Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/rd2ZYtz2JNHVKEhImpiD19_NTLw.roa
File: rd2ZYtz2JNHVKEhImpiD19_NTLw.roa (raw, json)
Hash identifier: jZBa3ylD2i4gAMxgWpFTbIOuY+Ql3ErnCanx1vk8sXc=
Subject key identifier: AD:DD:99:62:DC:F6:24:D1:D5:28:48:48:9A:98:83:D7:DF:CD:4C:BC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 01856FA6F8904952DB56E50418A01A63E455
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/rd2ZYtz2JNHVKEhImpiD19_NTLw.roa
Signing time: Sun 01 Jan 2023 23:24:51 +0000
ROA not before: Sun 01 Jan 2023 23:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59807
IP address blocks: 164.10.79.0/24 maxlen: 24
185.181.88.0/22 maxlen: 24
164.10.30.0/24 maxlen: 24
164.10.29.0/24 maxlen: 24
164.10.26.0/24 maxlen: 24
164.10.32.0/24 maxlen: 24
164.10.252.0/24 maxlen: 24
164.10.255.0/24 maxlen: 24
164.10.45.0/24 maxlen: 24
164.10.50.0/24 maxlen: 24
164.10.49.0/24 maxlen: 24
164.10.48.0/24 maxlen: 24
164.10.47.0/24 maxlen: 24
164.10.46.0/24 maxlen: 24
164.10.61.0/24 maxlen: 24
164.10.60.0/24 maxlen: 24
164.10.0.0/24 maxlen: 24
164.10.0.0/16 maxlen: 24
2a03:2520::/32 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f8:90:49:52:db:56:e5:04:18:a0:1a:63:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jan 1 23:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=addd9962dcf624d1d52848489a9883d7dfcd4cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:b4:b1:be:1c:79:fd:db:66:5e:07:a0:84:
76:02:61:5f:5e:cb:00:ac:09:db:2c:95:68:36:e3:
97:4a:b5:8c:c4:76:73:a8:be:2a:09:e4:4f:9c:db:
d0:d3:4c:6c:2e:83:64:9b:75:03:dc:05:c4:04:bd:
6a:a8:68:75:bf:fe:27:89:e1:3a:c3:9c:c0:4a:57:
87:ee:4b:9a:4d:9d:25:f6:8f:9f:f2:d1:89:84:05:
fb:c6:fd:04:42:b4:35:18:9e:3f:f1:81:a8:af:69:
d6:af:27:ea:46:d2:97:4d:fa:24:03:60:dc:72:a8:
c8:60:7d:92:1c:19:ee:32:87:13:d1:c2:cc:c4:5b:
e0:98:d6:07:fa:62:b8:95:97:db:39:f0:9a:33:65:
a5:8e:2b:77:1a:81:64:dd:53:ef:6b:05:82:c1:c0:
73:96:9d:7a:fb:93:3f:46:da:ab:13:ce:19:cd:7e:
f3:67:2a:27:c3:45:08:3d:1c:9f:bd:79:e8:0a:63:
5e:42:c9:c3:43:d4:5d:23:ca:21:95:63:5c:9f:ec:
00:59:9d:dd:92:ea:e2:30:89:98:6a:8c:31:8c:46:
b8:98:26:72:a6:c9:ef:88:cd:46:77:af:40:97:ce:
86:57:32:cf:fc:d6:40:d3:a9:69:0f:66:48:0d:a5:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:99:62:DC:F6:24:D1:D5:28:48:48:9A:98:83:D7:DF:CD:4C:BC
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/rd2ZYtz2JNHVKEhImpiD19_NTLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.10.0.0/16
185.181.88.0/22
IPv6:
2a03:2520::/32
Signature Algorithm: sha256WithRSAEncryption
5d:ea:fb:c8:10:7e:b9:97:7b:c6:61:4d:7b:2a:1a:69:30:51:
98:83:e0:de:0d:df:f2:88:9c:02:b3:a8:47:40:17:d9:c9:8e:
81:21:0e:ac:ae:7c:1a:88:76:1b:d2:8e:88:38:48:b5:19:70:
e2:43:07:c1:ae:53:27:62:16:97:8d:f7:7c:59:3d:02:8e:8c:
88:44:e7:01:0a:63:78:3d:d3:81:b4:93:c1:25:3f:a9:f9:08:
cb:e7:b6:4e:fb:99:96:01:60:09:1b:11:5f:f0:4d:c3:48:30:
42:4f:e8:af:4d:68:42:89:72:e4:18:8d:3e:6e:d3:87:7d:c4:
39:3f:20:61:09:23:9d:6a:14:44:64:54:e4:af:e1:be:a5:8c:
33:24:c1:a9:93:72:33:23:65:d9:a1:7e:ff:8c:61:0c:2d:a2:
c1:b3:87:c7:0d:db:e6:0c:45:e1:42:e5:82:fe:4f:e2:cf:26:
44:d2:d5:9e:d6:75:16:87:44:8d:3d:7e:2f:eb:67:e4:fe:2d:
71:95:39:87:5a:5c:e7:3f:de:8e:73:4e:8e:b7:da:02:f3:be:
65:88:31:04:8a:da:00:d6:8c:de:42:4e:78:fe:8d:49:5a:ec:
08:a8:78:24:af:f1:d1:ee:d0:25:4a:5e:30:a1:cd:f0:78:91:
78:b3:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org