Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/SkggjAFjvZsq9WxB0qw3Simrrrw.roa
File: SkggjAFjvZsq9WxB0qw3Simrrrw.roa (raw, json)
Hash identifier: wgvs/dQ14HvV2FRsNluPCuWzJIY3GO4wMcCxOrA6gLY=
Subject key identifier: 4A:48:20:8C:01:63:BD:9B:2A:F5:6C:41:D2:AC:37:4A:29:AB:AE:BC
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 019034D3803F9623E07D6E9BD82623DC93C1
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/SkggjAFjvZsq9WxB0qw3Simrrrw.roa
Signing time: Thu 20 Jun 2024 08:46:34 +0000
ROA not before: Thu 20 Jun 2024 08:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13037
IP address blocks: 51.148.0.0/16 maxlen: 16
51.155.0.0/16 maxlen: 16
62.3.64.0/18 maxlen: 18
77.104.128.0/18 maxlen: 18
82.68.0.0/15 maxlen: 15
82.71.0.0/16 maxlen: 16
82.71.240.0/20 maxlen: 20
88.97.0.0/18 maxlen: 18
88.97.64.0/19 maxlen: 19
88.97.96.0/20 maxlen: 20
88.97.168.0/24 maxlen: 24
88.97.169.0/24 maxlen: 24
88.97.170.0/24 maxlen: 24
88.97.171.0/24 maxlen: 24
88.97.172.0/24 maxlen: 24
88.97.173.0/24 maxlen: 24
88.97.174.0/24 maxlen: 24
88.97.175.0/24 maxlen: 24
88.97.176.0/20 maxlen: 20
88.98.0.0/20 maxlen: 20
88.98.16.0/23 maxlen: 23
88.98.18.0/24 maxlen: 24
88.98.21.0/24 maxlen: 24
88.98.22.0/23 maxlen: 23
88.98.24.0/21 maxlen: 21
88.98.32.0/19 maxlen: 19
88.98.64.0/19 maxlen: 19
88.98.128.0/19 maxlen: 19
88.98.160.0/21 maxlen: 21
88.98.170.0/23 maxlen: 23
88.98.172.0/22 maxlen: 22
88.98.176.0/20 maxlen: 20
146.66.64.0/18 maxlen: 18
212.23.0.0/19 maxlen: 19
217.155.0.0/16 maxlen: 16
2a02:8010::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 25 Jul 2024 13:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:d3:80:3f:96:23:e0:7d:6e:9b:d8:26:23:dc:93:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jun 20 08:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a48208c0163bd9b2af56c41d2ac374a29abaebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:11:0f:5a:2f:9f:f6:ab:5c:23:19:74:7e:
a6:b9:42:f8:b6:97:6c:5c:31:66:88:68:7b:d2:85:
e0:2e:0e:62:24:e3:96:96:cb:8d:49:fa:7e:c3:47:
a9:56:52:b3:5f:bd:79:50:fb:e7:80:ef:29:20:64:
79:12:4e:28:b2:ee:8a:c7:39:3f:3f:77:0f:67:f0:
db:22:b7:84:4a:83:54:e6:63:53:72:a8:91:fe:bb:
99:a3:10:c3:a7:40:e2:1b:f2:f3:74:44:dd:4d:8d:
b9:6e:86:83:bb:fc:4e:45:dc:9c:1f:31:2c:10:4f:
9f:7f:5d:b9:5c:b5:21:a6:44:0b:cd:fa:9d:fc:cd:
fa:f9:14:05:2b:6f:6f:4e:e4:4b:fb:95:03:43:cc:
de:4a:4f:c3:a6:19:4f:e9:fa:92:ac:9d:ad:24:0f:
cd:b7:15:98:3e:af:d6:15:94:7e:c0:58:12:d1:d6:
74:9c:5d:b1:d5:a3:f1:e7:26:ec:92:73:6f:42:ec:
5b:a7:7c:af:dc:52:d6:0f:6c:ce:fd:82:b1:ca:a0:
66:ca:60:88:52:01:6c:f8:87:f4:17:d7:bb:17:39:
b2:d5:00:db:2c:d0:e6:06:77:e3:5d:50:e3:87:fd:
ae:83:18:7d:8a:f1:dd:fe:31:bf:6f:af:74:0b:16:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:20:8C:01:63:BD:9B:2A:F5:6C:41:D2:AC:37:4A:29:AB:AE:BC
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/SkggjAFjvZsq9WxB0qw3Simrrrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/15
82.71.0.0/16
88.97.0.0-88.97.111.255
88.97.168.0-88.97.191.255
88.98.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
Signature Algorithm: sha256WithRSAEncryption
62:c1:0a:75:5d:a1:b0:3f:33:a5:5d:e5:4a:23:ba:8c:79:16:
65:dd:a8:f4:06:65:d7:09:e2:71:8e:91:50:09:e1:85:c2:4d:
7e:d5:ea:78:dd:5b:14:32:c2:d1:b0:ae:13:23:a7:ae:ec:15:
e5:ef:2e:69:10:76:fa:4d:4d:86:de:01:fb:4f:be:54:5d:b7:
65:9f:66:c4:9a:07:04:1b:06:07:2c:76:da:8d:7f:ec:a6:c3:
58:31:e7:72:8b:74:2a:6c:b9:5c:69:bc:76:46:65:9a:88:39:
3f:98:75:30:cb:24:3e:d2:29:fe:dc:5b:e0:75:bc:9c:a6:a2:
11:7c:25:fb:c9:95:0e:12:f9:66:e0:97:56:4e:d6:68:e6:97:
99:bb:d6:44:7c:56:b6:79:42:fd:ec:9c:fd:14:d8:64:c9:23:
22:e3:da:a5:ea:28:12:17:b9:46:f6:b7:c9:0e:cf:50:6d:9e:
34:d5:71:c3:3b:1f:9d:53:7c:0e:4b:e3:6c:e9:07:a7:a1:71:
56:63:74:18:42:b5:f4:17:aa:35:f0:b2:83:90:8d:76:4d:9b:
75:ab:d3:8a:00:0f:1f:32:4d:f8:88:7a:fb:2d:df:f2:ab:e9:
91:8b:11:bd:aa:9e:b9:68:f2:57:fb:67:61:ec:7f:15:d9:6f:
dc:b9:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 17:10:09 2024 by rpki-client on console-fra.rpki-client.org