Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/I5CU3o0W7BM2z03bgXwZEFci23w.roa
File: I5CU3o0W7BM2z03bgXwZEFci23w.roa (raw, json)
Hash identifier: 3G6W8tsc+diubKafLZi6+EbCPPJ1FD/9LI+BQ6n6FaI=
Subject key identifier: 23:90:94:DE:8D:16:EC:13:36:CF:4D:DB:81:7C:19:10:57:22:DB:7C
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01877727FBC4F800162EE5575993FE368DC5
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/I5CU3o0W7BM2z03bgXwZEFci23w.roa
Signing time: Wed 12 Apr 2023 20:28:41 +0000
ROA not before: Wed 12 Apr 2023 20:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 178.80.64.0/21 maxlen: 21
178.80.72.0/21 maxlen: 21
178.80.80.0/21 maxlen: 21
178.80.88.0/21 maxlen: 21
178.80.96.0/20 maxlen: 20
178.80.0.0/20 maxlen: 20
178.80.16.0/20 maxlen: 20
178.80.32.0/20 maxlen: 20
178.80.48.0/20 maxlen: 20
178.80.160.0/20 maxlen: 20
178.80.176.0/20 maxlen: 20
178.80.192.0/19 maxlen: 19
178.80.112.0/20 maxlen: 20
178.80.128.0/20 maxlen: 20
178.80.144.0/20 maxlen: 20
5.109.176.0/20 maxlen: 20
46.153.128.0/20 maxlen: 20
5.109.192.0/20 maxlen: 20
46.153.144.0/20 maxlen: 20
5.109.208.0/20 maxlen: 20
46.153.160.0/19 maxlen: 19
5.109.224.0/20 maxlen: 20
31.166.192.0/19 maxlen: 19
5.109.128.0/20 maxlen: 20
5.109.144.0/20 maxlen: 20
46.153.96.0/19 maxlen: 19
31.166.224.0/20 maxlen: 20
5.109.160.0/20 maxlen: 20
46.153.240.0/20 maxlen: 20
46.153.192.0/20 maxlen: 20
5.109.240.0/20 maxlen: 20
46.153.208.0/20 maxlen: 20
46.153.224.0/20 maxlen: 20
46.152.160.0/20 maxlen: 20
5.108.224.0/20 maxlen: 20
31.166.32.0/19 maxlen: 19
46.152.176.0/20 maxlen: 20
178.81.240.0/20 maxlen: 20
46.152.192.0/19 maxlen: 19
5.108.240.0/20 maxlen: 20
5.109.0.0/20 maxlen: 20
5.108.160.0/20 maxlen: 20
5.108.176.0/20 maxlen: 20
178.81.192.0/20 maxlen: 20
46.152.128.0/19 maxlen: 19
5.108.192.0/20 maxlen: 20
31.166.0.0/20 maxlen: 20
178.81.208.0/20 maxlen: 20
31.166.16.0/20 maxlen: 20
178.81.224.0/20 maxlen: 20
5.108.208.0/20 maxlen: 20
46.153.16.0/20 maxlen: 20
5.109.80.0/20 maxlen: 20
46.153.32.0/20 maxlen: 20
5.109.96.0/20 maxlen: 20
31.166.160.0/19 maxlen: 19
46.153.48.0/20 maxlen: 20
5.109.112.0/20 maxlen: 20
46.153.64.0/19 maxlen: 19
5.109.16.0/20 maxlen: 20
46.152.224.0/20 maxlen: 20
5.109.32.0/20 maxlen: 20
46.152.240.0/20 maxlen: 20
5.109.48.0/20 maxlen: 20
46.153.0.0/20 maxlen: 20
5.109.64.0/20 maxlen: 20
31.166.128.0/20 maxlen: 20
5.108.0.0/20 maxlen: 20
178.81.16.0/20 maxlen: 20
5.108.16.0/20 maxlen: 20
178.81.32.0/20 maxlen: 20
178.81.48.0/20 maxlen: 20
5.108.32.0/20 maxlen: 20
5.108.48.0/20 maxlen: 20
178.80.224.0/19 maxlen: 19
178.81.0.0/20 maxlen: 20
46.152.64.0/19 maxlen: 19
5.108.112.0/20 maxlen: 20
5.108.128.0/20 maxlen: 20
5.108.144.0/20 maxlen: 20
46.152.96.0/19 maxlen: 19
46.152.0.0/19 maxlen: 19
5.108.64.0/20 maxlen: 20
5.108.80.0/20 maxlen: 20
46.152.32.0/19 maxlen: 19
5.108.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 12 Apr 2023 20:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:27:fb:c4:f8:00:16:2e:e5:57:59:93:fe:36:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Apr 12 20:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=239094de8d16ec1336cf4ddb817c19105722db7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:bf:d3:9e:ad:7b:21:8d:45:2e:fc:ae:11:
88:2a:8d:2b:20:5b:70:7e:ba:d8:28:d7:92:41:2b:
01:6d:e3:d0:3d:46:a9:20:9c:41:6b:5c:90:8c:86:
6c:7a:70:df:1d:ba:64:e8:60:50:5b:19:a7:ab:6d:
81:7f:4b:7c:b9:16:bd:9f:be:1a:b1:c0:9d:4e:4d:
99:8b:74:f4:cb:75:96:8e:84:a4:fb:aa:7b:05:8f:
ee:7c:38:9c:c9:9a:97:30:c4:b2:04:5e:4b:94:4e:
37:67:52:a4:e3:79:66:11:a7:dc:7d:38:86:cd:55:
b5:42:9d:a7:0b:28:15:3c:c7:46:d2:67:ce:66:57:
9c:81:17:35:f3:fb:1c:fe:7d:2e:78:11:d7:22:15:
52:b7:a7:db:c3:d3:29:a2:76:ee:d0:bc:9c:8f:2a:
b3:cb:07:43:16:f7:b0:53:b5:e7:6d:b1:6a:a6:7a:
00:e9:57:98:17:0f:ce:71:a8:a0:7f:19:38:99:3c:
52:9e:24:18:4c:12:b4:c3:9a:b1:61:4a:c9:77:75:
e4:bc:eb:4f:a7:c1:61:ee:64:65:fb:3c:17:99:47:
62:62:9f:ad:b8:61:c5:d9:cc:bc:40:25:f0:f3:68:
f1:79:21:7d:0a:cd:13:39:a2:d9:ec:90:11:ef:b8:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:94:DE:8D:16:EC:13:36:CF:4D:DB:81:7C:19:10:57:22:DB:7C
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/I5CU3o0W7BM2z03bgXwZEFci23w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.108.0.0/15
31.166.0.0/18
31.166.128.0/20
31.166.160.0-31.166.239.255
46.152.0.0/15
178.80.0.0-178.81.63.255
178.81.192.0/18
Signature Algorithm: sha256WithRSAEncryption
31:77:de:3c:c8:fa:b4:17:fc:0a:3a:60:df:fa:d3:ba:8a:4c:
73:07:3a:5d:aa:a9:3a:00:4f:2c:25:e1:8b:a7:c0:71:f3:d9:
d0:15:18:bb:25:09:c3:3d:56:e8:6e:d0:8a:3d:69:02:16:20:
65:23:51:0e:40:3b:ae:92:41:8d:38:32:6e:4f:e0:03:6c:14:
5c:42:94:8d:a3:ee:94:4b:75:b2:bf:6c:a0:9b:0b:de:6f:b9:
ab:99:ec:12:c9:62:56:ee:13:da:a0:96:ff:45:b3:7b:60:4c:
85:f3:fe:a9:86:7b:e5:9d:c9:60:4d:45:97:d7:81:17:86:58:
3c:88:d6:f8:6d:6d:f2:1a:39:5f:8d:86:82:68:e9:0d:21:5c:
53:d4:41:bf:7c:49:71:15:59:af:4a:6f:4a:6e:aa:6e:be:21:
ac:aa:6b:58:45:a7:26:26:ab:c6:45:8a:68:0d:6d:05:da:c8:
90:14:a5:24:bb:25:37:ff:bb:c7:b6:e1:48:48:13:c7:b9:95:
fa:bd:23:dd:64:ae:28:64:44:c1:72:04:5b:81:eb:ac:65:bc:
33:22:b5:58:8a:64:e3:90:b1:69:98:9b:ea:df:91:f8:e9:c7:
20:ec:36:f8:62:95:19:69:01:b4:5a:3e:a0:e4:21:20:d6:c0:
13:ac:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org