Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8byaAubWVc7wJHbb5lPxRJQs2ZY.roa
File: 8byaAubWVc7wJHbb5lPxRJQs2ZY.roa (raw, json)
Hash identifier: /hFnU+6in+fMkqeoJIEjTwNI4k2D4MZmQzyTZqT8PjE=
Subject key identifier: F1:BC:9A:02:E6:D6:55:CE:F0:24:76:DB:E6:53:F1:44:94:2C:D9:96
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018F389C465246FFC129409FA99C4092194F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8byaAubWVc7wJHbb5lPxRJQs2ZY.roa
Signing time: Thu 02 May 2024 09:21:56 +0000
ROA not before: Thu 02 May 2024 09:21:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 20:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:9c:46:52:46:ff:c1:29:40:9f:a9:9c:40:92:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 2 09:21:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1bc9a02e6d655cef02476dbe653f144942cd996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:94:22:00:e5:dc:1f:14:ad:9c:6a:e0:d5:
9e:eb:3f:0a:3d:d2:f5:d6:e3:f2:4b:07:3f:8e:39:
1c:94:78:b3:23:f1:19:d9:34:9e:c8:c7:85:67:c5:
f8:55:80:cb:2c:75:3c:17:07:94:17:e3:80:9c:49:
5f:a8:a3:4a:e2:86:3a:41:eb:f8:b5:6d:94:1c:a2:
88:e5:79:ed:53:17:56:4e:50:9f:1f:c6:fc:7f:b8:
a9:d7:cf:3a:7e:a8:1a:50:cc:26:39:1d:ba:7f:f4:
41:6b:3f:ac:12:21:a5:83:0a:5e:95:45:c9:e0:8a:
de:a2:db:1e:5d:eb:22:61:fe:41:4c:8d:30:a4:58:
75:5e:06:e2:c0:5c:49:ec:51:da:71:eb:53:37:5d:
f1:66:f4:2d:8f:20:ce:04:6a:5d:44:38:59:81:9d:
2c:99:33:32:7e:55:f1:f1:e3:bd:95:92:02:51:3d:
02:e8:7a:a9:b4:01:82:9a:a2:98:62:fe:c0:b9:4f:
1e:03:64:a9:5d:30:39:78:fa:85:34:c7:7d:33:e6:
4f:52:dc:c7:b6:c6:cd:3b:a9:e4:97:36:02:63:6d:
fa:e8:cb:50:4c:ac:11:a0:bc:3f:b8:c4:53:ae:72:
00:7b:75:0f:2b:ba:65:c5:56:f2:2e:9a:af:24:68:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:9A:02:E6:D6:55:CE:F0:24:76:DB:E6:53:F1:44:94:2C:D9:96
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8byaAubWVc7wJHbb5lPxRJQs2ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.94.170.0/24
91.223.110.0/24
193.30.241.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6b:b1:c3:7d:7a:af:50:5d:86:8f:7e:74:a2:a7:13:fd:e7:
79:aa:c1:c6:bf:28:aa:8c:19:fe:c1:6d:b3:c8:4a:f7:40:68:
3c:ba:90:04:9a:4a:42:a7:04:a6:3f:a0:9c:77:25:8a:23:31:
cf:fd:28:0f:f0:48:73:52:a6:05:95:cc:f0:bd:ce:66:52:74:
3b:b1:da:db:58:a9:1f:e3:fe:f0:2b:55:51:c5:68:21:bc:0d:
33:ea:70:b1:f3:2a:5d:93:fe:3e:79:b9:28:15:53:a9:ac:a1:
f3:c4:60:b5:dd:5f:1d:5e:cb:41:cb:16:ce:19:56:4c:09:f6:
05:b5:f7:1f:b2:e8:fc:f6:16:37:4e:8e:ef:5f:75:f9:f2:6b:
02:d9:68:6e:c0:cd:b5:ef:30:f2:bb:51:78:ef:ba:7b:06:f6:
20:34:37:e3:f7:fa:b0:0c:68:03:1d:e6:8b:b5:3a:c8:02:93:
07:81:fa:18:73:43:fb:ec:28:2c:04:74:80:26:1e:51:03:d5:
92:43:95:f9:94:e2:3a:b0:f3:35:be:2e:4c:ed:1c:c1:eb:3b:
f8:28:55:29:72:4f:94:07:cf:c2:4d:93:f8:15:41:5e:f6:cb:
22:9c:b3:23:35:03:22:4a:25:3c:f4:0a:6c:69:bc:34:d7:0e:
c8:f4:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org