Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/2MYf0Ub21aPKteoIp65iYJOn9nU.roa
File: 2MYf0Ub21aPKteoIp65iYJOn9nU.roa (raw, json)
Hash identifier: 2HOsqlah0AfcXtI/87um1CY4B+nGvP1mXlv6UVD5v0A=
Subject key identifier: D8:C6:1F:D1:46:F6:D5:A3:CA:B5:EA:08:A7:AE:62:60:93:A7:F6:75
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01889F2C79633B55779D8884874980750FEB
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/2MYf0Ub21aPKteoIp65iYJOn9nU.roa
Signing time: Fri 09 Jun 2023 08:01:11 +0000
ROA not before: Fri 09 Jun 2023 08:01:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47626
IP address blocks: 193.7.216.0/22 maxlen: 22
5.180.240.0/22 maxlen: 22
176.96.190.0/23 maxlen: 24
176.96.189.0/24 maxlen: 24
128.0.94.0/24 maxlen: 24
78.24.100.0/22 maxlen: 22
91.208.35.0/24 maxlen: 24
91.222.120.0/22 maxlen: 24
188.93.64.0/22 maxlen: 22
2a05:9c00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:2c:79:63:3b:55:77:9d:88:84:87:49:80:75:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 9 08:01:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8c61fd146f6d5a3cab5ea08a7ae626093a7f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:56:b7:9e:d1:4d:25:35:00:8c:3a:fd:a8:
8b:b8:73:bc:f7:93:11:80:b0:24:d3:58:90:ed:cb:
39:94:13:d5:25:26:39:32:cf:29:5c:44:a9:ca:69:
ee:35:cf:e7:a5:5d:ab:3f:47:d3:90:ab:4d:0f:90:
08:11:9b:03:cc:aa:15:9a:b0:98:9d:70:80:cb:5a:
78:d7:83:8e:c4:47:ea:50:16:b2:a5:31:be:85:bf:
b5:7c:ad:c5:7d:c4:43:ed:8a:b2:c3:67:98:6c:0f:
12:81:6d:a8:93:36:c1:92:1b:a9:76:d4:e5:01:c1:
34:25:58:c3:66:f8:1e:be:5f:cd:4c:e5:cb:47:25:
66:a8:d5:3f:f3:a9:ae:f8:ca:03:f1:3d:bb:58:ea:
06:70:97:38:64:9b:31:54:89:8d:c6:17:b7:d3:91:
3d:c8:3f:5b:80:9d:24:ad:1b:01:fb:4c:59:af:88:
5a:e8:c2:25:59:8f:16:d6:36:25:48:e3:27:9e:88:
a5:ff:05:d9:c0:d2:5c:e9:54:fc:9b:49:c4:19:bd:
ab:93:31:d3:19:2d:e3:79:23:a0:77:2d:12:01:51:
a7:bf:a4:fa:07:b6:01:48:ea:c9:7c:48:8d:06:33:
cd:10:2a:f1:3f:5d:7d:9c:5c:2e:df:22:ac:97:f4:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:1F:D1:46:F6:D5:A3:CA:B5:EA:08:A7:AE:62:60:93:A7:F6:75
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/2MYf0Ub21aPKteoIp65iYJOn9nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.240.0/22
78.24.100.0/22
91.208.35.0/24
91.222.120.0/22
128.0.94.0/24
176.96.189.0-176.96.191.255
188.93.64.0/22
193.7.216.0/22
IPv6:
2a05:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
93:9d:bb:7f:cb:bc:4e:f3:a3:c2:97:ff:a9:2b:2f:f2:60:33:
47:ec:c2:2e:50:d2:f8:3b:0f:84:2e:12:83:89:07:a2:b2:7f:
c4:31:60:72:1c:c1:4a:4b:a7:d4:ca:8a:1d:50:48:90:b6:fa:
ee:4a:e8:ba:15:6e:42:c9:49:ce:21:49:aa:7a:b1:0f:07:3f:
e4:1c:88:e8:92:73:17:39:bd:14:7e:59:3a:6a:5e:54:20:ec:
94:e8:f7:89:9f:b6:d2:34:77:9b:e8:b8:85:3e:99:c8:62:84:
d4:f7:96:b9:f1:13:96:da:38:db:ee:39:3c:f4:e7:a8:19:fa:
0c:42:b5:40:79:f4:e4:ee:6a:6f:f1:25:7d:93:a7:52:4d:a4:
f7:bf:ae:51:0c:ca:a0:c9:bf:42:65:b2:20:38:1c:c8:24:87:
35:8e:05:9e:85:c3:9f:d0:b3:52:b3:19:44:ec:39:6f:7c:92:
ac:fe:2b:7d:02:b1:ad:7d:e1:0f:7c:a4:86:38:04:ae:e3:0d:
11:8c:e6:63:fa:f3:68:d0:3d:e0:5e:65:8d:a7:58:a1:ff:b5:
8e:23:19:ce:21:cf:5b:6d:ea:0c:9e:b1:55:56:0d:30:56:d6:
74:f9:30:d2:da:f9:fc:49:7c:e7:0f:21:9e:75:ed:8a:f0:3b:
2b:44:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 15:59:05 2023 by rpki-client on console-ams.rpki-client.org