Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/U5o-FlgmwTnPSk5Z-YwFBXbuQgA.roa
File: U5o-FlgmwTnPSk5Z-YwFBXbuQgA.roa (raw, json)
Hash identifier: wdp+i71CYlxN10KKsEMsb14/TXbq4Up+Bohgyr/cJ40=
Subject key identifier: 53:9A:3E:16:58:26:C1:39:CF:4A:4E:59:F9:8C:05:05:76:EE:42:00
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 018CC5000724B6503AA182076AC3F4A8B751
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/U5o-FlgmwTnPSk5Z-YwFBXbuQgA.roa
Signing time: Mon 01 Jan 2024 12:29:22 +0000
ROA not before: Mon 01 Jan 2024 12:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51809
IP address blocks: 67.208.52.0/22 maxlen: 22
45.82.140.0/22 maxlen: 22
185.232.119.0/24 maxlen: 24
63.135.72.0/21 maxlen: 21
2a10:d580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 07 Oct 2024 08:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:07:24:b6:50:3a:a1:82:07:6a:c3:f4:a8:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=539a3e165826c139cf4a4e59f98c050576ee4200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:92:19:e0:2a:5f:0b:05:4f:bc:84:58:ea:
0c:14:62:fb:1d:f0:fe:61:fa:56:a6:e2:f6:20:a9:
b0:41:fc:87:26:86:62:a2:49:8a:71:4d:e0:45:fa:
b6:ac:54:81:54:66:1f:de:8d:b0:44:6d:cf:78:a7:
3f:c8:86:db:98:40:f9:b4:98:76:a6:fe:07:f1:83:
f5:b5:48:a3:55:13:6d:9c:e8:ff:35:e3:7c:27:08:
f5:04:df:5a:eb:8f:fa:a1:99:d7:08:45:d2:c8:be:
29:cf:6c:9d:74:dc:da:b9:7a:e5:45:17:91:2f:ca:
c6:6f:23:39:5a:af:24:b1:ad:18:d5:6a:ea:1e:05:
65:88:c5:75:93:18:81:f0:df:10:47:55:d0:8b:f2:
04:48:b5:86:e8:bb:d2:07:df:aa:98:1d:4b:bb:33:
30:38:c4:56:6f:c4:31:c8:26:84:d9:45:aa:e7:dd:
4e:1f:ca:60:58:f5:14:55:ee:41:db:ed:57:b3:ce:
34:3a:8a:f3:3d:a8:72:1e:59:e3:e8:a7:e3:ea:a3:
31:c5:22:9c:3f:5e:09:e8:f2:72:20:bb:e7:64:a6:
fb:1a:93:ea:56:ea:c0:04:ef:06:00:7f:2a:23:3d:
5f:bc:76:9d:08:d8:f3:f9:0d:6a:13:d9:9c:eb:a0:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:3E:16:58:26:C1:39:CF:4A:4E:59:F9:8C:05:05:76:EE:42:00
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/U5o-FlgmwTnPSk5Z-YwFBXbuQgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.140.0/22
63.135.72.0/21
67.208.52.0/22
185.232.119.0/24
IPv6:
2a10:d580::/29
Signature Algorithm: sha256WithRSAEncryption
62:3c:08:9e:d0:45:ce:5b:95:a5:8c:97:95:5f:1c:52:0b:ed:
62:60:78:b5:25:a8:ac:4b:82:c5:c6:a9:b8:e2:72:cf:a3:13:
f2:73:c0:a2:51:62:db:49:37:0f:e4:8e:25:bc:b1:6d:ed:b6:
4c:b5:86:f2:42:64:fc:d0:b6:20:c9:0a:62:19:86:6c:9a:e8:
d1:31:ec:39:f9:8d:3a:35:4b:75:76:94:34:81:82:d0:fc:dc:
f3:6c:cc:0f:ed:73:a8:88:02:21:fd:ba:0e:56:a6:9d:39:43:
24:d2:12:79:a7:b3:a4:f9:9d:7d:63:c3:16:dd:17:1e:cf:a0:
26:09:aa:81:b9:de:91:70:f0:12:35:15:b9:b7:dc:87:33:c5:
1f:df:3a:68:e1:a0:45:ca:fa:7f:3d:b5:e3:5c:b8:bb:ba:5e:
ad:09:f5:ef:78:05:91:2c:e9:c9:a2:09:ff:46:7d:e5:2c:e6:
0d:c8:86:27:9a:8d:64:52:5e:11:00:57:e4:4f:28:e8:87:bf:
b0:65:e7:3f:3c:de:7d:67:0b:11:89:67:09:56:c5:fd:93:20:
9f:4f:35:ba:a5:27:7a:22:a6:ac:51:90:aa:92:70:f8:dd:58:
6d:54:74:fd:ac:15:f3:eb:77:71:a2:23:76:01:1a:c3:bc:58:
21:9a:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:31 2024 by rpki-client on console-ams.rpki-client.org