Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/pW-UX2hJTQtH05Sae3UMmq6v4U0.roa
File: pW-UX2hJTQtH05Sae3UMmq6v4U0.roa (raw, json)
Hash identifier: H3KTyTMGBtYC5tCiY5KjD+IAGvk3I+xMVuGNbJqbTxo=
Subject key identifier: A5:6F:94:5F:68:49:4D:0B:47:D3:94:9A:7B:75:0C:9A:AE:AF:E1:4D
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0187F723674C41ED47F6A1DDFAA9A5B976C9
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/pW-UX2hJTQtH05Sae3UMmq6v4U0.roa
Signing time: Sun 07 May 2023 16:55:05 +0000
ROA not before: Sun 07 May 2023 16:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 24
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 24
2.188.40.0/21 maxlen: 24
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.160.0/21 maxlen: 24
2.188.176.0/23 maxlen: 23
2.188.192.0/19 maxlen: 24
2.189.160.0/21 maxlen: 24
2.189.168.0/21 maxlen: 24
2.189.80.0/21 maxlen: 24
2.189.88.0/21 maxlen: 24
2.188.72.0/22 maxlen: 24
2.189.48.0/21 maxlen: 24
2.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 May 2023 10:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:23:67:4c:41:ed:47:f6:a1:dd:fa:a9:a5:b9:76:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 7 16:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a56f945f68494d0b47d3949a7b750c9aaeafe14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:55:f1:47:f3:4a:38:13:85:0c:e6:e1:be:
73:0e:63:4d:09:3b:fb:c0:23:b7:f5:f9:57:b4:d7:
5c:a0:bf:59:a8:e9:1c:2f:92:57:db:e7:7e:d1:48:
d1:82:cd:51:2d:87:e3:c2:1e:03:6c:88:19:8d:ba:
ea:69:0c:5f:fb:6c:ca:b9:3c:75:e9:fd:3d:21:94:
14:5f:ab:f1:88:6a:67:b3:57:2e:3a:bf:16:94:5e:
78:ec:09:9f:4e:d1:f5:3a:f1:c0:76:d3:34:16:7e:
7a:0f:c5:d6:e0:73:bf:e7:ed:40:f3:72:fa:ea:d1:
0f:e1:8e:3a:d0:09:63:5f:80:18:60:d6:c9:2c:e2:
a6:67:ea:01:33:9f:29:70:bd:ad:01:82:62:46:6f:
77:7b:0e:46:e4:1b:ff:51:fa:0b:4d:14:b2:84:2e:
da:51:e6:a8:d3:ce:f2:3a:c4:eb:b1:05:61:1c:be:
b2:5d:b5:42:70:b6:6a:64:b3:4f:59:54:6c:82:91:
d6:f7:ae:5a:47:fd:ca:2b:d6:39:e8:aa:5b:20:aa:
f6:94:40:98:4b:63:b3:34:f9:27:7d:dd:c9:fb:fe:
44:95:af:a6:33:17:93:b8:ca:9d:4d:96:9a:23:9e:
77:2b:83:14:97:7a:e4:e0:1f:86:9e:32:0d:6a:82:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:94:5F:68:49:4D:0B:47:D3:94:9A:7B:75:0C:9A:AE:AF:E1:4D
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/pW-UX2hJTQtH05Sae3UMmq6v4U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.40.0/21
2.188.72.0/22
2.188.160.0/21
2.188.176.0/23
2.188.192.0/18
2.189.48.0/21
2.189.64.0/22
2.189.80.0/20
2.189.160.0/20
Signature Algorithm: sha256WithRSAEncryption
09:aa:b5:1d:9a:6e:fe:0c:2a:05:bd:94:70:cb:92:1b:b0:53:
27:04:56:b0:9e:18:22:51:e5:f9:79:a0:6c:26:85:ff:52:f3:
3c:a0:17:34:0d:e0:4c:c1:47:8e:fd:7a:e1:01:7f:de:52:1e:
00:b7:f0:1b:7c:8d:51:e6:e4:28:90:dd:2d:33:29:89:66:ce:
e8:34:dc:5c:dd:7d:ec:c9:44:01:63:32:4f:df:e2:84:dc:60:
34:f7:6e:e0:39:59:07:86:a1:d5:8f:a6:56:6c:0b:93:7b:fd:
9f:3f:1a:3c:c7:b7:6d:aa:31:64:c8:df:54:0f:eb:28:12:e3:
8f:aa:c8:dc:a7:8c:7d:c5:00:a2:d6:03:41:4f:7a:be:e4:1a:
28:cc:a4:de:db:98:94:db:13:eb:0c:7f:48:55:40:0e:1b:8b:
c1:2a:1a:1d:d0:8b:dc:2c:57:d8:fd:70:b0:97:08:f2:0a:c3:
15:68:8e:8e:0b:fb:b1:57:e1:d5:72:44:3e:81:13:7d:0e:c7:
32:5c:e8:29:72:f9:3c:a0:90:51:e6:9b:ae:b6:c5:84:f0:38:
c9:1d:58:36:23:a2:07:c1:b7:8f:a1:de:b6:2c:eb:60:68:36:
6a:c4:e2:bf:a1:e8:50:ae:9c:2e:52:8d:7e:98:d8:f8:02:50:
f7:00:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org