Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/om9hjKNdEddTj198-RtSyjqgzxQ.roa
File: om9hjKNdEddTj198-RtSyjqgzxQ.roa (raw, json)
Hash identifier: 9jnmaLW0GWYFuNM5PL3RHh3z8i74kV7Jqoi8EWK03o0=
Subject key identifier: A2:6F:61:8C:A3:5D:11:D7:53:8F:5F:7C:F9:1B:52:CA:3A:A0:CF:14
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 01932C65CF5183BF56A4217A36053EE63196
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/om9hjKNdEddTj198-RtSyjqgzxQ.roa
Signing time: Thu 14 Nov 2024 20:38:09 +0000
ROA not before: Thu 14 Nov 2024 20:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 931
IP address blocks: 5.252.164.0/24 maxlen: 24
5.252.165.0/24 maxlen: 24
31.216.59.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 20:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:65:cf:51:83:bf:56:a4:21:7a:36:05:3e:e6:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Nov 14 20:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a26f618ca35d11d7538f5f7cf91b52ca3aa0cf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:d2:81:de:89:74:fb:53:b0:c1:a8:1e:bb:
91:30:12:4e:2b:85:2d:7c:27:a8:0b:fd:69:21:c6:
ae:90:ac:c0:27:0c:28:f5:47:23:03:9e:e7:d9:52:
ac:d0:bd:fe:1c:3f:9b:66:c9:cc:e6:37:45:21:ef:
be:74:79:d8:00:e3:b4:12:72:5e:42:52:86:54:6c:
45:e7:b4:1c:8e:7c:77:ab:fa:61:66:9e:a2:38:ce:
90:7c:54:fc:45:5d:e4:e2:2a:74:29:52:93:06:e2:
9e:89:b2:70:1f:21:e7:6c:e2:fc:16:6b:f9:62:e8:
80:29:9a:f1:80:ea:16:ed:c9:7b:b7:63:cc:83:28:
8a:5a:3b:a4:c5:8c:89:d3:12:68:55:25:16:a8:d0:
cc:0e:1d:3b:00:ba:a4:cf:2a:5d:61:0f:d2:b0:f3:
56:72:10:ae:0d:a6:29:df:af:49:0c:86:e2:ff:8e:
5a:7f:8e:b9:d2:e1:e0:aa:f4:be:0d:33:ab:1f:35:
1c:6c:1b:15:3b:ff:f2:dc:c9:2e:ed:66:51:d6:17:
ca:a0:03:87:7a:a5:57:8d:46:8e:05:28:5c:06:89:
c9:c1:41:f2:12:91:31:b0:be:16:d5:0b:b9:83:5d:
03:74:1f:cb:de:fa:e2:bd:7d:c1:06:32:de:0d:8a:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:61:8C:A3:5D:11:D7:53:8F:5F:7C:F9:1B:52:CA:3A:A0:CF:14
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/om9hjKNdEddTj198-RtSyjqgzxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.164.0/23
31.216.59.0/24
45.87.62.0/24
45.130.153.0-45.130.155.255
89.36.230.0/24
103.104.250.0/24
103.202.52.0/22
188.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:bb:25:3c:93:4c:88:19:e9:4a:55:9c:90:74:38:a3:2c:55:
04:b9:b0:25:bd:62:1b:a1:15:b5:46:e2:05:29:bb:1d:64:28:
cf:11:e3:5e:20:e1:14:92:33:36:ae:35:28:38:fe:bc:21:a8:
c4:3d:53:6a:0d:08:de:cf:4e:a1:85:b5:b6:d6:0e:17:2e:aa:
46:7b:56:56:b0:ef:2f:53:fe:13:0b:59:b7:0c:4b:8a:cd:57:
9d:bd:70:e1:06:87:03:dd:03:9e:a2:33:73:9b:41:4f:9c:9b:
aa:1e:44:f7:76:29:47:14:88:b7:a9:bb:02:b5:e8:37:68:72:
3a:cb:83:b6:d6:ec:a6:bd:da:13:51:d0:3e:2d:6a:4f:7c:49:
20:3e:ef:22:37:d1:f3:fe:36:af:29:6e:3e:09:55:83:32:4a:
06:52:b4:a8:66:03:79:3c:1e:f8:2b:ed:8c:30:d7:05:b5:ae:
7f:43:97:38:17:d4:bb:e5:5e:86:c9:23:86:19:40:59:b4:1c:
e1:f1:41:72:39:0b:5e:cb:8f:ea:4b:8a:34:06:8c:d0:ec:de:
25:32:e8:fd:6e:cc:8d:de:26:76:8d:fd:d8:4f:51:7b:a3:fd:
9d:1b:b8:84:a4:08:a2:a2:79:47:de:82:e1:97:7c:4d:cf:0d:
05:8f:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:08:14 2025 by rpki-client