Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/9orejOV5FI-I2yChp-mJRNAUfVk.roa
File: 9orejOV5FI-I2yChp-mJRNAUfVk.roa (raw, json)
Hash identifier: bvDv628lnZz0eUv71brdlOu3QU+wOfgn3GwC6Y4VE0k=
Subject key identifier: F6:8A:DE:8C:E5:79:14:8F:88:DB:20:A1:A7:E9:89:44:D0:14:7D:59
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018E04060A3702DBDE6AF92D9103C34EAE01
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/9orejOV5FI-I2yChp-mJRNAUfVk.roa
Signing time: Sun 03 Mar 2024 11:14:48 +0000
ROA not before: Sun 03 Mar 2024 11:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199081
IP address blocks: 5.172.192.0/20 maxlen: 20
5.172.192.0/22 maxlen: 22
5.172.192.0/24 maxlen: 24
5.172.193.0/24 maxlen: 24
5.172.194.0/24 maxlen: 24
5.172.195.0/24 maxlen: 24
5.172.196.0/22 maxlen: 22
5.172.196.0/24 maxlen: 24
5.172.197.0/24 maxlen: 24
5.172.198.0/24 maxlen: 24
5.172.199.0/24 maxlen: 24
5.172.200.0/22 maxlen: 22
5.172.201.0/24 maxlen: 24
5.172.202.0/24 maxlen: 24
5.172.203.0/24 maxlen: 24
5.172.204.0/22 maxlen: 22
5.172.204.0/24 maxlen: 24
5.172.205.0/24 maxlen: 24
5.172.206.0/24 maxlen: 24
45.66.185.0/24 maxlen: 24
45.66.186.0/24 maxlen: 24
45.66.187.0/24 maxlen: 24
91.193.60.0/22 maxlen: 22
91.193.60.0/24 maxlen: 24
91.193.61.0/24 maxlen: 24
91.193.62.0/24 maxlen: 24
91.193.63.0/24 maxlen: 24
109.68.144.0/21 maxlen: 21
109.68.144.0/24 maxlen: 24
109.68.145.0/24 maxlen: 24
109.68.147.0/24 maxlen: 24
109.68.149.0/24 maxlen: 24
109.68.150.0/24 maxlen: 24
109.68.151.0/24 maxlen: 24
178.21.168.0/21 maxlen: 21
178.21.168.0/22 maxlen: 22
178.21.168.0/24 maxlen: 24
178.21.169.0/24 maxlen: 24
178.21.170.0/24 maxlen: 24
178.21.171.0/24 maxlen: 24
178.21.172.0/22 maxlen: 22
178.21.172.0/24 maxlen: 24
178.21.173.0/24 maxlen: 24
178.21.174.0/24 maxlen: 24
178.21.175.0/24 maxlen: 24
185.70.76.0/22 maxlen: 22
185.70.76.0/24 maxlen: 24
185.70.77.0/24 maxlen: 24
185.70.78.0/23 maxlen: 23
185.70.78.0/24 maxlen: 24
185.70.79.0/24 maxlen: 24
185.88.23.0/24 maxlen: 24
185.118.125.0/24 maxlen: 24
185.168.36.0/22 maxlen: 22
185.168.38.0/23 maxlen: 23
185.168.38.0/24 maxlen: 24
185.168.39.0/24 maxlen: 24
185.205.96.0/22 maxlen: 22
185.205.96.0/24 maxlen: 24
185.205.97.0/24 maxlen: 24
185.205.98.0/24 maxlen: 24
185.205.99.0/24 maxlen: 24
2a02:4fc0::/32 maxlen: 32
2a02:4fc0:4000::/48 maxlen: 48
2a02:4fc0:4001::/48 maxlen: 48
2a02:4fc0:4100::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 20 Mar 2024 13:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:06:0a:37:02:db:de:6a:f9:2d:91:03:c3:4e:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Mar 3 11:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f68ade8ce579148f88db20a1a7e98944d0147d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:87:20:e6:d4:35:4a:9a:d5:65:b5:bf:20:
d1:f3:4b:5b:e4:d2:d5:05:a2:0f:dd:b6:6b:1b:c2:
10:13:ea:7e:df:c2:b7:8c:02:73:ff:a4:b8:96:1a:
79:46:3d:d9:c9:c7:69:e0:dd:d3:c2:1f:64:50:0b:
d8:9f:06:0f:f0:f5:31:04:4d:55:47:68:58:e7:75:
cb:c3:6a:0a:91:a2:5e:58:a4:a5:df:c0:fc:6d:25:
9b:20:d5:c8:48:9b:fd:92:21:02:46:56:58:3d:a1:
e6:b5:96:c9:6a:23:c5:c2:63:39:9d:d5:d7:0c:10:
e2:3a:07:c0:e7:e0:10:de:e6:ae:de:a1:71:7c:dc:
34:50:54:0b:28:e1:67:4c:3c:9e:a7:fc:82:35:e9:
f0:d6:06:54:7f:15:e6:51:1e:d7:cf:f9:06:b6:7d:
c7:01:cc:ed:be:ff:c3:29:d7:04:40:47:99:93:b1:
c1:e4:f3:ac:fd:cb:6e:22:e3:9a:2a:ce:13:67:70:
71:51:81:06:23:7d:3b:5a:0f:1e:f2:b4:2b:a0:16:
5f:78:93:e3:6f:26:d9:b8:41:82:38:0f:3b:1e:92:
5b:48:3a:cf:bd:94:c9:5d:27:7a:6b:6c:e0:b3:f7:
c6:68:80:9a:8d:c0:27:05:05:f8:20:13:cb:fa:bc:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8A:DE:8C:E5:79:14:8F:88:DB:20:A1:A7:E9:89:44:D0:14:7D:59
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/9orejOV5FI-I2yChp-mJRNAUfVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.192.0/20
45.66.185.0-45.66.187.255
91.193.60.0/22
109.68.144.0/21
178.21.168.0/21
185.70.76.0/22
185.88.23.0/24
185.118.125.0/24
185.168.36.0/22
185.205.96.0/22
IPv6:
2a02:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
03:6b:d4:c5:f4:57:e0:ac:c7:b6:b3:cf:33:c5:44:4e:ff:e4:
21:43:5f:48:7d:2a:cf:af:ec:fe:fc:92:62:d1:e2:c9:e9:c4:
54:26:f6:4f:db:4d:e4:b6:5c:92:5d:da:44:41:c2:49:ba:df:
6a:55:dc:56:25:9f:4f:f8:45:96:4a:98:62:d6:51:4e:9c:f8:
7f:fd:2a:45:95:9f:5d:f8:b3:16:8e:ad:de:53:84:ea:09:6e:
1e:45:42:ca:d4:2c:a1:1c:97:3f:34:b0:f6:25:ac:ad:17:e1:
20:5f:d5:e5:bb:c3:1e:8d:3b:99:9a:db:e9:61:1c:30:b9:dd:
22:ee:e1:f2:45:cb:22:5f:13:0c:93:51:34:9b:dc:8d:9b:af:
1e:9a:86:63:ca:24:c8:56:9b:56:ec:48:8d:2c:4e:4d:f5:9f:
f5:b6:07:89:e9:af:57:97:1b:1c:f9:49:1d:68:ce:04:a3:39:
5a:43:36:83:c0:ab:76:2b:c0:b9:75:5c:d2:9c:4d:d2:1e:77:
bb:b6:0f:f4:d0:78:21:12:10:56:83:7e:dd:a0:b7:4a:13:ed:
87:69:16:94:12:a2:ad:c6:8a:4f:bb:1e:c5:f3:f1:c8:2a:2f:
ac:3f:aa:a3:2d:b6:99:8e:76:3a:8e:93:3c:e3:a2:be:67:ce:
87:d1:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:49 2024 by rpki-client on console-ams.rpki-client.org