Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x5OtHDJD2_wS3l4YeJRnywMI-d4.roa
File: x5OtHDJD2_wS3l4YeJRnywMI-d4.roa (raw, json)
Hash identifier: GoBVz67NaB/zk9niGr0CcK8C6x774FYZp/p2H3wvWdk=
Subject key identifier: C7:93:AD:1C:32:43:DB:FC:12:DE:5E:18:78:94:67:CB:03:08:F9:DE
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01872C96223C0F2AE8471FB07523381F54F6
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x5OtHDJD2_wS3l4YeJRnywMI-d4.roa
Signing time: Wed 29 Mar 2023 08:57:29 +0000
ROA not before: Wed 29 Mar 2023 08:57:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.96.0/21 maxlen: 21
5.144.176.0/21 maxlen: 21
5.178.99.0/24 maxlen: 24
5.178.102.0/24 maxlen: 24
5.178.101.0/24 maxlen: 24
5.144.182.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/21 maxlen: 21
5.178.111.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.178.110.0/24 maxlen: 24
5.178.108.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 29 Mar 2023 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:96:22:3c:0f:2a:e8:47:1f:b0:75:23:38:1f:54:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 29 08:57:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c793ad1c3243dbfc12de5e18789467cb0308f9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:09:6c:99:7a:a7:a0:db:83:e0:80:bc:e7:
6c:f8:0d:3f:25:76:80:b1:76:8f:58:40:3b:49:87:
93:fe:e5:84:9b:3e:a5:17:c5:2c:bf:42:4c:61:7d:
35:5d:7a:79:7d:b1:8e:27:e5:3f:c5:17:e9:d0:19:
0a:74:37:19:e7:0e:ad:aa:30:a8:bd:3d:db:34:58:
a5:bc:e3:0d:5c:28:49:19:74:ef:9f:97:c0:99:e1:
71:c5:d0:d9:8c:58:d7:1a:a9:9f:2f:8b:4e:84:8b:
11:9c:df:cf:3b:34:56:63:6b:34:72:6a:3e:a8:7b:
d2:82:ef:9d:93:32:21:4d:bc:82:a1:3f:21:de:94:
b1:e0:31:e4:db:39:23:4b:43:fd:b9:b8:00:8a:64:
b7:7c:c7:27:90:d9:87:9f:78:01:6a:1a:d7:e6:6b:
74:08:a8:a3:75:cb:10:22:2c:c4:d3:96:d6:97:4f:
84:2d:a9:66:0b:b4:7c:a6:bb:b1:09:50:3e:2e:e0:
ab:d1:e7:84:76:32:7f:5a:13:8d:fc:9a:8d:38:58:
b8:ac:c8:eb:cf:a3:57:8e:a7:61:ef:7c:8c:fe:5c:
0f:8d:f2:bc:fd:da:2f:5d:d4:6b:f9:49:71:27:07:
e5:14:8e:c1:60:6d:e9:45:57:10:fd:3b:33:9e:64:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:AD:1C:32:43:DB:FC:12:DE:5E:18:78:94:67:CB:03:08:F9:DE
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x5OtHDJD2_wS3l4YeJRnywMI-d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.144.176.0/21
5.178.96.0/20
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b9:40:46:32:0e:b5:5e:10:47:79:16:58:19:ca:f8:85:18:
2f:fb:36:3c:77:cf:fa:44:6e:32:68:fb:10:f9:7f:25:8f:61:
6b:9b:d7:bf:4a:09:f8:44:8a:4b:a3:17:aa:cd:6f:0e:c6:49:
a3:01:6a:7a:7d:72:c7:96:4c:0f:b1:25:e7:09:62:ae:d3:4a:
32:82:75:a6:86:f1:e4:e7:87:16:01:dc:ba:7a:7c:d2:f3:27:
78:f3:a2:94:7c:94:1f:da:77:b4:8b:3d:07:42:a3:71:2a:e6:
b6:ee:30:5d:0c:e5:2e:d4:56:f5:d2:0a:89:a1:34:11:b3:97:
ab:17:cc:96:b4:a8:12:8e:67:f3:a7:ee:98:d2:6f:26:4f:a0:
04:a9:bb:b8:78:f4:71:e5:02:6b:4c:e2:3b:4c:2a:c0:21:a0:
d5:47:55:6e:eb:09:0d:f2:76:da:6d:fa:61:e3:6d:7e:c0:91:
5c:5e:58:4d:79:90:e8:14:75:10:9f:fe:09:b2:8c:8e:f9:79:
57:6f:dc:45:1c:85:46:fd:95:fe:76:17:06:40:59:af:17:56:
d3:01:bc:96:bc:2a:6a:4b:f8:7a:e6:4a:f3:72:cb:a3:86:c9:
33:26:61:57:e1:88:d1:5b:fe:ad:2b:ba:43:d5:59:e2:21:87:
8b:84:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org