Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/uD2FuqzUelU5gTRSqA2o22_SSFw.roa
File: uD2FuqzUelU5gTRSqA2o22_SSFw.roa (raw, json)
Hash identifier: eRxnEb8uLld86S1PcUKUHebZsExzZW2ji1vnxtSGza8=
Subject key identifier: B8:3D:85:BA:AC:D4:7A:55:39:81:34:52:A8:0D:A8:DB:6F:D2:48:5C
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 018D1DF76FB241BD5F9950F2576BA07FEBE6
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/uD2FuqzUelU5gTRSqA2o22_SSFw.roa
Signing time: Thu 18 Jan 2024 19:06:11 +0000
ROA not before: Thu 18 Jan 2024 19:06:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39122
IP address blocks: 46.22.128.0/20 maxlen: 20
78.153.192.0/19 maxlen: 24
81.17.240.0/20 maxlen: 24
91.197.234.0/23 maxlen: 23
176.52.222.0/23 maxlen: 23
185.2.64.0/22 maxlen: 22
185.97.236.0/22 maxlen: 22
185.206.192.0/22 maxlen: 22
185.209.164.0/22 maxlen: 22
194.36.58.0/23 maxlen: 23
194.36.64.0/23 maxlen: 23
200.69.8.0/21 maxlen: 21
2a01:a8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jan 2024 13:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:f7:6f:b2:41:bd:5f:99:50:f2:57:6b:a0:7f:eb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Jan 18 19:06:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b83d85baacd47a5539813452a80da8db6fd2485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:0a:42:30:fd:0c:2e:cf:e0:33:a6:ae:eb:
ab:7f:56:72:f0:2d:d3:b4:09:e6:c2:b4:82:72:6d:
4d:37:1e:a1:35:84:0b:1b:a5:7e:c4:d9:51:d4:53:
6c:f0:fa:4a:3e:1b:b3:48:e4:b0:e9:25:6d:49:a1:
49:59:91:52:1d:f6:6c:44:13:46:4f:b7:d5:b9:8a:
18:04:de:b8:f2:8d:88:62:f0:3c:49:83:2d:30:0e:
85:46:30:e6:e2:06:45:8b:da:2d:19:36:7e:0c:5e:
c3:38:1d:1b:39:f4:e0:91:42:e7:e8:5e:ec:8a:a1:
69:3b:f5:6d:3c:33:f8:c8:d0:25:a8:1e:3e:be:ec:
57:e5:5d:e5:62:7a:dc:9b:44:d6:d1:40:69:53:17:
b8:65:64:36:54:ee:5f:73:52:65:db:ac:24:2d:de:
6f:3e:d3:3f:49:c7:8a:02:95:a6:9b:4c:0c:c6:a8:
82:90:18:64:bb:4d:ad:f2:ee:10:8a:14:88:f8:d2:
cb:ae:42:07:9e:53:af:9b:34:65:81:5e:9f:81:e3:
dd:10:60:b5:52:99:d9:7c:73:c1:ed:ab:5d:b7:0b:
28:3e:e9:be:1a:8d:e1:94:e9:7d:be:53:dc:37:f0:
32:63:89:be:67:99:ef:9b:95:0c:5f:c3:38:18:c2:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:85:BA:AC:D4:7A:55:39:81:34:52:A8:0D:A8:DB:6F:D2:48:5C
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/uD2FuqzUelU5gTRSqA2o22_SSFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.128.0/20
78.153.192.0/19
81.17.240.0/20
91.197.234.0/23
176.52.222.0/23
185.2.64.0/22
185.97.236.0/22
185.206.192.0/22
185.209.164.0/22
194.36.58.0/23
194.36.64.0/23
200.69.8.0/21
IPv6:
2a01:a8::/32
Signature Algorithm: sha256WithRSAEncryption
90:d1:3d:83:72:68:f7:be:b6:a0:97:f9:1d:8c:51:08:6c:ef:
ca:95:b7:ed:5d:ec:25:4f:19:42:7a:89:84:51:f0:d2:02:4b:
bd:a1:b4:18:88:c7:b2:28:2e:e1:ea:a1:fe:98:d5:ce:de:0b:
24:b8:97:03:55:e7:b7:3e:04:d1:a5:d5:44:b2:2f:f8:d1:5b:
f2:a9:d9:fe:95:d2:c9:32:3d:63:13:45:81:47:f8:a5:09:f1:
e8:47:9c:23:12:49:10:85:48:34:b3:9b:69:60:ca:a6:fb:f5:
c8:34:70:94:9e:27:e9:71:a9:63:b7:29:c0:a5:11:3a:a1:ea:
5e:1d:fb:d5:90:f6:04:53:44:c0:a5:d7:62:52:cd:57:dd:40:
23:1d:4a:b4:b2:b5:54:7c:57:bb:58:7f:12:ad:4f:04:de:bc:
76:b1:2e:fc:62:a5:7d:1e:bb:64:1c:fb:20:84:d0:17:da:5c:
43:43:29:75:49:c9:2a:85:d7:9a:78:a8:03:6c:cc:98:1d:09:
3a:64:5f:41:00:67:be:da:43:ba:82:7c:69:1a:df:80:14:1c:
d1:50:20:21:73:26:a5:2b:47:74:0a:9c:bf:3b:36:86:10:68:
59:d5:ee:91:c4:dc:3b:0d:87:06:16:37:b6:cf:25:18:be:59:
86:57:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 17:52:30 2024 by rpki-client on console-ams.rpki-client.org