Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/5WQDivFfo6AAGrwADEFCjI8RTfs.roa
File: 5WQDivFfo6AAGrwADEFCjI8RTfs.roa (raw, json)
Hash identifier: LA2EbiKfTTdxILQdc6RRa655huQLdDi95uU4CdTBPh8=
Subject key identifier: E5:64:03:8A:F1:5F:A3:A0:00:1A:BC:00:0C:41:42:8C:8F:11:4D:FB
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01857039602F07EE21B76B060DE5C2E71A5A
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/5WQDivFfo6AAGrwADEFCjI8RTfs.roa
Signing time: Mon 02 Jan 2023 02:04:46 +0000
ROA not before: Mon 02 Jan 2023 02:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44932
IP address blocks: 91.228.132.0/23 maxlen: 24
185.147.176.0/24 maxlen: 24
185.147.176.0/22 maxlen: 24
185.147.177.0/24 maxlen: 24
185.147.178.0/24 maxlen: 24
185.147.179.0/24 maxlen: 24
91.229.46.0/23 maxlen: 24
188.209.119.0/24 maxlen: 24
185.80.198.0/23 maxlen: 24
188.209.117.0/24 maxlen: 24
188.209.118.0/24 maxlen: 24
188.209.116.0/24 maxlen: 24
188.209.116.0/22 maxlen: 24
2a0b:1fc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:60:2f:07:ee:21:b7:6b:06:0d:e5:c2:e7:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jan 2 02:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e564038af15fa3a0001abc000c41428c8f114dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:8a:29:a5:c7:2f:35:19:c9:ce:c7:dd:0b:
6c:4a:a9:17:e1:0f:24:50:ae:07:df:ce:01:fd:a5:
2d:7b:66:4a:49:90:12:72:e1:51:16:78:f8:88:cf:
37:3d:bc:6a:b5:6f:a9:4f:77:f1:96:a0:43:2b:c5:
b8:71:2a:27:7d:c6:19:c3:3e:57:4a:7c:e9:5f:6b:
9d:e4:bb:32:60:b9:2d:ce:73:91:32:40:5c:25:10:
28:94:3b:65:0d:eb:01:c0:70:78:2c:89:32:95:27:
98:8b:dd:d0:5b:83:82:f6:39:04:57:e4:9f:48:c7:
f1:79:d8:eb:00:ae:73:1a:11:93:06:43:5b:0f:5e:
9f:d9:e1:22:bc:b5:54:ae:db:b4:45:9c:65:36:eb:
93:bd:9e:73:8e:7e:dd:a1:00:e1:c5:b4:e6:7d:f1:
1d:17:a0:1e:e7:bd:1c:f7:a2:e8:b2:5c:ac:1d:9d:
51:95:56:16:95:2f:ba:d9:5e:31:fe:86:e6:95:c7:
47:02:ab:f9:83:40:ed:67:cc:da:dd:86:4f:77:9c:
d2:3f:f6:07:7a:8d:cf:b0:33:73:9d:29:a3:5a:81:
d3:37:4e:b0:01:c8:b3:3a:51:f5:d0:ab:33:9f:0b:
0e:1f:5e:d0:45:15:3d:0c:33:b0:ac:d8:6b:97:a0:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:03:8A:F1:5F:A3:A0:00:1A:BC:00:0C:41:42:8C:8F:11:4D:FB
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/5WQDivFfo6AAGrwADEFCjI8RTfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.132.0/23
91.229.46.0/23
185.80.198.0/23
185.147.176.0/22
188.209.116.0/22
IPv6:
2a0b:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:40:45:6e:19:b7:42:74:b9:25:3e:a7:8f:b0:45:c7:fc:2f:
32:d3:6a:1a:a4:fe:b9:2e:c5:09:26:51:20:45:6e:a3:0a:f6:
b8:b3:32:fa:86:42:9b:10:99:2a:b8:a2:2c:00:b2:30:89:7c:
d8:cf:7d:ad:6a:eb:c4:7f:e3:5a:5e:43:22:1d:79:17:b2:38:
13:73:02:01:17:3b:8a:3c:78:49:22:68:47:38:a2:2c:86:98:
68:2c:2b:fc:6e:70:9c:65:a7:c0:03:12:a6:ea:fb:c2:c8:eb:
d5:41:8a:5e:e5:31:e5:47:ab:10:88:fc:af:5e:ac:c3:e2:e2:
bd:5e:7c:d5:4c:a3:f8:0b:bc:b6:d8:76:13:23:d2:d4:77:b9:
16:22:69:48:37:75:37:cc:56:1a:7c:f4:1f:90:9b:9b:33:ca:
fd:15:de:2f:2c:14:05:31:c9:cb:1b:73:57:02:47:10:db:b9:
46:79:c2:ca:bb:c2:90:48:83:1d:b1:d1:e5:c6:4e:f8:ce:69:
f2:e9:b7:63:d2:9e:a0:47:06:85:5b:2e:6a:42:dd:44:09:96:
47:1a:3a:9f:e9:88:24:b4:35:6a:93:e6:f4:10:35:c9:60:aa:
01:53:20:11:6e:fb:86:6c:f1:24:ce:45:85:03:c6:f3:7e:fe:
b8:10:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:07 2024 by rpki-client on console-ams.rpki-client.org