Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/A1b7kOJTZ3joJwgVC7Z907ds2ac.roa
File: A1b7kOJTZ3joJwgVC7Z907ds2ac.roa (raw, json)
Hash identifier: SXom3Iqxq0I7jDbksO/0adwn9PcyP59JTADtfE4/jzw=
Subject key identifier: 03:56:FB:90:E2:53:67:78:E8:27:08:15:0B:B6:7D:D3:B7:6C:D9:A7
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019030ECAB85AC21B1F26549C3AF02709A0D
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/A1b7kOJTZ3joJwgVC7Z907ds2ac.roa
Signing time: Wed 19 Jun 2024 14:35:34 +0000
ROA not before: Wed 19 Jun 2024 14:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.18.31.0/24 maxlen: 24
2.20.47.0/24 maxlen: 24
2.20.224.0/20 maxlen: 20
2.20.252.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.22.20.0/23 maxlen: 23
2.22.216.0/22 maxlen: 22
2.22.234.0/24 maxlen: 24
2.23.16.0/20 maxlen: 20
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.101.68.0/22 maxlen: 22
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:9700::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Jun 2024 11:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:ec:ab:85:ac:21:b1:f2:65:49:c3:af:02:70:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jun 19 14:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0356fb90e2536778e82708150bb67dd3b76cd9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:fb:19:af:da:76:ac:da:ea:eb:4e:b7:79:
5a:d6:43:be:92:71:a1:ab:6b:25:60:2d:a1:01:eb:
87:26:63:fd:41:0a:44:48:64:b7:01:76:57:00:fc:
2b:51:b6:7c:92:84:89:96:fb:ae:49:b5:ef:18:84:
ea:8e:6b:e9:42:4c:87:37:53:8a:30:ad:f8:0e:e5:
c6:a4:8a:0a:2c:53:ba:6d:b8:c7:14:02:54:65:a0:
3e:7d:76:37:c1:fa:71:84:60:82:3f:6b:aa:fc:c2:
a0:e6:1d:32:eb:4f:d0:84:0e:96:0c:ac:02:a5:fb:
40:fe:3a:3d:39:7f:72:35:6c:7e:25:72:1a:08:d5:
1d:3c:18:6b:3c:09:be:cd:93:a7:84:ba:f6:43:a8:
07:04:06:16:e5:e5:af:1c:37:91:4e:ce:5c:5a:1c:
86:e9:fa:e2:ca:68:f6:60:45:f0:e0:26:a4:48:33:
bd:89:61:57:6a:45:32:b9:27:7d:84:9b:e4:e0:38:
98:eb:a4:e2:b2:a2:52:ab:c5:e8:b6:1f:4a:24:98:
0f:8a:9d:d8:b0:80:36:19:72:51:42:0d:ac:ce:b2:
61:da:08:fe:ee:84:43:e9:91:3a:86:34:3a:57:75:
7f:8b:61:5d:1f:2a:91:d0:e9:91:93:24:51:89:e4:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:FB:90:E2:53:67:78:E8:27:08:15:0B:B6:7D:D3:B7:6C:D9:A7
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/A1b7kOJTZ3joJwgVC7Z907ds2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.220.0/22
2.18.0.0/22
2.18.31.0/24
2.20.47.0/24
2.20.224.0/20
2.20.252.0/24
2.21.14.0/24
2.22.20.0/23
2.22.216.0/22
2.22.234.0/24
2.23.16.0/20
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.101.68.0/22
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:9700::/48
Signature Algorithm: sha256WithRSAEncryption
86:57:c8:91:42:4c:d2:fc:6e:bb:4c:31:bb:b0:26:1c:0b:44:
38:20:bf:44:bc:d5:13:1b:bb:57:e5:6b:20:02:a0:56:24:8d:
b9:04:6a:de:ed:15:a8:1c:78:b1:3e:28:83:ed:78:cf:6e:23:
92:a2:d3:aa:d2:87:d4:53:1b:3d:df:7f:39:33:d1:ba:83:2b:
47:91:ab:f6:06:3d:1c:f7:83:01:88:ff:de:93:9e:e4:77:e4:
fa:a7:58:2d:7a:87:94:ad:a9:25:51:41:de:59:8b:fe:a1:22:
ba:96:4d:43:fa:08:7a:3b:c9:ad:c8:23:ff:3c:c8:d7:bc:70:
a5:00:7d:3c:7b:2e:a6:0a:e8:e7:b0:f6:4b:b0:81:88:84:94:
be:2c:3f:86:09:dd:4f:98:af:fe:7d:c3:6d:5f:1a:ee:c5:09:
38:23:79:0e:cc:89:ca:62:a0:79:93:15:98:94:d1:fe:ac:f8:
42:93:62:71:96:f1:0b:b4:eb:49:05:9c:44:d8:33:04:9d:66:
38:53:49:9b:25:68:28:0a:d9:12:9c:6b:15:ad:36:44:b4:cc:
74:a4:0c:98:85:35:fd:b2:29:d1:2a:51:8f:06:ee:46:3e:5f:
e9:16:c3:a4:b1:3b:ca:02:ee:cd:94:d0:e5:c8:2f:38:f5:af:
ac:3a:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:45:57 2024 by rpki-client on console-ams.rpki-client.org