Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/kYOs2hPKIP-MNdcaQPxFTpdOVoA.roa
File: kYOs2hPKIP-MNdcaQPxFTpdOVoA.roa (raw, json)
Hash identifier: r9KE+/GiX8n1bQO/m7905+lO0V9IvwMIkVZem0BguI0=
Subject key identifier: 91:83:AC:DA:13:CA:20:FF:8C:35:D7:1A:40:FC:45:4E:97:4E:56:80
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0188F797BC4AEA1DD5C9D68F3DA9CE329E60
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/kYOs2hPKIP-MNdcaQPxFTpdOVoA.roa
Signing time: Mon 26 Jun 2023 12:04:56 +0000
ROA not before: Mon 26 Jun 2023 12:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202053
IP address blocks: 185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
5.22.208.0/21 maxlen: 21
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
95.111.192.0/20 maxlen: 20
2a04:3546::/32 maxlen: 32
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3544::/32 maxlen: 32
2a04:3540::/32 maxlen: 32
2a04:3545::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:97:bc:4a:ea:1d:d5:c9:d6:8f:3d:a9:ce:32:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 26 12:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9183acda13ca20ff8c35d71a40fc454e974e5680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:46:4c:7a:10:64:e8:f7:89:cc:78:ef:e4:
09:c9:0c:c5:a8:a8:2d:5f:c1:14:ec:6e:77:89:9e:
41:65:57:32:3f:b6:93:85:89:f1:aa:57:a4:f4:61:
a1:14:b9:94:05:5d:45:74:ce:d9:e7:48:03:e9:67:
50:f4:37:60:07:5b:80:46:43:e5:8c:19:b0:95:b5:
fe:34:a7:67:9f:99:e5:69:19:01:af:ea:4f:b0:26:
59:ff:54:6e:6f:d7:9c:8c:7b:01:a2:34:27:10:c4:
aa:04:18:8e:36:2e:56:df:12:84:49:90:53:59:db:
7d:e4:3f:6f:2d:39:8a:f7:3f:a3:c6:f4:16:75:d0:
95:ef:e4:3c:3f:36:38:78:ca:da:e4:e0:e9:d6:60:
4a:98:15:77:72:8e:1b:3d:c6:b5:71:6f:23:34:d9:
be:0c:50:b3:09:4b:ff:eb:b8:3c:6f:e5:5d:00:b4:
5f:38:76:69:d7:a6:fe:49:6b:1e:af:0a:cb:43:90:
19:29:9c:00:1b:48:72:f1:c6:30:3f:f3:8c:6f:f2:
0b:95:83:24:62:37:8f:ad:90:b4:56:f9:0f:a1:bc:
e3:ad:25:df:c4:36:60:f7:d8:e8:8b:1c:bf:ea:b1:
7e:a2:aa:77:73:f5:49:33:63:3c:33:8d:92:5b:6e:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:AC:DA:13:CA:20:FF:8C:35:D7:1A:40:FC:45:4E:97:4E:56:80
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/kYOs2hPKIP-MNdcaQPxFTpdOVoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
95.111.192.0-95.111.211.255
95.111.216.0/21
185.70.196.0/22
194.62.96.0/22
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:91:d7:ad:1e:4b:1d:e4:c6:97:a6:e1:9b:18:f0:6b:d2:82:
55:d9:9d:9e:a4:0a:be:73:6b:22:9a:6c:a8:df:ad:ac:b3:8a:
2d:4a:ea:63:fd:0c:0b:45:60:55:70:97:1e:b0:bc:52:8b:0c:
22:c9:3a:68:11:13:94:74:8c:79:23:20:54:86:dd:57:a4:fc:
42:55:61:52:7a:e0:29:e7:70:e7:80:7d:77:de:d8:7f:d5:1a:
f8:90:ff:6f:02:9c:10:db:7c:dc:fc:35:13:a2:c3:78:0c:9a:
f1:de:f3:ac:40:e2:14:06:b7:3b:ee:22:02:42:66:b4:47:a6:
21:af:73:94:8d:fb:2b:3f:2f:52:9e:1d:a7:82:38:d0:19:8e:
24:15:63:1b:fc:55:ef:eb:97:2d:72:8e:77:e3:6a:68:94:2c:
14:19:15:fb:b5:91:f2:b5:dc:39:95:11:e3:58:46:bd:fd:6b:
de:ae:5c:c7:3f:58:15:4d:43:a0:9b:2e:04:f3:d9:b0:b3:36:
f2:00:59:aa:2d:6e:a0:3f:1e:7c:18:8a:56:83:92:65:8f:a7:
40:3e:e4:28:a1:a5:aa:e2:a3:a5:e8:e2:91:60:30:21:3e:6f:
69:1f:ec:ec:e0:60:6d:5f:bb:58:ba:29:9b:ed:f8:46:d4:82:
96:8f:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net