Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/6cosqZ6hAdV9bBLfB4f9QMa8Hpw.roa
File: 6cosqZ6hAdV9bBLfB4f9QMa8Hpw.roa (raw, json)
Hash identifier: MddieyFOeyUi1PP/py+99tpuCZdKn2wYJGpgcoBv+bU=
Subject key identifier: E9:CA:2C:A9:9E:A1:01:D5:7D:6C:12:DF:07:87:FD:40:C6:BC:1E:9C
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 018CC50156160E7B0C0CE54456A7C55C0EEE
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/6cosqZ6hAdV9bBLfB4f9QMa8Hpw.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47377
IP address blocks: 91.87.0.0/19 maxlen: 19
94.110.160.0/19 maxlen: 19
178.50.0.0/15 maxlen: 19
91.87.32.0/19 maxlen: 19
94.110.96.0/19 maxlen: 19
94.107.0.0/17 maxlen: 17
94.110.128.0/19 maxlen: 19
91.87.96.0/19 maxlen: 19
94.104.0.0/13 maxlen: 23
212.87.96.0/19 maxlen: 24
94.104.64.0/19 maxlen: 19
94.111.0.0/19 maxlen: 19
91.87.128.0/19 maxlen: 19
94.104.96.0/19 maxlen: 19
94.107.192.0/18 maxlen: 18
94.111.32.0/19 maxlen: 19
94.104.0.0/24 maxlen: 24
94.110.192.0/19 maxlen: 19
94.104.17.0/24 maxlen: 24
91.87.64.0/19 maxlen: 19
94.104.24.0/21 maxlen: 21
94.110.224.0/19 maxlen: 19
94.107.128.0/18 maxlen: 18
94.104.32.0/19 maxlen: 19
94.106.128.0/17 maxlen: 17
91.86.0.0/16 maxlen: 16
91.86.0.0/15 maxlen: 20
94.110.32.0/19 maxlen: 19
94.110.64.0/19 maxlen: 19
212.53.0.0/20 maxlen: 24
212.224.128.0/17 maxlen: 19
94.110.0.0/19 maxlen: 19
212.65.32.0/19 maxlen: 19
94.111.96.0/19 maxlen: 19
94.104.160.0/19 maxlen: 19
94.104.192.0/19 maxlen: 19
94.111.128.0/19 maxlen: 19
91.87.160.0/19 maxlen: 19
94.111.64.0/19 maxlen: 19
94.104.128.0/21 maxlen: 21
85.10.64.0/18 maxlen: 24
94.107.246.0/24 maxlen: 24
94.111.224.0/19 maxlen: 19
62.88.80.0/21 maxlen: 21
94.105.48.0/20 maxlen: 20
94.105.64.0/19 maxlen: 19
62.88.0.0/17 maxlen: 21
62.88.0.0/19 maxlen: 19
94.111.160.0/19 maxlen: 19
94.104.240.0/21 maxlen: 21
94.104.252.0/22 maxlen: 22
62.88.32.0/19 maxlen: 19
94.104.248.0/22 maxlen: 22
94.111.192.0/19 maxlen: 19
2a00:1868::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Apr 2024 09:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:56:16:0e:7b:0c:0c:e5:44:56:a7:c5:5c:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9ca2ca99ea101d57d6c12df0787fd40c6bc1e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:ba:ba:64:44:75:51:8f:2f:47:c3:e4:56:
10:e0:61:66:95:f3:2b:84:2d:c2:7e:03:75:35:44:
5e:3c:85:a7:af:9f:6d:00:8c:81:28:8b:c5:0f:a0:
8c:49:f7:12:40:1f:9d:f6:5b:31:b6:8c:d8:af:67:
35:0e:9d:f6:68:f8:55:81:f9:a9:39:e1:bd:ec:e9:
28:0f:78:97:9b:54:c2:77:b6:71:06:80:f6:d4:09:
a6:2a:60:1a:92:3f:57:6b:52:8f:d4:11:ef:24:b2:
9c:97:07:b3:6e:6f:6f:55:3e:fe:99:27:cc:29:bf:
41:f0:03:72:92:dd:fd:be:b2:4e:66:5a:e3:b3:db:
77:2b:7a:b4:39:b7:61:d1:c0:35:5e:20:aa:2c:b4:
ca:5d:4b:cc:1f:c9:bf:28:8e:af:d9:55:a0:b4:1c:
2b:c6:ce:32:3b:19:d7:db:58:38:e5:c3:03:4a:37:
f8:e4:47:b2:ca:ed:b8:c8:54:38:e6:59:30:28:23:
e3:47:db:93:48:8d:9d:73:8d:96:3f:42:ba:57:ea:
3b:a8:29:0c:a8:16:63:1f:c4:c0:89:90:fc:d1:07:
60:f9:fe:22:ae:07:98:d0:08:9c:32:e8:19:e0:e2:
64:1c:1d:02:57:8a:50:84:64:51:47:0b:02:26:93:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CA:2C:A9:9E:A1:01:D5:7D:6C:12:DF:07:87:FD:40:C6:BC:1E:9C
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/6cosqZ6hAdV9bBLfB4f9QMa8Hpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.88.0.0/17
85.10.64.0/18
91.86.0.0/15
94.104.0.0/13
178.50.0.0/15
212.53.0.0/20
212.65.32.0/19
212.87.96.0/19
212.224.128.0/17
IPv6:
2a00:1868::/32
Signature Algorithm: sha256WithRSAEncryption
4e:e1:df:72:c4:13:a6:68:9b:ac:0d:38:ff:8f:2c:d6:fa:06:
25:11:56:b2:f0:8d:ac:57:74:8e:b3:16:2c:37:37:cf:cf:90:
c4:8c:39:1d:6c:72:4f:12:85:f0:41:e4:34:fe:f0:c2:1c:63:
f4:61:c8:7d:74:81:aa:96:36:18:61:1a:7e:eb:cb:30:da:b3:
ec:3a:7e:a9:55:98:3b:08:77:d9:84:01:74:e9:53:9d:bd:90:
25:a5:7f:b5:02:ec:b3:ba:9a:a3:22:7a:81:6c:84:1e:18:6b:
3f:92:8d:8a:65:be:ab:c9:ed:6a:96:ad:ef:79:97:54:41:12:
8b:e2:13:52:46:67:07:aa:3d:f7:26:b7:ec:1d:2d:09:40:1b:
b6:88:5c:ce:16:03:8e:d2:c9:6f:b4:e4:d4:e5:78:59:64:1f:
0d:01:4b:b0:3b:01:f2:e1:2f:6a:d5:bf:44:fe:47:6e:6d:d6:
cf:d6:53:0c:7b:30:7a:d6:2f:1e:ae:b8:ac:eb:c3:8d:7d:c7:
1a:31:ab:d9:e3:bd:01:3f:ab:91:14:75:69:8a:52:fb:01:22:
69:7c:93:1b:c6:7b:21:a1:77:fa:db:d9:fc:e3:d3:bb:c2:f7:
62:30:32:e5:4d:b8:8b:41:33:4f:39:ed:b5:02:f4:88:f1:9b:
25:70:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:58 2024 by rpki-client on console-fra.rpki-client.org