Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ITHZePuRxOzlBRpHknPT7YLYBG8.roa
File: ITHZePuRxOzlBRpHknPT7YLYBG8.roa (raw, json)
Hash identifier: hMHilYYfP1qcOjNLQxRRHXrmMuJH3cpbmUdJWJf/XDA=
Subject key identifier: 21:31:D9:78:FB:91:C4:EC:E5:05:1A:47:92:73:D3:ED:82:D8:04:6F
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0186268D247BA020220D454AAE46BF7644FD
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ITHZePuRxOzlBRpHknPT7YLYBG8.roa
Signing time: Mon 06 Feb 2023 11:47:09 +0000
ROA not before: Mon 06 Feb 2023 11:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.130.0/24 maxlen: 24
161.30.129.0/24 maxlen: 24
161.30.33.0/24 maxlen: 24
161.30.40.0/23 maxlen: 23
161.30.44.0/24 maxlen: 24
161.30.203.0/24 maxlen: 24
161.30.8.0/24 maxlen: 24
161.30.9.0/24 maxlen: 24
161.30.7.0/24 maxlen: 24
161.30.5.0/24 maxlen: 24
161.30.16.0/22 maxlen: 22
161.30.12.0/22 maxlen: 22
161.30.22.0/23 maxlen: 23
161.30.237.0/24 maxlen: 24
161.30.238.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:8d:24:7b:a0:20:22:0d:45:4a:ae:46:bf:76:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Feb 6 11:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2131d978fb91c4ece5051a479273d3ed82d8046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:01:b3:02:2f:06:ec:1b:1e:9c:0a:29:15:
84:87:24:dc:66:84:a1:5e:a8:ec:42:bd:35:6b:0f:
17:c5:00:73:f8:b9:fb:b1:22:7e:1c:6d:e4:76:e3:
df:72:4d:c0:ee:84:78:9c:ae:36:a3:45:ec:27:70:
57:c0:b2:c4:48:eb:95:ea:64:ea:e5:3b:4e:bb:d9:
f0:5a:86:4d:f9:8e:05:05:b1:94:fe:77:66:1b:58:
67:02:38:3d:cc:47:98:b2:a0:0d:48:2a:e7:1e:94:
dd:72:42:da:8e:97:cf:8f:e3:95:6c:03:e7:df:bc:
05:96:53:21:31:21:50:bc:32:87:7e:30:97:93:00:
0b:94:00:bf:9d:6c:cb:88:a9:9d:64:db:8b:66:8d:
5c:78:69:f9:04:ec:1e:98:a1:42:76:d7:6e:c6:2b:
6d:83:f8:de:32:6a:76:a3:c2:55:8b:63:6f:d0:de:
ba:1e:18:34:a6:93:4e:c9:29:91:a8:ed:c1:ce:8c:
71:ac:f0:68:b0:2d:4d:5c:96:0b:1e:87:75:65:b3:
cc:23:19:cc:1e:e1:9b:d3:48:f1:24:47:15:fe:54:
16:ea:1e:20:53:b2:3a:98:4c:19:43:36:f5:cd:f6:
6d:05:c7:15:69:4b:25:1e:ce:1b:ae:00:51:31:05:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:31:D9:78:FB:91:C4:EC:E5:05:1A:47:92:73:D3:ED:82:D8:04:6F
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/ITHZePuRxOzlBRpHknPT7YLYBG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.5.0/24
161.30.7.0-161.30.9.255
161.30.12.0-161.30.19.255
161.30.22.0/23
161.30.33.0/24
161.30.40.0/23
161.30.44.0/24
161.30.129.0-161.30.130.255
161.30.203.0/24
161.30.236.0/22
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
90:51:5c:c0:42:52:da:40:da:36:d1:08:8a:e8:af:81:ec:08:
cb:d0:b6:af:11:35:ca:c5:18:0f:73:8c:9e:c4:e8:be:ee:14:
b1:d1:d9:7c:4a:f5:b5:c0:56:8a:ef:e7:69:a8:9b:91:60:19:
72:3c:8a:96:b5:cc:4c:94:a3:19:67:58:7c:f2:78:e6:43:ea:
b4:88:3d:17:4a:9a:a2:fb:66:07:e8:59:c0:ef:bd:95:7d:b8:
8f:af:14:be:32:0a:08:53:f1:b7:c8:3f:4b:a9:ff:ec:6b:92:
99:cc:71:8b:8d:2e:34:90:58:9f:94:a2:0f:19:af:93:d5:f9:
0c:7d:2a:7e:20:61:56:0a:a3:fb:77:e1:b9:52:3c:95:9e:6e:
66:ba:d7:5f:78:55:c6:e9:0f:c4:f9:9e:bb:d9:f6:90:43:19:
49:1e:ab:18:97:d8:d5:e5:1f:73:be:e8:05:c6:a0:62:4f:1e:
03:7a:a4:55:38:71:1e:43:b9:13:49:f7:b4:14:c7:c7:36:b0:
1b:cb:88:cc:da:4e:5f:54:51:38:e1:de:92:47:bc:35:e5:e5:
bb:9a:87:b1:9b:16:71:f3:de:fa:30:0e:d9:53:67:d3:b4:80:
87:40:e8:64:59:93:87:e7:b5:40:ae:12:2b:50:ca:32:70:e0:
a7:49:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-ams.rpki-client.org