Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mtODBY0XEgJdNMXe6ZGj6XMvPzI.roa
File: mtODBY0XEgJdNMXe6ZGj6XMvPzI.roa (raw, json)
Hash identifier: iKyAVahvzb/ifiE+/gSStdZBnh8rFIKeVItCRMgjKkM=
Subject key identifier: 9A:D3:83:05:8D:17:12:02:5D:34:C5:DE:E9:91:A3:E9:73:2F:3F:32
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018B2426ABBD6ECE664EDAD23628F40022B3
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mtODBY0XEgJdNMXe6ZGj6XMvPzI.roa
Signing time: Thu 12 Oct 2023 13:49:55 +0000
ROA not before: Thu 12 Oct 2023 13:49:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21342
IP address blocks: 2.22.243.0/24 maxlen: 24
92.122.123.0/24 maxlen: 24
88.221.162.0/24 maxlen: 24
88.221.163.0/24 maxlen: 24
2.22.230.0/24 maxlen: 24
2.16.40.0/24 maxlen: 24
95.100.168.0/24 maxlen: 24
84.53.139.0/24 maxlen: 24
95.100.175.0/24 maxlen: 24
95.100.174.0/24 maxlen: 24
95.100.173.0/24 maxlen: 24
2.16.130.0/24 maxlen: 24
2.16.126.0/23 maxlen: 24
95.101.76.0/24 maxlen: 24
2.17.46.0/24 maxlen: 24
2.21.230.0/24 maxlen: 24
95.101.36.0/24 maxlen: 24
88.221.81.0/24 maxlen: 24
92.123.94.0/24 maxlen: 24
92.123.95.0/24 maxlen: 24
193.108.91.0/24 maxlen: 24
193.108.88.0/24 maxlen: 24
2a02:26f0:117::/48 maxlen: 48
2a02:26f0:68::/48 maxlen: 48
2a02:26f0:67::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:26:ab:bd:6e:ce:66:4e:da:d2:36:28:f4:00:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 12 13:49:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad383058d1712025d34c5dee991a3e9732f3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:b9:0e:f9:44:38:77:74:38:79:0e:21:50:
12:25:a6:ac:16:a2:69:78:9f:5b:b3:df:25:28:e9:
33:d4:83:d5:7e:25:00:15:ea:c8:ae:b8:d7:a0:db:
2a:1c:d2:bf:9f:39:1a:0f:16:10:83:ea:de:a3:55:
3f:d8:24:8e:d2:61:5a:96:d8:6c:43:44:9b:98:3a:
a2:4f:ed:46:03:f3:fe:d4:a9:18:1b:5b:25:51:aa:
57:6d:06:c6:9c:ae:d2:75:6d:bc:76:f9:87:18:4a:
ea:d4:22:79:2e:1b:7a:38:d7:10:04:35:ec:70:c4:
24:42:45:3f:b6:e9:ca:b9:1e:51:8c:42:89:01:95:
7b:87:38:02:85:60:26:b5:f4:3c:21:c1:48:6d:d5:
01:d7:74:63:1f:7f:62:f6:b3:66:1a:c2:f8:a1:83:
83:16:3d:81:b4:c0:67:14:c2:e1:a1:5f:81:91:78:
76:4e:aa:72:14:5a:0f:23:f1:21:7d:08:63:5b:76:
36:a5:96:d0:1e:52:cc:c5:e8:11:2b:21:36:b0:a9:
3b:40:3e:fd:6b:91:66:4a:17:3b:f3:52:37:7d:a9:
49:9e:39:35:d4:62:ef:6d:f3:b4:f6:7c:87:82:d7:
5e:ba:4b:6f:c2:5d:7b:ab:18:e5:fb:6f:ef:6a:bb:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:83:05:8D:17:12:02:5D:34:C5:DE:E9:91:A3:E9:73:2F:3F:32
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/mtODBY0XEgJdNMXe6ZGj6XMvPzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.40.0/24
2.16.126.0/23
2.16.130.0/24
2.17.46.0/24
2.21.230.0/24
2.22.230.0/24
2.22.243.0/24
84.53.139.0/24
88.221.81.0/24
88.221.162.0/23
92.122.123.0/24
92.123.94.0/23
95.100.168.0/24
95.100.173.0-95.100.175.255
95.101.36.0/24
95.101.76.0/24
193.108.88.0/24
193.108.91.0/24
IPv6:
2a02:26f0:67::-2a02:26f0:68:ffff:ffff:ffff:ffff:ffff
2a02:26f0:117::/48
Signature Algorithm: sha256WithRSAEncryption
05:01:ca:ea:42:00:4d:99:92:46:af:d5:d7:b0:37:b8:08:22:
59:8f:eb:55:f7:ae:88:2b:46:20:38:55:20:ac:d0:07:0b:c8:
ac:32:10:d5:10:45:b9:8b:ca:59:5a:89:dc:36:89:fc:3e:7d:
27:cb:80:1a:bb:7b:f3:3e:15:aa:98:d3:50:d9:a2:bf:fc:c7:
75:30:60:15:fd:20:9d:aa:63:c8:22:92:b4:56:7c:b4:a7:b6:
02:4b:f4:8a:e5:f6:7e:c5:8d:5f:4b:7d:24:60:bd:20:76:cc:
76:67:68:4b:4f:e6:ee:39:73:a8:b0:e9:83:5f:6a:5a:12:41:
4c:7e:ae:95:c7:8b:61:5d:65:16:76:3b:c5:11:61:13:05:0f:
ff:11:f9:f7:3e:22:d0:d1:c2:ee:b7:e3:93:aa:98:26:af:04:
e5:8b:f4:bc:2c:18:c6:95:5b:ef:a1:36:c8:5c:f3:a3:bf:a3:
ad:dc:e0:f0:98:bb:b8:9e:ad:3a:a5:58:d2:ee:f5:20:3c:f2:
93:9a:c7:ab:d5:a8:53:38:01:06:60:34:6a:dd:fc:d3:67:c3:
08:a1:a8:f2:1e:99:fc:46:a1:68:2f:c6:fe:fe:0d:a3:ba:1d:
fc:34:e0:77:2b:ed:7d:4b:7d:7a:ca:39:60:06:e1:17:52:f4:
9c:11:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 16:43:21 2023 by rpki-client on console-ams.rpki-client.org