Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/22jlHryKoZXqhJtZESVOV7hUPwA.roa
File: 22jlHryKoZXqhJtZESVOV7hUPwA.roa (raw, json)
Hash identifier: CeeOLiWZ9mSV/Yy5shnXLY8HUA/IwcNefvZXMPG/0bo=
Subject key identifier: DB:68:E5:1E:BC:8A:A1:95:EA:84:9B:59:11:25:4E:57:B8:54:3F:00
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 018BF9577A661CB5059EC6A74E70D4D1A090
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/22jlHryKoZXqhJtZESVOV7hUPwA.roa
Signing time: Wed 22 Nov 2023 23:22:21 +0000
ROA not before: Wed 22 Nov 2023 23:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60404
IP address blocks: 5.255.96.0/19 maxlen: 19
192.76.163.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
150.129.8.0/22 maxlen: 22
150.129.8.0/24 maxlen: 24
103.251.164.0/22 maxlen: 22
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
185.31.172.0/22 maxlen: 22
5.2.64.0/20 maxlen: 20
5.2.67.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a0f:6bc0::/29 maxlen: 29
2a04:52c0:5001::/48 maxlen: 64
2a04:52c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f9:57:7a:66:1c:b5:05:9e:c6:a7:4e:70:d4:d1:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Nov 22 23:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db68e51ebc8aa195ea849b5911254e57b8543f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:4c:0d:5f:18:da:65:ce:b5:e7:60:70:a2:
6b:c1:13:d7:59:7d:f1:e6:6d:f2:0c:67:67:3c:1a:
bb:b0:6e:5e:7b:cd:8b:2b:b2:19:00:18:b4:bb:c3:
02:0f:0f:0b:8e:ea:34:6c:87:92:c5:c6:09:41:c1:
4e:97:15:d8:ef:42:ce:ec:0a:3c:1c:dc:f7:59:71:
a8:9d:01:53:66:0b:5a:4f:ec:3c:59:fc:fc:22:90:
7a:54:59:ce:a0:88:6d:07:30:84:e8:73:7b:52:6c:
82:1d:83:52:40:3c:fc:b9:2a:8e:aa:7d:81:9e:6c:
66:12:bf:8a:3e:2b:fe:5b:4c:9c:1b:e8:3b:b7:e0:
7e:50:9d:c8:16:03:d1:85:e3:bf:8e:a7:0d:4f:1c:
06:88:e9:2f:03:3d:0e:72:0c:af:15:fc:c6:61:2e:
9c:f3:f5:22:a2:a9:b8:f8:ed:bb:60:fa:98:21:5a:
7e:84:2f:5d:4e:db:01:61:23:15:27:9d:ab:2e:cf:
0e:06:78:5c:7a:25:a2:8e:96:7f:b1:c4:5c:70:78:
aa:37:dd:06:08:af:5a:92:23:a6:15:91:b3:bb:fe:
43:2d:02:19:3d:ad:92:95:f5:10:f8:16:39:30:b2:
6c:e1:2c:0c:c4:23:bc:33:7b:f8:9f:76:3e:11:72:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:E5:1E:BC:8A:A1:95:EA:84:9B:59:11:25:4E:57:B8:54:3F:00
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/22jlHryKoZXqhJtZESVOV7hUPwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
61:02:5b:90:95:1b:ab:4d:95:67:61:37:15:f3:7e:b6:b5:6b:
5e:08:00:c2:01:ac:7b:38:cc:9b:74:f6:64:a3:fb:43:6d:b0:
4d:df:f0:ae:bf:e5:2e:52:e1:73:e2:86:f0:07:e9:46:e8:01:
6c:41:f9:a7:30:c5:97:78:00:71:6d:3b:32:a3:fd:13:c1:02:
cc:ba:47:69:8e:2d:24:16:06:82:a6:8a:61:3a:a9:a7:2c:46:
31:06:fd:cd:21:3f:a6:d5:bf:bd:0c:dc:ec:e0:3c:63:c3:e8:
93:e0:49:38:d8:b5:dd:71:ef:ac:10:8d:a7:42:93:b7:36:d1:
47:86:f5:d8:5f:5d:e2:17:04:e9:0c:c5:24:77:75:05:26:06:
ec:a3:6d:52:89:b3:9e:0a:81:a3:53:b0:68:6a:a1:03:b6:fe:
8f:c8:24:6e:f0:16:86:0a:ee:72:24:b3:b3:6d:f7:0a:33:e8:
8d:20:7e:5f:47:79:65:4d:1d:ef:6e:9c:ac:2c:e3:d2:68:d0:
25:60:7f:04:2b:54:03:a3:0f:4e:e3:ba:7b:6e:4d:66:88:1a:
5a:d3:e1:ac:71:4c:22:32:c1:29:28:a9:df:5a:ce:f5:77:10:
b3:27:13:7a:cd:fc:cd:4d:da:3f:dc:60:13:23:c6:f8:85:3b:
b4:8a:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:20 2024 by rpki-client on console-ams.rpki-client.org