Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KzGNr8eFxKUobJpKD6rwKpb8XB4.roa
File: KzGNr8eFxKUobJpKD6rwKpb8XB4.roa (raw, json)
Hash identifier: d+RMtvKdwyoc/3XOi+LJOdd2UlQSx2bASsy4Gtwfri0=
Subject key identifier: 2B:31:8D:AF:C7:85:C4:A5:28:6C:9A:4A:0F:AA:F0:2A:96:FC:5C:1E
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA3D2BA5FE08F4B08CB61BF4884AFA
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KzGNr8eFxKUobJpKD6rwKpb8XB4.roa
Signing time: Mon 02 Jan 2023 13:44:46 +0000
ROA not before: Mon 02 Jan 2023 13:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5408
IP address blocks: 185.5.76.0/22 maxlen: 22
62.217.64.0/18 maxlen: 24
91.227.108.0/24 maxlen: 24
194.177.192.0/19 maxlen: 24
194.42.50.0/23 maxlen: 23
185.81.196.0/22 maxlen: 22
195.251.0.0/16 maxlen: 24
194.42.52.0/23 maxlen: 23
194.42.54.0/24 maxlen: 24
193.105.109.0/24 maxlen: 24
83.212.0.0/16 maxlen: 24
37.32.128.0/17 maxlen: 17
195.130.64.0/18 maxlen: 24
2001:648::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 May 2023 14:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:3d:2b:a5:fe:08:f4:b0:8c:b6:1b:f4:88:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b318dafc785c4a5286c9a4a0faaf02a96fc5c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:1a:75:76:26:ff:c7:59:21:c9:ea:82:aa:
2a:65:19:cb:71:23:6e:e8:a1:d2:e1:14:20:26:8c:
f2:c9:2f:17:02:7f:32:81:83:3c:f4:4f:01:69:db:
17:c8:ba:92:34:e6:2e:44:6f:21:4d:9e:7b:13:f0:
65:c3:ea:6e:37:82:47:62:4c:6c:58:81:d7:0a:4c:
22:c0:63:a7:0a:09:c9:a1:2f:5f:b0:8d:da:db:d8:
03:38:f1:63:e9:75:a2:d5:18:6b:d5:e3:e4:10:9f:
fd:a4:da:8e:8d:4f:24:d3:36:5a:0e:76:ef:d8:0d:
ec:97:12:17:08:2d:11:f2:fc:5b:07:bc:bf:aa:2d:
06:86:fd:26:ff:23:28:ed:85:9f:b8:2c:81:aa:cd:
9d:7b:d2:92:b0:0a:29:07:83:5d:ba:37:d9:fd:1e:
c9:b7:a3:44:ba:c7:ac:62:36:5b:4f:ee:7f:b3:e3:
35:75:1b:63:ae:00:eb:9c:cb:c1:da:48:62:fa:6d:
70:e9:66:83:97:f8:a9:14:92:21:ec:f3:34:14:fb:
e3:ed:98:65:d3:ef:ce:9c:12:a3:ba:d3:20:20:20:
7c:3b:bd:e5:2f:bc:69:c1:02:7a:84:0d:0c:58:8c:
8e:f6:2b:d7:71:21:eb:e0:80:2a:2f:6d:c3:1c:e1:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:8D:AF:C7:85:C4:A5:28:6C:9A:4A:0F:AA:F0:2A:96:FC:5C:1E
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KzGNr8eFxKUobJpKD6rwKpb8XB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.128.0/17
62.217.64.0/18
83.212.0.0/16
91.227.108.0/24
185.5.76.0/22
185.81.196.0/22
193.105.109.0/24
194.42.50.0-194.42.54.255
194.177.192.0/19
195.130.64.0/18
195.251.0.0/16
IPv6:
2001:648::/29
Signature Algorithm: sha256WithRSAEncryption
9d:6a:a1:c5:d3:2a:6f:15:5a:fb:54:bd:90:12:54:e6:73:cc:
40:5d:c9:bc:d5:12:b5:99:3e:46:6e:35:ae:81:01:f1:37:b6:
42:7e:b8:63:aa:3d:66:38:eb:26:6f:2d:0c:4f:18:e9:de:6e:
2d:f3:0c:2f:f4:61:e6:76:2a:95:f3:59:36:42:3a:b1:55:1a:
4f:20:ed:b1:91:37:94:7e:a9:d1:bc:dd:1f:d4:b9:ae:2c:e9:
9b:05:e4:c5:6d:8a:31:7f:c7:31:53:8d:78:bb:84:6a:aa:5d:
f7:24:2d:a1:b7:68:6b:06:78:2d:66:03:b9:d9:54:85:52:96:
bb:0e:3a:84:12:8b:d5:46:24:1c:28:9f:e4:84:04:a3:5a:11:
8d:a4:18:d1:18:b9:35:c4:c3:56:5d:68:21:2c:47:79:5a:26:
cb:97:80:83:89:a3:08:ca:3b:c8:ad:15:f4:fb:3a:0c:31:ca:
3c:96:21:e7:7e:7a:b9:c6:dc:9b:f7:ee:df:cd:53:4c:b3:27:
25:ff:19:5b:81:10:51:4f:8d:b8:e8:b9:7a:99:d3:f6:05:13:
72:97:51:38:24:aa:8f:39:17:a1:e2:eb:03:3e:cd:3f:68:93:
ec:c9:fa:cd:40:dc:5e:d9:a3:ea:e3:c8:a6:2f:58:f7:76:91:
4e:4e:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org