Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/r5QtG8lVRnNpC85lDkauEBY3-nI.roa
File: r5QtG8lVRnNpC85lDkauEBY3-nI.roa (raw, json)
Hash identifier: /Xb23GsAQkK8DGrXnRqhKM/cuYrn2TmYJcRL//0nL7c=
Subject key identifier: AF:94:2D:1B:C9:55:46:73:69:0B:CE:65:0E:46:AE:10:16:37:FA:72
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 01856DD434EB33155EA53E5E6C1B072F31B6
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/r5QtG8lVRnNpC85lDkauEBY3-nI.roa
Signing time: Sun 01 Jan 2023 14:55:01 +0000
ROA not before: Sun 01 Jan 2023 14:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51132
IP address blocks: 91.145.16.0/20 maxlen: 20
83.68.224.0/19 maxlen: 19
185.95.160.0/22 maxlen: 22
62.108.192.0/20 maxlen: 20
91.145.0.0/19 maxlen: 19
91.145.0.0/20 maxlen: 20
62.108.208.0/21 maxlen: 21
2a02:eb8::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Nov 2023 09:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:34:eb:33:15:5e:a5:3e:5e:6c:1b:07:2f:31:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jan 1 14:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af942d1bc9554673690bce650e46ae101637fa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:1b:ca:4c:1d:ae:aa:ec:d6:bf:e3:ab:6d:
54:59:8b:3e:86:c3:3c:0d:ac:1b:62:f7:22:32:21:
08:cb:9a:dd:21:04:47:32:bb:43:c9:07:15:b5:f6:
15:bc:9d:54:ca:33:cc:81:2d:68:b3:f5:e1:88:20:
24:00:9f:c2:07:bc:a7:17:94:2c:fe:1a:97:ba:20:
08:31:a9:22:54:5b:5e:6a:09:b0:88:b1:2c:90:63:
3b:40:3d:0d:bf:a5:30:9b:f3:4b:80:d9:d7:b4:45:
f1:19:d3:07:b7:15:4e:60:5b:f3:72:f7:6b:c0:33:
d2:b9:69:8e:ff:36:51:20:42:38:a9:5f:b0:2a:79:
9e:c4:92:82:0b:ef:c5:f6:51:d1:e8:40:1d:1d:57:
cb:8a:38:ee:ab:cb:89:e0:92:f8:8a:be:15:5c:3b:
bc:54:39:77:d3:04:84:54:5d:6a:00:fb:99:d6:ca:
f0:d1:a7:75:05:a7:10:5a:95:91:b1:66:dc:fa:2d:
6e:4f:f8:ff:66:66:d3:4f:f8:9c:ea:76:8b:b3:57:
3b:19:23:5e:5e:4d:03:a0:83:43:2a:f9:a8:7d:7b:
54:80:47:cf:11:7f:9e:01:a7:85:df:76:a9:21:f2:
86:10:94:ad:32:67:8e:40:4b:b1:1e:03:5f:a8:7b:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:2D:1B:C9:55:46:73:69:0B:CE:65:0E:46:AE:10:16:37:FA:72
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/r5QtG8lVRnNpC85lDkauEBY3-nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.192.0-62.108.215.255
83.68.224.0/19
91.145.0.0/19
185.95.160.0/22
IPv6:
2a02:eb8::/29
Signature Algorithm: sha256WithRSAEncryption
4a:cc:dc:6b:ac:1a:4f:b4:3c:0b:07:25:7f:f3:d2:27:3c:2c:
ea:d3:ad:fc:2e:9c:c8:a3:01:2e:85:04:80:28:16:79:c8:03:
82:9b:66:79:fa:19:ea:55:7f:47:ad:51:65:47:bd:07:15:8e:
f2:47:9a:38:46:a5:cd:cf:dd:07:ab:d6:71:bb:fb:96:c1:ca:
db:d3:0c:11:df:87:7a:62:83:b2:ad:cc:2e:3c:3f:f8:39:21:
fd:da:d9:84:82:1c:4a:5e:73:e2:29:f4:e8:87:7e:c9:a8:b9:
c4:99:82:41:8e:c1:9d:0f:2a:93:60:cb:38:97:1d:f1:49:6c:
e0:e4:b0:28:cd:19:88:10:3b:52:7b:88:ae:97:12:c0:70:6e:
d2:ad:d2:d3:79:dc:36:8f:ec:a9:47:8f:b0:59:c1:f0:97:c6:
35:d7:98:eb:94:f7:81:0f:4f:51:6e:3d:3f:50:71:fb:5b:fe:
e3:a9:9c:b7:97:d2:51:5c:cd:24:df:86:68:ff:ca:b1:8d:f8:
76:16:60:5d:26:c1:b5:33:9f:80:1e:d3:ea:fb:8b:2d:b0:68:
97:a3:10:d0:90:b4:6a:d9:c8:2a:c0:d7:b3:73:aa:b8:d5:2e:
25:2d:93:e3:22:8e:59:4b:45:78:06:58:fa:82:50:59:9e:7e:
86:92:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:32 2024 by rpki-client on console-ams.rpki-client.org