2a09:48c0::/29 maxlen: 29
2a0e:ed80::/29 maxlen: 29
2a0f:8040::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 May 2024 15:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:32:61:e3:4b:54:42:0d:f8:6a:9b:b1:45:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: Jan 2 12:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9925a9d91c1a20de411dff5db3771b2221580101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:a0:c4:d3:79:1b:9e:07:7b:38:f1:6f:6e:
f4:14:7c:9b:74:d5:a9:7d:d5:59:98:16:bd:d2:96:
46:81:73:a3:43:41:8b:db:d4:d2:51:20:24:da:07:
b4:bb:be:f8:2b:e9:aa:9d:52:71:eb:fe:ea:25:10:
4a:d8:33:4d:87:aa:52:3c:cf:1b:79:48:99:7c:f0:
3f:2a:0c:21:a2:89:2f:19:07:39:dc:13:9a:f9:8f:
e4:b9:7d:42:4b:b0:19:6f:6e:e3:17:16:c6:fb:8c:
7b:14:b6:54:84:bf:7f:a3:00:f5:18:b9:e8:4e:82:
a7:50:87:2b:09:78:cd:bc:86:7c:de:8b:3d:20:13:
ac:26:74:2e:94:18:5f:2b:1d:0c:97:9c:94:cb:42:
91:47:6b:ec:2c:91:15:7e:7e:08:3c:9a:c6:8d:c5:
06:77:14:58:40:62:2d:60:71:f1:0b:28:3a:73:a5:
04:9f:2f:13:c7:50:e7:bf:58:74:57:e1:38:65:c7:
aa:48:07:89:0b:fe:c5:5a:7e:27:af:db:21:16:05:
e2:42:ef:0b:e1:b4:79:5c:9a:f4:2c:a9:67:ab:89:
fd:81:a0:f9:cf:db:8d:4d:ae:a0:f8:a1:e6:af:eb:
af:d0:15:c5:3e:0d:8c:66:d0:55:0d:fc:96:7c:ad:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:25:A9:D9:1C:1A:20:DE:41:1D:FF:5D:B3:77:1B:22:21:58:01:01
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/mSWp2RwaIN5BHf9ds3cbIiFYAQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.124.0/22
45.87.16.0/22
62.68.0.0/19
185.218.168.0/22
195.245.0.0/18
IPv6:
2a09:48c0::/29
2a0e:ed80::/29
2a0f:8040::/29
Signature Algorithm: sha256WithRSAEncryption
55:2e:26:e2:6d:26:59:23:c4:e7:75:ee:29:14:d4:1c:e9:07:
80:95:3b:40:8d:5a:2e:8b:2f:b5:44:7e:5f:75:0b:a1:ae:f1:
51:8c:15:bc:16:71:a9:4c:4a:80:83:52:0a:6e:64:45:3e:de:
83:53:17:87:3f:32:4c:38:4e:83:0d:11:5e:a0:40:00:77:fa:
65:da:7a:d2:c9:e0:ff:2e:81:9e:9c:74:63:fa:61:48:37:8c:
c3:6b:eb:40:f0:c6:b1:d0:f3:c7:66:01:2b:a3:2c:2c:54:ff:
18:cf:ef:04:31:0b:be:25:12:5a:0c:90:11:12:4d:84:c7:7d:
40:9c:f5:6c:67:1d:8c:55:43:e2:4b:b4:27:b1:81:c9:e1:c1:
6f:49:62:d2:e7:a3:2a:d6:d9:fa:d9:53:d2:41:6b:06:97:84:
be:08:a5:0b:e0:9e:6a:5f:55:b5:c3:53:ea:b2:ae:e0:37:19:
64:40:0e:09:1f:b5:83:c4:c5:47:01:bf:cf:0f:ad:44:23:6f:
60:f7:35:71:c6:3b:38:2b:e9:3a:41:e8:76:f2:0d:9b:68:12:
83:39:cf:37:7c:30:b2:eb:9f:f5:e5:ed:bf:1d:85:28:f9:76:
79:7f:d5:40:b4:8f:bd:3c:2d:25:20:8d:7f:33:c0:91:88:d6:
3e:3b:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:59 2024 by rpki-client on console-ams.rpki-client.org