Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/2fW2krn-oFe3Og02T4gnbYrnc7s.roa
File: 2fW2krn-oFe3Og02T4gnbYrnc7s.roa (raw, json)
Hash identifier: CmWelvwy0g1HX29yLiv9Gka6Ago4kCxlWU7ZntwPX6g=
Subject key identifier: D9:F5:B6:92:B9:FE:A0:57:B7:3A:0D:36:4F:88:27:6D:8A:E7:73:BB
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0192328A2C263EC83BA16ADD1047BB676498
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/2fW2krn-oFe3Og02T4gnbYrnc7s.roa
Signing time: Fri 27 Sep 2024 08:12:48 +0000
ROA not before: Fri 27 Sep 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39704
IP address blocks: 5.22.248.0/21 maxlen: 24
46.182.216.0/21 maxlen: 24
91.192.36.0/22 maxlen: 24
94.124.88.0/21 maxlen: 24
185.1.190.0/24 maxlen: 24
185.94.168.0/22 maxlen: 24
185.103.16.0/22 maxlen: 24
194.50.163.0/24 maxlen: 24
195.216.246.0/24 maxlen: 24
213.132.192.0/19 maxlen: 24
2a00:1bd0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Sep 2024 11:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:8a:2c:26:3e:c8:3b:a1:6a:dd:10:47:bb:67:64:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Sep 27 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9f5b692b9fea057b73a0d364f88276d8ae773bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:de:c6:c6:b5:a6:8a:95:b4:c9:c7:fe:f3:
1d:0f:13:01:6c:3f:6b:1f:ea:aa:ad:ca:62:d8:4b:
a7:dd:40:87:44:93:55:86:25:91:ec:2e:27:79:67:
24:39:7b:35:5e:1f:b6:89:09:d8:27:0c:b5:f9:31:
4a:37:47:2b:b1:e9:fb:ce:d1:92:10:a4:af:67:98:
b2:2e:10:f3:ac:10:64:c6:9a:01:12:c4:b1:07:2f:
11:1e:9e:62:f8:35:79:ae:d0:19:56:1f:ea:c9:f7:
c6:49:79:68:d0:8f:c0:6d:55:79:e1:6a:d0:b7:6f:
89:a4:23:71:0a:09:88:5e:61:db:cc:99:3b:cc:3d:
7b:28:98:ce:4e:cc:15:c5:87:70:23:00:4c:a7:da:
aa:9f:07:29:f4:37:3c:3f:ef:d1:1d:d1:8c:ac:e7:
5f:12:fa:e6:41:44:4f:e7:fb:ca:7b:f6:cd:b8:19:
46:07:e9:90:81:2e:92:e0:d3:f8:0b:94:4d:8d:6c:
14:6a:56:07:fd:7f:df:65:eb:46:3d:7b:47:08:4c:
eb:8d:1b:e7:8d:7a:b6:6d:39:b0:54:39:67:f7:c0:
11:7b:b4:41:d2:f7:e8:2d:8c:90:81:81:d7:21:05:
b9:93:17:28:0d:03:8c:6a:cb:62:fd:dc:74:d1:4f:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:B6:92:B9:FE:A0:57:B7:3A:0D:36:4F:88:27:6D:8A:E7:73:BB
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/2fW2krn-oFe3Og02T4gnbYrnc7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.1.190.0/24
185.94.168.0/22
185.103.16.0/22
194.50.163.0/24
195.216.246.0/24
213.132.192.0/19
IPv6:
2a00:1bd0::/29
Signature Algorithm: sha256WithRSAEncryption
79:a3:57:1d:1f:63:be:a4:eb:73:d0:3d:2e:00:db:2c:47:51:
72:23:6f:b0:b0:83:66:a4:5a:bb:d9:84:35:91:99:63:4f:d0:
12:87:06:d1:41:e6:1c:4c:42:f4:3b:b9:93:68:38:20:57:a6:
5b:96:62:e4:d3:c5:f9:b4:de:98:a4:98:e0:30:50:a9:b0:02:
1f:da:cc:4e:78:28:95:24:b4:d3:9a:dc:8c:46:46:13:a8:ee:
ac:6d:ef:1c:07:a5:96:af:ef:b5:9b:e5:28:97:71:fe:a0:5e:
a5:4a:ab:7b:88:ca:88:f0:bb:44:dc:2b:7e:a2:4a:a7:a3:37:
43:93:6a:f0:fb:e1:06:bb:a3:1b:1c:b2:ba:c4:0f:5e:3c:72:
7e:36:a3:1c:ee:b7:93:34:a0:04:68:69:6a:41:86:b3:b3:39:
f7:67:ab:8b:d8:aa:94:e1:cf:73:ae:85:53:86:31:9d:3a:ac:
92:4a:fd:57:1a:ae:0f:86:fd:49:3d:79:f2:4d:bb:6a:87:f1:
0e:4a:27:5b:72:8b:0d:b3:ac:df:10:2b:97:09:51:34:17:25:
22:d7:a3:19:45:f1:da:14:c2:48:c5:bd:e4:9f:7b:b8:95:ed:
e8:d2:58:00:b1:64:fb:e6:c3:12:96:24:e0:c1:7f:f9:20:cb:
d3:0f:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 13:17:24 2024 by rpki-client on console-fra.rpki-client.org