Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Um0_SGRmWqwVAkjLgDzGNy6ukxo.roa
File: Um0_SGRmWqwVAkjLgDzGNy6ukxo.roa (raw, json)
Hash identifier: ePDAtazPrmUhMJqRT5QH8dnXw7dfZN5popYrTrgzroA=
Subject key identifier: 52:6D:3F:48:64:66:5A:AC:15:02:48:CB:80:3C:C6:37:2E:AE:93:1A
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01927A97DD10C0A0785B169D160B0D30B42E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Um0_SGRmWqwVAkjLgDzGNy6ukxo.roa
Signing time: Fri 11 Oct 2024 08:00:25 +0000
ROA not before: Fri 11 Oct 2024 08:00:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.18.31.0/24 maxlen: 24
2.19.16.0/20 maxlen: 20
2.20.4.0/22 maxlen: 22
2.20.47.0/24 maxlen: 24
2.20.252.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.21.100.0/22 maxlen: 22
2.22.216.0/22 maxlen: 22
2.22.234.0/24 maxlen: 24
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Nov 2024 09:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:97:dd:10:c0:a0:78:5b:16:9d:16:0b:0d:30:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 11 08:00:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=526d3f4864665aac150248cb803cc6372eae931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:c9:76:bb:bc:e4:c1:ca:4c:a3:9d:6f:f1:
d5:26:9a:fd:e9:1c:46:15:34:38:f2:c7:9a:5b:d1:
b9:f1:72:01:95:cd:df:32:95:d1:25:53:d1:f2:4b:
8d:43:23:7d:fc:d3:13:99:e9:1f:5d:73:a5:db:86:
49:b9:f4:f2:a4:c1:c5:06:fa:1a:61:3e:39:cd:18:
5e:1c:d1:ce:a3:48:13:ec:e3:a7:bf:4e:4e:7d:33:
f9:89:0e:39:73:83:ed:b9:b1:fd:dc:40:b6:ac:3c:
28:50:dd:ce:09:bf:99:97:d8:6e:bd:a0:23:a2:71:
79:46:8b:85:3a:1c:59:39:83:fc:a3:e4:f9:44:ae:
4e:3b:34:0a:4c:dc:e6:71:34:a7:56:9e:b3:69:9e:
72:3c:42:af:a2:87:c0:ca:8d:52:3c:c3:f1:6e:9e:
b8:18:1f:92:f9:70:49:e4:5c:fc:aa:27:c3:91:9d:
c5:55:d6:72:39:28:1e:b1:27:20:07:92:7c:b9:9b:
8a:5d:39:74:bc:63:d0:21:23:63:ca:d0:c5:f6:4b:
b1:83:93:d2:15:d5:5d:89:d8:ac:fd:fd:e2:0d:93:
ac:2d:76:23:0b:6d:6f:57:fc:0b:ec:bb:2b:e2:37:
98:9d:e2:6a:f7:bc:51:46:84:a4:4a:87:ae:0a:c1:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:3F:48:64:66:5A:AC:15:02:48:CB:80:3C:C6:37:2E:AE:93:1A
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Um0_SGRmWqwVAkjLgDzGNy6ukxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.18.31.0/24
2.19.16.0/20
2.20.4.0/22
2.20.47.0/24
2.20.252.0/24
2.21.14.0/24
2.21.100.0/22
2.22.216.0/22
2.22.234.0/24
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
a3:74:2c:47:95:e2:e3:05:83:93:27:80:b8:16:bc:85:47:33:
d0:a5:f1:fe:17:bd:b6:c9:5b:ba:41:a7:c6:46:90:30:36:83:
30:5f:f7:64:f6:75:e4:70:e6:ba:4e:2e:9b:01:53:0f:e9:25:
2c:1e:e2:2f:1b:4f:f5:54:c9:c8:1d:11:ad:d9:1b:40:d0:59:
90:53:18:63:84:7a:8e:53:ed:82:29:62:bf:7c:84:15:36:4e:
7b:52:fc:33:eb:48:44:4a:90:ae:71:79:6b:1b:f7:89:c0:ee:
f1:66:e8:0d:08:5a:04:47:0c:67:65:7a:ca:31:bf:56:4f:63:
09:95:bd:79:71:88:ef:63:03:42:f1:37:6b:82:bd:8c:ad:69:
41:14:6d:c2:2d:06:a4:43:7a:33:44:61:13:dc:f5:27:2e:13:
fd:ac:4b:2d:95:e9:d2:49:ff:6e:2e:4d:35:c0:7a:c5:42:e1:
df:8c:25:6f:be:78:43:07:7c:72:8d:85:ea:f8:f9:95:4c:53:
ec:df:87:cc:1e:5e:35:b6:48:83:01:50:3f:e5:10:30:4a:31:
11:50:ef:dd:0c:2c:d9:48:6e:00:9d:a4:a6:62:30:83:c8:35:
b3:c3:e5:6f:8b:a9:09:ef:87:73:c3:32:c7:a3:94:65:69:7a:
35:d8:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 13:24:13 2024 by rpki-client on console-ams.rpki-client.org