Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/erQsENCdLmb1LS3hLkWskdqZkPM.roa
File: erQsENCdLmb1LS3hLkWskdqZkPM.roa (raw, json)
Hash identifier: F93dFR+oHqMjLx6zHXmKplYj8xzEQwxW7KHkLBdXmbo=
Subject key identifier: 7A:B4:2C:10:D0:9D:2E:66:F5:2D:2D:E1:2E:45:AC:91:DA:99:90:F3
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0188DDD35B9C71E6966C7BFF7AB22CB69FCC
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/erQsENCdLmb1LS3hLkWskdqZkPM.roa
Signing time: Wed 21 Jun 2023 11:59:56 +0000
ROA not before: Wed 21 Jun 2023 11:59:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 2.21.112.0/24 maxlen: 24
95.100.157.0/24 maxlen: 24
2.21.114.0/24 maxlen: 24
2.17.192.0/24 maxlen: 24
2.17.192.0/22 maxlen: 22
2.17.193.0/24 maxlen: 24
2.17.195.0/24 maxlen: 24
2.17.194.0/24 maxlen: 24
2.21.175.0/24 maxlen: 24
95.100.215.0/24 maxlen: 24
95.100.214.0/24 maxlen: 24
92.122.207.0/24 maxlen: 24
95.100.253.0/24 maxlen: 24
93.191.172.0/24 maxlen: 24
93.191.168.0/24 maxlen: 24
93.191.169.0/24 maxlen: 24
95.100.180.0/24 maxlen: 24
93.191.170.0/24 maxlen: 24
92.122.185.0/24 maxlen: 24
95.100.213.0/24 maxlen: 24
92.122.184.0/24 maxlen: 24
95.100.212.0/24 maxlen: 24
95.101.118.0/24 maxlen: 24
95.101.117.0/24 maxlen: 24
95.101.204.0/22 maxlen: 22
2.19.4.0/22 maxlen: 22
2.17.108.0/22 maxlen: 22
2a02:2370:2::/48 maxlen: 48
2a02:2370:102::/48 maxlen: 48
2a02:2370:202::/48 maxlen: 48
2a02:2370:6::/48 maxlen: 48
2a02:2370:106::/48 maxlen: 48
2a02:2370:206::/48 maxlen: 48
2a02:2370:1::/48 maxlen: 48
2a02:2370:101::/48 maxlen: 48
2a02:2370:201::/48 maxlen: 48
2a02:2370:204::/48 maxlen: 48
2a02:2370:4::/48 maxlen: 48
2a02:2370:104::/48 maxlen: 48
2a02:2370:103::/48 maxlen: 48
2a02:2370:203::/48 maxlen: 48
2a02:2370:3::/48 maxlen: 48
2a02:2370:200::/48 maxlen: 48
2a02:2370:5::/48 maxlen: 48
2a02:2370:105::/48 maxlen: 48
2a02:2370:205::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:d3:5b:9c:71:e6:96:6c:7b:ff:7a:b2:2c:b6:9f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jun 21 11:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ab42c10d09d2e66f52d2de12e45ac91da9990f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a4:1c:5e:da:aa:16:37:be:34:0e:bc:3e:86:
c2:e7:7d:6e:36:b7:59:f3:3f:00:da:41:2c:77:54:
bc:af:c7:0f:97:c5:ff:bc:78:7a:42:8b:3f:ae:65:
c3:59:53:76:0e:00:b8:09:30:72:cc:9b:30:cd:94:
11:6e:b3:53:6c:cb:1e:4c:72:b3:a5:8b:2e:f0:ad:
bc:d3:97:e0:ff:49:bd:9f:e2:d9:e2:bb:3a:4f:cd:
45:40:8a:9c:ad:94:63:19:a1:c4:f2:58:18:f5:51:
fb:ba:33:c7:cc:78:04:d6:7a:1f:88:38:1a:fc:fe:
72:93:43:c8:c4:08:25:70:37:46:34:2a:ec:42:24:
8b:e0:96:a4:33:9e:b7:17:45:e6:02:fc:a3:a9:04:
34:f3:d3:0b:04:e6:c4:76:07:cb:c2:3b:0e:24:1e:
ee:d1:76:64:ba:c7:26:61:ba:a5:f8:05:23:69:13:
d2:ab:42:80:f2:94:af:d0:13:a6:8d:f4:49:ab:df:
5b:1e:c9:2e:d9:ea:30:bd:30:09:35:ed:ad:5d:dd:
43:c5:3b:5a:76:49:27:d6:9c:06:ed:96:2b:2c:bf:
48:48:10:6e:23:33:10:36:3e:e5:a6:37:6b:01:25:
05:10:2d:8c:b2:81:04:c3:08:e3:b5:2d:68:8a:d6:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:2C:10:D0:9D:2E:66:F5:2D:2D:E1:2E:45:AC:91:DA:99:90:F3
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/erQsENCdLmb1LS3hLkWskdqZkPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.17.108.0/22
2.17.192.0/22
2.19.4.0/22
2.21.112.0/24
2.21.114.0/24
2.21.175.0/24
92.122.184.0/23
92.122.207.0/24
93.191.168.0-93.191.170.255
93.191.172.0/24
95.100.157.0/24
95.100.180.0/24
95.100.212.0/22
95.100.253.0/24
95.101.117.0-95.101.118.255
95.101.204.0/22
IPv6:
2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff
2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff
2a02:2370:200::-2a02:2370:206:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:81:75:87:a3:98:45:70:e3:d0:a1:1d:9e:9b:f1:41:7b:c1:
2a:eb:ee:f5:8d:0d:29:5d:95:47:5e:ae:d6:dd:b8:7f:8a:63:
4b:cb:37:b3:6a:91:d3:56:86:25:86:7e:95:c8:ec:54:96:32:
79:b0:d4:d8:3c:5a:81:4b:55:21:e4:fc:0d:46:44:22:f4:fd:
39:cd:72:71:16:54:20:d4:eb:82:cb:08:00:c8:52:d8:06:88:
4e:37:4e:cc:38:e3:b0:73:9a:a3:c4:ba:cb:fd:fe:a7:f5:7b:
ac:e3:c1:70:82:67:62:f6:a9:9f:ba:ca:5d:40:49:a5:bb:be:
d5:a5:d2:b1:85:bd:8b:20:40:23:43:da:8b:75:b8:4c:3c:9b:
f7:25:88:b5:5a:a0:8b:34:ed:d9:4a:aa:ec:22:8c:f9:08:16:
0f:2f:56:47:47:2c:79:d9:58:f4:99:a0:bd:b2:18:50:e7:00:
90:24:02:a9:2c:b8:c6:3e:e1:67:76:54:b6:9f:40:52:62:14:
bc:e6:5e:76:de:4b:82:13:00:b4:62:f6:bb:dd:bf:07:1c:eb:
8a:40:be:29:8e:1d:97:77:86:92:63:a3:aa:f2:f0:ec:59:5b:
aa:5c:74:33:34:6d:2b:a9:7c:cf:eb:1b:89:85:c4:d0:0f:22:
84:8a:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org