Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/dEVaZwVtzJlAB84Z6gC9uDfNQJk.roa
File: dEVaZwVtzJlAB84Z6gC9uDfNQJk.roa (raw, json)
Hash identifier: gRSVS2cTzVTKsyH2GcboPswU2eLcYIM4odHa1rFD3qk=
Subject key identifier: 74:45:5A:67:05:6D:CC:99:40:07:CE:19:EA:00:BD:B8:37:CD:40:99
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018BCEB8C503EA64A1E13CEEC9A3B09CA28A
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/dEVaZwVtzJlAB84Z6gC9uDfNQJk.roa
Signing time: Tue 14 Nov 2023 16:44:57 +0000
ROA not before: Tue 14 Nov 2023 16:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Nov 2023 17:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:b8:c5:03:ea:64:a1:e1:3c:ee:c9:a3:b0:9c:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 14 16:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74455a67056dcc994007ce19ea00bdb837cd4099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:86:75:f0:23:f2:34:d7:82:b9:80:04:bf:
d4:26:a2:ab:46:fb:03:2f:90:e5:da:16:e9:fc:1e:
9a:2d:3a:be:2b:fe:24:ee:bc:50:b3:d9:75:93:59:
a8:a0:62:9b:13:89:57:e8:47:9d:46:cc:bc:03:a9:
9c:b3:19:54:6e:82:d9:69:87:f0:3c:8d:b3:55:32:
63:a3:5e:54:32:84:75:ab:f8:84:fd:36:84:0d:2c:
e5:8f:cc:a4:cd:15:de:da:65:6d:0b:4e:ab:58:62:
22:4d:67:9e:73:ad:73:a3:40:1a:92:f1:be:85:62:
07:e1:0d:76:28:4e:38:9b:1f:b0:47:e0:48:fa:ed:
9c:ef:fc:69:e4:bf:d6:cf:f9:ed:ed:74:bb:de:0a:
0a:39:03:c4:03:17:23:b0:eb:c0:c5:58:6d:3b:cf:
86:d1:2c:22:88:6b:0d:ef:23:a9:ad:28:fc:b9:36:
3a:5f:4d:4d:83:2c:39:21:53:07:65:72:e2:a0:fa:
99:2b:f7:73:4c:2a:e1:ea:a9:93:61:99:26:fe:14:
61:c2:95:b6:05:68:57:22:93:68:82:65:7d:cb:61:
ed:59:99:3b:75:43:a4:5a:c8:f0:4d:ff:7c:92:46:
7d:d4:36:b3:71:42:a5:6f:35:9a:27:2a:a3:4d:1c:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:5A:67:05:6D:CC:99:40:07:CE:19:EA:00:BD:B8:37:CD:40:99
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/dEVaZwVtzJlAB84Z6gC9uDfNQJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.109.0/24
31.192.240.0/21
45.12.216.0/23
45.12.219.0/24
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
e7:86:6d:a9:06:5c:4e:f5:f8:a1:e1:54:a7:23:8f:29:59:10:
f6:b7:c0:bd:4c:b3:39:56:11:a2:db:52:23:3c:09:58:87:4c:
93:39:1b:8f:9c:04:65:97:6c:8d:a0:d4:25:01:f2:2e:dc:51:
66:e7:3f:60:92:56:f0:2d:9e:e7:bc:da:72:93:b1:54:11:03:
e2:69:a3:99:0e:0b:12:83:56:02:b1:f8:d1:64:3c:9d:64:5a:
e1:43:de:e1:61:6e:75:a0:31:9b:be:f9:3f:b6:66:71:b4:e1:
14:a5:ba:50:8a:e1:38:3c:68:64:b1:e8:11:b0:2d:18:f0:c2:
07:67:48:9e:c7:06:ef:55:73:b4:a3:55:9d:02:3c:a3:d6:d3:
0b:4c:84:85:39:99:81:45:79:05:4d:f4:4b:01:3e:17:8e:ec:
ba:b9:f7:0a:ef:90:99:b2:29:c0:c8:2f:3d:1a:e1:4c:c3:93:
83:5c:2b:ff:bf:7f:23:6b:cc:c9:cf:12:c2:6b:18:ff:fe:95:
cc:49:b4:d2:33:ef:ab:30:f6:6a:8f:44:d0:c6:bc:c4:32:c4:
ec:2a:ca:ce:9c:8d:f8:82:e1:aa:ee:88:28:86:bd:10:7f:04:
e4:35:d2:61:a6:f1:32:b3:6d:09:20:af:e2:2d:10:20:41:06:
dd:e7:5b:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYvOuMUD6mSh4TzuyaOwnKKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjMxMTE0MTY0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDQ1NWE2NzA1NmRjYzk5NDAwN2NlMTllYTAwYmRiODM3Y2Q0MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBKGdfAj8jTXgrmABL/UJqKrRvsD
L5Dl2hbp/B6aLTq+K/4k7rxQs9l1k1mooGKbE4lX6EedRsy8A6mcsxlUboLZaYfw
PI2zVTJjo15UMoR1q/iE/TaEDSzlj8ykzRXe2mVtC06rWGIiTWeec61zo0AakvG+
hWIH4Q12KE44mx+wR+BI+u2c7/xp5L/Wz/nt7XS73goKOQPEAxcjsOvAxVhtO8+G
0SwiiGsN7yOprSj8uTY6X01Ngyw5IVMHZXLioPqZK/dzTCrh6qmTYZkm/hRhwpW2
BWhXIpNogmV9y2HtWZk7dUOkWsjwTf98kkZ91DazcUKlbzWaJyqjTRycvQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFHRFWmcFbcyZQAfOGeoAvbg3zUCZMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvZEVWYVp3VnR6SmxBQjg0WjZnQzl1RGZOUUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAATBNAwQABSf4MAsD
BAEFJ/oDAwMFIDAMAwQFBbJgAwQABbJkMAwDBAMFsmgDBAAFsmoDBAAFsm0DBAMf
wPADBAEtDNgDBAAtDNsDBAK5BSQwDQYJKoZIhvcNAQELBQADggEBAOeGbakGXE71
+KHhVKcjjylZEPa3wL1MszlWEaLbUiM8CViHTJM5G4+cBGWXbI2g1CUB8i7cUWbn
P2CSVvAtnue82nKTsVQRA+Jpo5kOCxKDVgKx+NFkPJ1kWuFD3uFhbnWgMZu++T+2
ZnG04RSlulCK4Tg8aGSx6BGwLRjwwgdnSJ7HBu9Vc7SjVZ0CPKPW0wtMhIU5mYFF
eQVN9EsBPheO7Lq59wrvkJmyKcDILz0a4UzDk4NcK/+/fyNrzMnPEsJrGP/+lcxJ
tNIz76sw9mqPRNDGvMQyxOwqys6cjfiC4aruiCiGvRB/BOQ10mGm8TKzbQkgr+It
ECBBBt3nWy4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org