Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/n5uHnudoLDuBpIIBPNqPCd8P-O4.roa
File: n5uHnudoLDuBpIIBPNqPCd8P-O4.roa (raw, json)
Hash identifier: HIj8abgc8fJjDbI26jArIqdHE710f2yEOa7A10Xzplw=
Subject key identifier: 9F:9B:87:9E:E7:68:2C:3B:81:A4:82:01:3C:DA:8F:09:DF:0F:F8:EE
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01920C2E39D3DE548602A74E5B27AE396FD5
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/n5uHnudoLDuBpIIBPNqPCd8P-O4.roa
Signing time: Thu 19 Sep 2024 21:26:48 +0000
ROA not before: Thu 19 Sep 2024 21:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5503
IP address blocks: 62.171.192.0/19 maxlen: 24
62.171.224.0/22 maxlen: 24
62.171.252.0/22 maxlen: 24
185.192.228.0/22 maxlen: 24
194.154.0.0/19 maxlen: 24
194.238.32.0/19 maxlen: 24
194.238.64.0/19 maxlen: 24
213.18.192.0/18 maxlen: 24
217.177.16.0/20 maxlen: 24
217.177.36.0/22 maxlen: 24
217.177.56.0/21 maxlen: 24
217.177.64.0/21 maxlen: 24
217.177.76.0/22 maxlen: 24
217.177.88.0/21 maxlen: 24
217.179.0.0/17 maxlen: 24
217.179.192.0/18 maxlen: 24
217.180.0.0/21 maxlen: 24
217.180.8.0/22 maxlen: 24
217.180.24.0/21 maxlen: 24
217.180.32.0/22 maxlen: 24
217.180.48.0/22 maxlen: 24
217.181.0.0/18 maxlen: 24
217.181.64.0/19 maxlen: 24
2a02:fb0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 23:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0c:2e:39:d3:de:54:86:02:a7:4e:5b:27:ae:39:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 19 21:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f9b879ee7682c3b81a482013cda8f09df0ff8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:3d:12:1f:23:87:d2:57:cb:69:b5:99:43:
bc:78:79:2e:cc:90:a9:63:8a:1b:d7:62:29:a4:fb:
8b:76:96:1b:a7:0d:06:87:19:ad:f4:82:7c:b0:eb:
12:33:d9:0d:82:5c:66:4b:d4:2a:f2:9d:65:4c:f7:
46:9c:7d:a2:a3:6b:c8:ac:f1:d6:39:52:3e:12:f9:
ee:e3:06:12:57:26:fb:7d:08:89:7f:0a:c1:3e:db:
aa:ac:ef:e3:76:78:4b:fb:6b:2b:0f:be:78:8a:5a:
f3:1a:df:e8:e5:e0:b8:57:3e:93:ec:56:68:1e:7a:
94:a8:d1:92:4a:6a:23:b6:d0:32:65:b7:d8:d0:75:
63:78:5b:f8:b1:53:fb:10:f0:e3:3d:55:1e:fc:17:
34:26:70:a2:8c:ba:b1:7a:5f:cf:75:16:2b:f2:59:
7b:5c:bd:b3:46:47:23:f3:a9:a7:e3:c6:45:3c:c2:
f4:30:7f:d2:8f:76:ff:01:8f:bf:1f:32:5b:0e:e2:
9f:b7:82:4f:17:f7:8b:10:c4:93:9c:91:a3:fe:5d:
7e:b7:25:44:93:05:6b:49:91:8f:65:a9:45:73:95:
22:ee:46:34:cb:12:b9:c6:5a:66:e3:bd:85:0f:62:
64:d0:01:59:81:9e:04:b9:0b:d3:c5:5b:9b:55:65:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:87:9E:E7:68:2C:3B:81:A4:82:01:3C:DA:8F:09:DF:0F:F8:EE
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/n5uHnudoLDuBpIIBPNqPCd8P-O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.192.0-62.171.227.255
62.171.252.0/22
185.192.228.0/22
194.154.0.0/19
194.238.32.0-194.238.95.255
213.18.192.0/18
217.177.16.0/20
217.177.36.0/22
217.177.56.0-217.177.71.255
217.177.76.0/22
217.177.88.0/21
217.179.0.0/17
217.179.192.0-217.180.11.255
217.180.24.0-217.180.35.255
217.180.48.0/22
217.181.0.0-217.181.95.255
IPv6:
2a02:fb0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:d4:dd:2c:45:3a:f9:7c:30:cd:c8:a5:1f:07:b6:44:99:fd:
db:3b:aa:a2:f8:fe:3c:9a:75:ef:5f:7a:18:cf:e3:8e:ed:89:
5c:9a:98:d7:cd:52:48:0f:83:b7:79:39:3e:57:7e:e4:b5:00:
75:c0:f2:15:cd:ca:1d:ca:fa:45:c7:d2:2a:89:1c:9d:d2:24:
4d:b9:3b:2b:7d:2d:ec:55:be:67:48:e3:82:ba:8e:0a:75:92:
ee:ac:b8:d5:96:d0:b6:f9:02:d3:3e:25:32:68:bf:ac:ba:31:
5b:3c:55:b8:c2:03:64:84:6f:0a:00:05:1c:3f:e4:c2:4e:3d:
6b:68:2a:d8:33:45:52:4a:12:fb:85:d6:87:42:4f:db:0e:cd:
18:21:de:3e:56:25:cd:d4:bd:66:06:d0:f7:6a:19:6d:08:3c:
77:a3:7f:6e:80:d5:fb:e1:d2:7d:6f:40:92:c1:80:75:92:7a:
23:ea:ef:e9:a2:3b:77:85:da:e2:e3:8d:52:bc:97:fa:eb:a4:
82:c0:da:04:67:35:59:9a:b3:27:fb:7e:25:b9:df:e7:15:7a:
5f:8c:b0:8a:1a:b6:1a:27:82:69:8e:c0:5f:8d:73:d5:96:66:
1d:2d:b5:db:a1:2e:44:41:20:92:b5:76:16:ad:05:b6:eb:d2:
8e:15:b1:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 02:05:09 2024 by rpki-client on console-fra.rpki-client.org