Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/v5u4voi_JhO16V3Z7tCXimXdKIY.roa
File: v5u4voi_JhO16V3Z7tCXimXdKIY.roa (raw, json)
Hash identifier: XugoW397VtfSqxbjffWBC9yom9HLqtieJQiVIB5gyUk=
Subject key identifier: BF:9B:B8:BE:88:BF:26:13:B5:E9:5D:D9:EE:D0:97:8A:65:DD:28:86
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 0187DD010034542351669663C604E881FDE9
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/v5u4voi_JhO16V3Z7tCXimXdKIY.roa
Signing time: Tue 02 May 2023 15:07:22 +0000
ROA not before: Tue 02 May 2023 15:07:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50926
IP address blocks: 188.95.112.0/21 maxlen: 24
185.176.9.0/24 maxlen: 24
185.176.8.0/24 maxlen: 24
185.176.11.0/24 maxlen: 24
185.176.10.0/24 maxlen: 24
84.246.208.0/21 maxlen: 24
109.68.80.0/21 maxlen: 24
91.213.46.0/24 maxlen: 24
31.24.152.0/21 maxlen: 24
185.70.92.0/22 maxlen: 24
91.142.208.0/20 maxlen: 24
188.164.192.0/21 maxlen: 24
185.23.68.0/22 maxlen: 24
94.127.186.0/24 maxlen: 24
94.127.185.0/24 maxlen: 24
94.127.184.0/24 maxlen: 24
94.127.188.0/24 maxlen: 24
94.127.187.0/24 maxlen: 24
94.127.191.0/24 maxlen: 24
94.127.190.0/24 maxlen: 24
185.222.156.0/22 maxlen: 24
185.129.248.0/22 maxlen: 24
149.62.168.0/21 maxlen: 24
195.5.116.0/23 maxlen: 24
5.175.40.0/21 maxlen: 24
91.200.140.0/22 maxlen: 24
185.101.226.0/24 maxlen: 24
185.101.225.0/24 maxlen: 24
31.24.40.0/21 maxlen: 24
2a01:4b80::/32 maxlen: 32
2a00:5ac0::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 10 May 2023 13:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:01:00:34:54:23:51:66:96:63:c6:04:e8:81:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: May 2 15:07:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf9bb8be88bf2613b5e95dd9eed0978a65dd2886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:4a:16:b1:19:a2:d6:8c:1c:b0:5e:a1:19:
7d:71:eb:22:e2:ad:19:e6:54:d4:9c:55:69:ab:60:
21:59:18:67:ad:96:c4:e7:fe:fc:13:4e:58:2c:a5:
55:72:04:f2:3b:3d:af:bc:fb:2a:df:29:5e:e3:7b:
0b:30:1b:01:bc:8b:e1:68:99:ef:3d:9a:05:7d:a1:
99:73:f0:09:ee:66:21:e4:37:28:9a:d4:03:62:6a:
a2:50:6d:0f:2f:62:54:8f:d6:f1:0d:7f:e9:18:dc:
de:27:e7:3b:a4:25:8a:5a:50:74:cb:f8:e3:14:10:
e8:c7:e4:c2:3f:52:b6:99:0c:9c:b4:83:fa:70:66:
eb:7c:48:fe:64:72:34:2f:5b:0b:1c:ed:de:25:ba:
ea:95:fb:30:5d:77:2f:49:7e:b7:7a:71:60:59:bd:
a3:5c:7a:5b:a7:11:9b:59:9b:7d:e0:c1:12:de:6f:
65:6d:8f:01:5b:4f:28:6b:93:9f:87:37:c3:3f:c6:
0a:3d:75:9a:f8:ce:83:79:f2:d6:78:82:19:89:32:
09:72:6c:44:c5:81:78:2b:b8:10:b8:74:cf:85:d1:
7d:ec:9b:b8:0c:76:f4:9c:4d:6d:1d:2a:57:61:8a:
8a:7a:a6:d6:6d:c8:ca:22:4c:ec:f8:7b:c8:f9:0d:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:B8:BE:88:BF:26:13:B5:E9:5D:D9:EE:D0:97:8A:65:DD:28:86
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/v5u4voi_JhO16V3Z7tCXimXdKIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.40.0/21
31.24.40.0/21
31.24.152.0/21
84.246.208.0/21
91.142.208.0/20
91.200.140.0/22
91.213.46.0/24
94.127.184.0-94.127.188.255
94.127.190.0/23
109.68.80.0/21
149.62.168.0/21
185.23.68.0/22
185.70.92.0/22
185.101.225.0-185.101.226.255
185.129.248.0/22
185.176.8.0/22
185.222.156.0/22
188.95.112.0/21
188.164.192.0/21
195.5.116.0/23
IPv6:
2a00:5ac0::/44
2a01:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
5a:11:a9:60:c5:be:04:c0:29:3d:74:8c:75:39:3e:bd:44:e6:
b7:e3:b8:61:7f:df:ea:8a:e8:b8:ce:a4:88:14:de:bb:5d:97:
be:b7:7b:b4:0b:c8:5a:d3:02:cc:16:68:09:ea:9d:a3:84:a4:
fb:3d:48:d7:7e:de:39:10:ba:4d:fb:89:f6:80:9e:aa:f0:f0:
a0:ba:2b:82:56:12:62:d2:0e:c5:cd:bb:6c:bb:82:45:71:0e:
68:6a:81:a2:50:bf:98:73:b6:13:65:77:52:8b:f7:93:90:be:
0f:b6:b3:cc:48:ef:0a:63:f5:55:47:c3:9a:d6:83:0e:30:da:
2f:d9:9a:75:6c:92:04:30:05:ba:b8:63:10:40:b4:a3:fd:47:
a3:d5:e3:28:72:03:5d:af:93:5a:c2:75:2b:72:54:90:7b:9c:
13:d0:81:10:08:07:1f:df:ad:15:82:e0:a3:cd:1b:65:1c:e8:
18:6e:dd:4d:99:63:37:fe:5d:60:7b:9d:3c:ae:46:36:c9:2d:
e2:0c:c2:58:f4:0a:61:7a:d0:be:a4:f4:c8:61:8f:ce:49:60:
92:8a:0d:3d:6b:90:5d:ee:74:ff:7c:1c:7e:00:f2:b0:0a:3b:
b0:7c:26:09:35:d3:f8:85:21:d5:b5:41:54:45:ee:b1:e7:0b:
9c:a2:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-fra.rpki-client.org