Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/5nUenhvUAlo-rAiAOZLEFYZ0kwc.roa
File: 5nUenhvUAlo-rAiAOZLEFYZ0kwc.roa (raw, json)
Hash identifier: ueelRSv6fLY9bhytZoNueUK6hzTgp8/qdAI17WevWig=
Subject key identifier: E6:75:1E:9E:1B:D4:02:5A:3E:AC:08:80:39:92:C4:15:86:74:93:07
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018AAEB93E357F50D17379C2EDF634A10CA0
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/5nUenhvUAlo-rAiAOZLEFYZ0kwc.roa
Signing time: Tue 19 Sep 2023 18:34:50 +0000
ROA not before: Tue 19 Sep 2023 18:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 62.182.32.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
31.40.196.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
77.241.72.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Nov 2023 18:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:b9:3e:35:7f:50:d1:73:79:c2:ed:f6:34:a1:0c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Sep 19 18:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6751e9e1bd4025a3eac08803992c41586749307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:0a:54:e0:eb:cd:54:4e:9f:dd:db:fa:c2:
7c:49:aa:28:35:2f:78:13:1d:6f:ea:0c:f0:74:b3:
1f:d0:01:28:1b:86:fc:47:78:a4:3e:cd:7e:03:50:
88:9e:0d:a5:3c:ae:af:04:3e:8f:29:09:95:e3:5b:
b0:18:fc:d5:8e:a4:11:7a:b7:21:72:96:f1:7d:82:
24:97:fb:bd:cf:83:e1:2a:ac:a0:8f:27:98:f9:10:
d2:07:e3:5d:42:6f:69:33:2a:78:9c:4b:ee:71:72:
fc:22:57:91:10:e2:f8:7c:ff:76:7a:03:a4:79:d0:
b1:ca:bc:31:05:b7:f2:e8:7f:88:26:70:94:da:21:
85:bd:71:0d:0c:51:a5:a4:12:94:36:9f:fe:5d:f2:
0c:05:bc:f1:45:d6:23:6d:b5:2c:2c:d7:c1:90:3f:
4d:78:b1:ca:ce:fe:e3:d4:f8:be:14:63:bd:ec:31:
3e:54:fe:ce:3a:21:92:4e:7b:4e:26:e8:fe:47:77:
df:aa:c5:2a:cd:bd:f1:5c:c1:f3:b1:74:c2:ba:8b:
e8:eb:6a:8a:3e:87:6d:c3:d6:15:5d:be:8e:3b:87:
49:f2:66:f2:9e:71:25:62:ec:42:ee:6a:cc:6e:6a:
9c:99:3c:74:2e:14:69:0e:82:62:14:c4:ad:f7:16:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:1E:9E:1B:D4:02:5A:3E:AC:08:80:39:92:C4:15:86:74:93:07
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/5nUenhvUAlo-rAiAOZLEFYZ0kwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
62.182.32.0/22
77.241.72.0/22
84.54.0.0/22
85.8.144.0/22
85.235.72.0/22
139.28.212.0/22
193.32.204.0/22
193.38.44.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
56:9c:a7:f4:ca:60:b9:27:39:da:7c:56:5b:a9:0f:c1:fc:08:
1d:82:9a:99:d8:21:26:a7:3c:c5:60:d5:d6:fe:59:ed:8e:e3:
5b:9b:21:73:ac:d6:47:de:f2:20:76:9d:71:d7:46:12:2b:d0:
c3:26:2e:62:26:59:3f:08:59:e5:42:9a:d2:fd:0d:97:cf:46:
02:f4:a9:02:97:ab:07:42:a0:37:29:96:95:01:34:b5:c2:c2:
62:7b:b3:97:d4:c4:24:6f:6c:46:31:0e:64:5e:d3:d1:63:94:
d9:8b:e5:bc:96:79:4f:7b:7e:bd:e7:26:93:b6:a9:6d:02:d2:
d2:fa:1d:ec:70:96:7d:f0:d6:ad:70:b8:4d:eb:21:4f:88:64:
28:5a:c3:06:38:bf:49:cd:6d:80:92:c6:0f:1e:76:08:e2:50:
98:cc:41:e8:44:75:26:a7:19:a0:9c:77:03:58:9f:c5:72:c8:
38:83:52:ee:36:21:52:33:2b:2d:e6:18:eb:7b:78:c8:af:86:
8a:90:e0:8d:d7:10:2c:cd:74:1a:ba:20:9b:39:8b:79:ab:8d:
29:7b:20:4d:74:52:e5:95:e1:1d:53:33:71:b9:fe:e9:65:bc:
5d:e6:d2:12:c0:c3:5d:c4:52:0f:4b:d1:70:9f:97:8c:53:a3:
b9:60:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org