Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/l20WvKU2XX3c4mCaXyQ73paNZYs.roa
File: l20WvKU2XX3c4mCaXyQ73paNZYs.roa (raw, json)
Hash identifier: pGty3b53+bTH7TM++PQJT3kviHfScRIRDF9jp6O6Akk=
Subject key identifier: 97:6D:16:BC:A5:36:5D:7D:DC:E2:60:9A:5F:24:3B:DE:96:8D:65:8B
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 018B47195D21DE5931FBA10C5F481A2EF75D
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/l20WvKU2XX3c4mCaXyQ73paNZYs.roa
Signing time: Thu 19 Oct 2023 08:42:06 +0000
ROA not before: Thu 19 Oct 2023 08:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43045
IP address blocks: 5.182.52.0/22 maxlen: 24
46.17.48.0/21 maxlen: 21
89.221.48.0/20 maxlen: 20
2a02:22c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 21 Oct 2023 12:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:19:5d:21:de:59:31:fb:a1:0c:5f:48:1a:2e:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Oct 19 08:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=976d16bca5365d7ddce2609a5f243bde968d658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:5c:1b:40:9d:4d:51:5c:56:1f:56:90:4c:
68:06:e2:99:f3:ad:c3:de:ab:08:14:72:cb:5c:a1:
08:57:8a:ee:ee:b2:b5:fb:8a:72:69:4c:ec:85:b0:
cb:25:2c:51:a1:97:54:77:6c:a7:e5:02:73:ac:90:
f3:73:13:9a:39:11:b2:d2:23:7d:e4:de:e3:78:a7:
30:1d:6e:60:7a:91:86:69:e4:51:c2:98:7c:e5:86:
18:8e:e4:19:e1:f6:c2:82:49:ec:d9:88:82:70:66:
06:be:b2:30:24:d0:16:c4:1d:ce:06:4a:36:cd:c5:
3c:a6:2d:79:a2:22:23:97:42:f5:0a:10:9a:af:e7:
cd:23:09:d4:cd:6f:33:c2:75:62:11:93:d0:6c:73:
d7:b8:af:51:5c:0a:d2:f8:7d:64:ce:37:65:75:5c:
88:88:c4:b8:c0:40:56:03:c4:73:9a:34:ad:31:ca:
7d:a9:e8:5e:69:06:1d:a3:62:57:42:5e:a0:46:74:
64:cc:b9:66:af:5a:ce:fb:3d:de:2f:d0:7c:45:e4:
15:8a:12:b2:55:4d:5b:17:71:ea:20:f3:2b:f5:30:
be:99:51:2e:33:c4:50:ba:4f:3e:95:79:f5:51:47:
be:95:f9:98:ff:e2:0b:7e:2a:24:60:75:c2:6f:88:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:16:BC:A5:36:5D:7D:DC:E2:60:9A:5F:24:3B:DE:96:8D:65:8B
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/l20WvKU2XX3c4mCaXyQ73paNZYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.52.0/22
46.17.48.0/21
89.221.48.0/20
IPv6:
2a02:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
05:46:9c:ac:48:81:b9:df:78:44:e9:09:b1:a6:27:f4:db:1f:
e8:e1:d6:54:58:e4:60:99:8a:35:c9:a4:8c:7a:d1:c2:3e:25:
e1:8d:3b:42:43:f1:a2:cb:3c:bb:0a:60:9f:53:c6:20:c2:d2:
11:26:b7:2f:95:cc:a6:1e:cd:86:c4:9c:3f:f6:c3:bf:66:55:
ed:ff:e0:b3:45:ff:18:65:73:8f:56:7f:9a:26:03:da:8f:3a:
14:85:17:9e:6d:cd:d6:96:3b:63:e3:a2:45:78:69:aa:a6:77:
25:81:36:e9:6a:45:cc:21:de:03:c4:d2:d5:21:be:39:93:57:
aa:d2:8c:7c:c9:02:74:cb:4d:df:6b:b3:47:3c:9e:7e:35:97:
1c:cf:b3:f7:39:73:72:b3:d7:a6:33:1a:a3:26:61:bd:b7:a3:
ce:3c:95:c5:e8:7f:51:89:5d:66:a0:1f:ad:4e:1e:ba:13:e8:
85:b9:61:1f:ba:16:d8:a1:48:ad:f0:3c:f7:b9:fc:68:f8:ab:
9c:df:55:1d:6c:42:6b:fb:87:ab:3f:f4:23:66:2b:40:10:53:
9b:39:42:6d:d8:0b:18:ad:49:a7:20:72:b2:07:e3:c3:1c:84:
64:fc:fb:91:a5:c8:31:8b:88:61:ba:87:f6:86:a8:02:26:78:
e6:05:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:01 2024 by rpki-client on console-fra.rpki-client.org