Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/evLVQda-y7zHT5RXJ9FhecJHv2M.roa
File: evLVQda-y7zHT5RXJ9FhecJHv2M.roa (raw, json)
Hash identifier: m3ioUW0CG567QpzEyWYt+sJ5Nz+UwhZm+wE/fYuYfHk=
Subject key identifier: 7A:F2:D5:41:D6:BE:CB:BC:C7:4F:94:57:27:D1:61:79:C2:47:BF:63
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 01856C0A4BF19E67C1843BA3E245DAA31CAC
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/evLVQda-y7zHT5RXJ9FhecJHv2M.roa
Signing time: Sun 01 Jan 2023 06:34:52 +0000
ROA not before: Sun 01 Jan 2023 06:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51043
IP address blocks: 5.22.136.0/21 maxlen: 24
185.173.67.0/24 maxlen: 24
185.59.180.0/22 maxlen: 24
178.23.128.0/21 maxlen: 24
83.98.32.0/19 maxlen: 19
159.242.64.0/18 maxlen: 24
148.253.160.0/19 maxlen: 24
2a00:ed40::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:4b:f1:9e:67:c1:84:3b:a3:e2:45:da:a3:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Jan 1 06:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af2d541d6becbbcc74f945727d16179c247bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:71:67:65:76:87:fe:e4:1a:8f:57:55:31:
c6:c4:5d:12:ce:49:46:5c:f1:28:a6:8f:51:01:e0:
97:11:3e:72:1e:dd:14:fa:5d:97:79:7f:f1:be:dc:
7c:bd:39:42:12:2b:96:ac:16:d5:91:d3:5d:f5:3e:
a0:89:ce:4b:1a:8c:a2:dc:1d:1d:73:47:16:62:c1:
3d:d4:72:31:bb:bd:4a:a7:f6:63:e1:f8:ec:9f:f5:
80:aa:43:d8:41:a4:43:f5:86:7d:5b:64:8a:b1:e2:
e7:3e:3d:9d:31:06:9a:34:b2:32:14:6e:9e:84:3f:
68:b4:b6:38:7c:21:e8:55:8c:fe:c6:3f:95:66:ff:
b4:58:ed:20:82:5b:46:42:0a:87:38:6e:98:9f:2e:
9c:7a:82:f6:04:2b:f5:71:fc:89:bd:e9:c9:69:79:
dd:d5:37:db:c5:7d:bf:5e:f5:c2:f2:24:29:bc:79:
7d:4c:f2:6a:37:72:50:fb:17:f7:e7:a0:10:56:05:
59:8f:68:ae:25:4b:26:54:6a:3f:9f:7c:29:f5:1d:
38:90:74:36:ff:5f:71:86:2d:b6:5a:24:3b:68:f8:
e7:3a:c1:50:64:cd:86:d9:73:3e:0d:74:73:28:c1:
9f:7d:13:ca:8c:93:65:89:2f:42:fb:b2:af:c7:ed:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:D5:41:D6:BE:CB:BC:C7:4F:94:57:27:D1:61:79:C2:47:BF:63
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/evLVQda-y7zHT5RXJ9FhecJHv2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.136.0/21
83.98.32.0/19
148.253.160.0/19
159.242.64.0/18
178.23.128.0/21
185.59.180.0/22
185.173.67.0/24
IPv6:
2a00:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
0b:26:ac:9f:5f:16:06:dc:da:13:86:cd:33:49:78:6e:aa:c5:
5c:14:a7:cf:69:ec:cd:fe:68:a6:56:a2:0a:91:1b:46:94:3c:
92:8a:fb:16:c2:11:c7:cf:9c:c5:44:19:9e:60:79:d0:ad:e1:
dc:37:01:44:65:01:f2:f7:01:09:40:5a:97:7b:14:82:10:ef:
51:84:99:7e:de:d3:16:d3:46:4e:c6:95:be:c1:a4:a1:90:6e:
aa:c7:42:73:04:2a:05:e9:1e:f6:8c:0d:59:78:97:b2:62:4b:
33:44:94:aa:5c:00:92:39:07:74:cd:3f:6d:1e:10:7c:2d:a9:
5b:4f:9b:0d:5c:f4:45:45:c6:ae:04:a0:d1:0b:0f:a7:6f:83:
9b:02:67:37:4f:54:82:9d:58:09:f1:b3:b7:45:f9:72:01:b8:
06:24:60:92:25:dc:a1:ef:d7:83:a7:d4:6f:36:dc:2c:d1:fb:
fa:ca:d2:cd:50:2d:41:91:ba:bc:5f:4f:1e:2f:3e:f5:65:37:
fa:31:02:bc:4d:28:99:72:50:aa:74:a0:91:be:25:b2:a6:22:
60:72:fc:54:95:31:54:a6:94:94:e5:04:21:7c:3b:c7:14:3e:
58:46:90:e5:86:54:87:ad:0f:93:84:58:ab:4b:9d:77:87:0b:
39:9c:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:25 2024 by rpki-client on console-ams.rpki-client.org