Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/JlBOugOowMmFgTpZuhtHblyz3U0.roa
File: JlBOugOowMmFgTpZuhtHblyz3U0.roa (raw, json)
Hash identifier: dGZZR+JfNoVySJ6wYRFQrJ01cimWSf5GpFeWT0Lj83g=
Subject key identifier: 26:50:4E:BA:03:A8:C0:C9:85:81:3A:59:BA:1B:47:6E:5C:B3:DD:4D
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0191B2BAA8C16F1389BD1B73F769FCC9E8D5
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/JlBOugOowMmFgTpZuhtHblyz3U0.roa
Signing time: Mon 02 Sep 2024 12:34:22 +0000
ROA not before: Mon 02 Sep 2024 12:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.18.31.0/24 maxlen: 24
2.19.16.0/20 maxlen: 20
2.20.4.0/22 maxlen: 22
2.20.47.0/24 maxlen: 24
2.20.224.0/20 maxlen: 20
2.20.252.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.22.20.0/23 maxlen: 23
2.22.216.0/22 maxlen: 22
2.22.234.0/24 maxlen: 24
2.23.16.0/20 maxlen: 20
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Oct 2024 08:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:ba:a8:c1:6f:13:89:bd:1b:73:f7:69:fc:c9:e8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Sep 2 12:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26504eba03a8c0c985813a59ba1b476e5cb3dd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:be:30:81:66:02:34:21:13:15:68:1b:5b:
89:39:22:52:f5:bf:c5:82:a2:b8:bb:83:a8:fb:1d:
6c:21:80:b9:0d:25:72:26:80:e9:6a:c7:eb:36:d4:
8f:82:06:0c:e6:7d:e4:c3:2b:5c:89:da:2b:ba:4d:
3d:e9:77:47:b7:b7:bf:8e:c5:83:7a:36:0c:e5:fe:
e5:df:e3:ed:69:33:a9:7d:90:7f:ef:45:f8:e7:6e:
51:e2:51:8c:de:1c:78:11:66:e2:24:97:30:63:9d:
04:79:21:72:80:95:c8:7f:b9:12:5d:2f:5b:23:f5:
ee:3d:31:73:03:84:35:16:be:7a:63:e5:2c:00:3e:
ff:07:7c:1b:2e:b5:cd:4b:2f:7f:0b:b6:d6:5b:cc:
d3:40:63:58:b5:39:84:f4:5b:4b:43:91:82:c7:dd:
96:e4:c0:65:5f:b1:98:16:00:e8:b9:2b:27:60:46:
3a:ca:d8:c7:64:b1:fb:56:ed:42:a5:a8:26:43:75:
31:c3:93:67:c4:a8:fa:20:20:83:b0:f3:0f:97:4a:
66:0f:76:ec:54:f4:bf:29:80:0f:76:fb:e4:fe:07:
dd:ca:3a:05:72:29:cd:c8:70:18:8b:73:b6:39:3c:
8c:f0:ba:26:59:0c:29:dc:73:18:11:63:2d:bc:96:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:4E:BA:03:A8:C0:C9:85:81:3A:59:BA:1B:47:6E:5C:B3:DD:4D
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/JlBOugOowMmFgTpZuhtHblyz3U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.18.31.0/24
2.19.16.0/20
2.20.4.0/22
2.20.47.0/24
2.20.224.0/20
2.20.252.0/24
2.21.14.0/24
2.22.20.0/23
2.22.216.0/22
2.22.234.0/24
2.23.16.0/20
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
8b:20:e5:6b:e5:a9:37:8a:2b:9f:88:3b:f1:0d:07:07:4d:88:
29:50:19:44:2b:9e:d5:e8:88:c3:8a:63:54:e4:41:de:af:85:
59:2a:7b:ff:42:13:af:55:ca:86:17:e2:7c:18:04:c8:21:a8:
cf:e0:9a:79:64:c9:bd:e0:5b:9c:db:c0:93:44:17:65:ea:b3:
e2:24:ca:74:01:fd:da:b0:6b:87:c4:59:5d:72:f4:e0:b1:86:
dc:0f:c4:8a:e0:95:80:dc:d1:c1:7c:91:29:e0:36:37:3f:f3:
90:cb:7d:7d:7d:e5:e0:61:fe:40:16:7c:35:db:a3:24:82:99:
d6:73:c3:05:c4:df:55:43:91:b6:18:7a:9d:c7:06:5d:09:2a:
29:07:f7:6d:66:d5:9d:bf:01:d5:4f:8c:24:52:68:a0:81:e1:
2d:22:8a:2a:aa:90:cf:c7:4a:ff:3b:87:a6:94:06:20:49:5d:
0a:1b:8c:88:e5:79:88:03:77:ed:fa:c7:c1:54:0a:cd:2e:dc:
09:ea:ed:ba:73:ca:9c:b2:60:12:5a:91:59:d3:16:3d:95:e0:
cf:61:33:1f:e5:86:a5:ae:9d:bb:41:2c:54:ca:1c:d8:71:2e:
49:52:0d:2b:87:90:9a:1c:56:4d:8f:e8:de:6f:bd:24:45:b4:
7b:b6:f5:63
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZGyuqjBbxOJvRtz92n8yejVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwOTAyMTIzNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjUwNGViYTAzYThjMGM5ODU4MTNhNTliYTFiNDc2ZTVjYjNkZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpm+MIFmAjQhExVoG1uJOSJS9b/F
gqK4u4Oo+x1sIYC5DSVyJoDpasfrNtSPggYM5n3kwytcidoruk096XdHt7e/jsWD
ejYM5f7l3+PtaTOpfZB/70X4525R4lGM3hx4EWbiJJcwY50EeSFygJXIf7kSXS9b
I/XuPTFzA4Q1Fr56Y+UsAD7/B3wbLrXNSy9/C7bWW8zTQGNYtTmE9FtLQ5GCx92W
5MBlX7GYFgDouSsnYEY6ytjHZLH7Vu1CpagmQ3Uxw5NnxKj6ICCDsPMPl0pmD3bs
VPS/KYAPdvvk/gfdyjoFcinNyHAYi3O2OTyM8LomWQwp3HMYEWMtvJbSmQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFCZQTroDqMDJhYE6WbobR25cs91NMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvSmxCT3VnT293TW1GZ1RwWnVodEhibHl6M1UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHcBggrBgEFBQcBBwEB/wSBzDCByTCBtQQCAAEwga4DBAAC
EBMDBAECEEYDBAECEJIDBAICENwDBAICEgADBAACEh8DBAQCExADBAICFAQDBAAC
FC8DBAQCFOADBAACFPwDBAACFQ4DBAECFhQDBAICFtgDBAACFuoDBAQCFxADBAJY
3RwDBAJY3WQDBAJcekQDBABceuEDBAJcevgDBABcezADBABce2oDBAJce9ADBAJf
ZIgDBABfZSMDBAJfZUQDBABfZXIDBAJfZZwwDwQCAAIwCQMHACoCJvALADANBgkq
hkiG9w0BAQsFAAOCAQEAiyDla+WpN4orn4g78Q0HB02IKVAZRCue1eiIw4pjVORB
3q+FWSp7/0ITr1XKhhfifBgEyCGoz+CaeWTJveBbnNvAk0QXZeqz4iTKdAH92rBr
h8RZXXL04LGG3A/EiuCVgNzRwXyRKeA2Nz/zkMt9fX3l4GH+QBZ8NdujJIKZ1nPD
BcTfVUORthh6nccGXQkqKQf3bWbVnb8B1U+MJFJooIHhLSKKKqqQz8dK/zuHppQG
IEldChuMiOV5iAN37frHwVQKzS7cCertunPKnLJgElqRWdMWPZXgz2EzH+WGpa6d
u0EsVMoc2HEuSVINK4eQmhxWTY/o3m+9JEW0e7b1Yw==
-----END CERTIFICATE-----
Generated at Wed Oct 2 10:53:38 2024 by rpki-client on console-ams.rpki-client.org