Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ipb__P8-LjcsZpCMxPAQNQ-spA4.roa
File: Ipb__P8-LjcsZpCMxPAQNQ-spA4.roa (raw, json)
Hash identifier: d8kk+9J2IGcm3MZO69KXu9vBrxnOv7xPmqA5h+27N7M=
Subject key identifier: 22:96:FF:FC:FF:3E:2E:37:2C:66:90:8C:C4:F0:10:35:0F:AC:A4:0E
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01924C76A48F680C674D12BC8B97D3EBF8F8
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ipb__P8-LjcsZpCMxPAQNQ-spA4.roa
Signing time: Wed 02 Oct 2024 09:01:36 +0000
ROA not before: Wed 02 Oct 2024 09:01:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.18.31.0/24 maxlen: 24
2.19.16.0/20 maxlen: 20
2.20.4.0/22 maxlen: 22
2.20.47.0/24 maxlen: 24
2.20.252.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.22.216.0/22 maxlen: 22
2.22.234.0/24 maxlen: 24
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Oct 2024 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:76:a4:8f:68:0c:67:4d:12:bc:8b:97:d3:eb:f8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 2 09:01:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2296fffcff3e2e372c66908cc4f010350faca40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:b9:eb:73:69:30:8e:23:fb:12:ca:cf:b5:
ad:30:41:72:9b:51:16:91:2d:24:0b:a0:47:61:b4:
e7:fe:c5:7e:e7:b1:ad:34:ea:e2:0f:bb:84:2a:0b:
98:b2:f5:9f:f7:2c:98:ac:35:82:a1:3d:cc:13:d0:
54:ea:c3:bd:ec:40:f0:98:2c:07:c7:00:55:72:80:
c9:2c:8a:45:d5:f9:6a:3b:5b:63:03:f5:32:67:6e:
62:ca:ae:d1:de:bc:8d:55:ce:78:f2:a1:db:67:eb:
64:b8:90:d3:e5:62:1a:ab:3f:64:90:bc:71:88:2e:
1c:ae:e9:e2:df:2f:e8:21:6b:22:12:f8:2a:38:d6:
df:fa:44:14:1b:67:b9:11:75:2f:ef:2e:72:d8:5c:
65:58:85:ec:5e:18:19:cd:5d:cc:b7:18:ea:53:61:
be:89:fe:c4:f6:9b:60:ee:53:80:99:8a:1d:ab:53:
a8:6b:66:cb:d7:e0:30:47:84:7e:62:97:28:d2:a2:
32:a3:df:57:98:f8:12:11:b9:59:9c:55:72:33:85:
04:16:6c:ac:64:cf:2f:2c:7d:05:1a:37:37:a7:8f:
f3:80:37:45:48:75:d8:70:15:cb:3b:bf:cc:db:24:
a1:48:6d:4f:e7:7e:01:03:e0:bd:26:a8:87:f8:01:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:FF:FC:FF:3E:2E:37:2C:66:90:8C:C4:F0:10:35:0F:AC:A4:0E
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Ipb__P8-LjcsZpCMxPAQNQ-spA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.18.31.0/24
2.19.16.0/20
2.20.4.0/22
2.20.47.0/24
2.20.252.0/24
2.21.14.0/24
2.22.216.0/22
2.22.234.0/24
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ed:52:7b:d2:81:67:0a:ed:b3:a6:d2:2e:9c:d6:21:0e:61:
e3:b1:9c:bd:20:1a:d9:57:0b:19:c2:3e:0d:dc:38:da:6a:ac:
27:96:26:51:14:27:59:46:ed:f0:f0:79:51:30:5f:a1:89:cc:
f8:d0:e8:ea:21:18:b9:c0:f8:50:5a:13:44:d5:b1:ef:97:7a:
76:d6:c0:d9:af:0f:c4:75:df:86:92:d6:b1:e4:8e:d3:3d:f8:
7c:09:2d:30:27:1e:13:dc:9a:00:d2:9d:e3:7c:13:91:96:ce:
9a:5b:14:7a:bb:f1:56:e1:a5:47:04:69:94:ad:c8:10:e6:e1:
a3:7d:9b:e9:12:6d:7d:4a:1e:16:a8:e4:a2:8b:85:92:6d:a5:
a8:68:4c:50:06:7f:bb:33:a3:6f:f9:24:de:5e:37:cf:31:5d:
24:4f:d3:b2:aa:f1:7d:12:4a:47:3f:36:a9:84:68:af:4d:b6:
04:c1:af:6a:f8:25:bb:e2:56:f8:cd:bd:e1:52:5b:d8:86:75:
28:00:24:c4:47:a7:80:c2:a3:1e:4a:f5:f0:7c:8c:50:f7:89:
e4:99:9b:38:4b:93:f9:0e:93:39:8a:d3:fa:3b:4e:4d:a6:dd:
81:86:40:f5:dd:82:02:e2:c2:3f:4d:34:f0:93:c2:8e:97:4d:
0b:9f:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 09:41:01 2024 by rpki-client on console-ams.rpki-client.org