Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Cz5slmdx4hB5Wb04I4CZQcRUBxE.roa
File: Cz5slmdx4hB5Wb04I4CZQcRUBxE.roa (raw, json)
Hash identifier: EO9TtF1pgy89zfHfJ5DGHFNOzYQV8DjqHJanYUUu8Vo=
Subject key identifier: 0B:3E:6C:96:67:71:E2:10:79:59:BD:38:23:80:99:41:C4:54:07:11
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018F0A7A27BE3122D0CE4C58374FFC1B2864
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Cz5slmdx4hB5Wb04I4CZQcRUBxE.roa
Signing time: Tue 23 Apr 2024 10:22:08 +0000
ROA not before: Tue 23 Apr 2024 10:22:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13118
IP address blocks: 46.237.48.0/20 maxlen: 20
77.234.0.0/19 maxlen: 19
85.113.192.0/20 maxlen: 20
85.113.204.0/24 maxlen: 24
87.253.0.0/19 maxlen: 19
87.253.0.0/20 maxlen: 20
87.253.13.0/24 maxlen: 24
87.253.16.0/21 maxlen: 21
87.253.24.0/21 maxlen: 21
93.181.208.0/20 maxlen: 20
93.181.224.0/24 maxlen: 24
93.181.225.0/24 maxlen: 24
93.181.240.0/20 maxlen: 20
95.86.192.0/19 maxlen: 19
95.86.206.0/24 maxlen: 24
95.86.207.0/24 maxlen: 24
95.86.208.0/24 maxlen: 24
95.86.209.0/24 maxlen: 24
95.86.224.0/19 maxlen: 19
95.106.160.0/19 maxlen: 19
109.161.0.0/17 maxlen: 17
109.161.0.0/19 maxlen: 19
109.161.32.0/19 maxlen: 19
109.161.52.0/24 maxlen: 24
109.161.57.0/24 maxlen: 24
109.161.60.0/22 maxlen: 22
109.161.64.0/19 maxlen: 19
109.161.64.0/20 maxlen: 20
217.15.128.0/19 maxlen: 24
217.15.134.0/24 maxlen: 24
217.15.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 25 Apr 2024 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:7a:27:be:31:22:d0:ce:4c:58:37:4f:fc:1b:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 23 10:22:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b3e6c966771e2107959bd3823809941c4540711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:a7:30:08:27:45:bb:aa:0a:13:08:1a:26:
63:36:ff:d3:35:c0:f6:81:5b:69:4b:c3:e1:bd:ac:
02:0e:9f:4c:0f:ec:af:2f:c9:f7:4e:f9:06:4f:75:
05:39:d0:9b:3b:57:de:be:2d:b0:5f:8b:10:6b:0e:
c2:82:7f:1a:07:9e:f8:31:e5:80:6d:23:50:df:24:
0c:d6:32:cf:28:92:a7:79:5e:05:82:e5:ae:77:95:
eb:5d:a3:50:56:f5:bd:d1:b5:c1:6d:04:62:42:f9:
58:b8:34:4c:dc:79:d7:7c:2a:9a:7f:ee:e1:06:1e:
29:9a:17:bf:68:dc:77:c5:1c:5e:2e:0e:ab:ec:ac:
7e:47:4b:e1:02:a9:fa:b6:93:7c:19:8c:b4:f1:83:
fb:1b:fe:2d:8e:1b:e4:b0:83:0b:cb:0b:f1:cd:8f:
9d:0f:fc:ff:7f:5a:ed:f9:ae:e2:a0:5f:95:94:4c:
77:cd:5f:08:73:69:7a:67:f8:38:1e:19:07:88:31:
1b:e0:3d:0f:66:f2:5d:3c:98:be:38:ce:21:55:c9:
65:b4:0f:0f:94:45:e0:c5:fd:67:58:59:e3:23:90:
4e:b4:25:2a:e9:5d:b9:d6:05:ed:5f:35:bc:a9:7c:
17:6f:4b:c8:4b:47:a8:69:fd:4d:e0:c4:e3:e4:d9:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:6C:96:67:71:E2:10:79:59:BD:38:23:80:99:41:C4:54:07:11
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Cz5slmdx4hB5Wb04I4CZQcRUBxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.48.0/20
77.234.0.0/19
85.113.192.0/20
87.253.0.0/19
93.181.208.0-93.181.225.255
93.181.240.0/20
95.86.192.0/18
95.106.160.0/19
109.161.0.0/17
217.15.128.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:24:9e:7f:5c:9d:a1:03:6e:d4:c3:b9:24:6d:2a:1e:cb:ed:
2d:ef:5e:bf:1b:e3:3a:0c:36:8e:7c:f6:43:13:be:1e:27:60:
e4:14:df:61:79:88:4b:8d:45:4c:94:39:5c:87:bd:36:6f:92:
ac:f2:02:8b:be:68:9f:e8:a1:6e:b7:89:de:f7:6e:99:fb:e0:
cd:d9:e7:15:6f:3d:7d:02:30:16:d5:fb:d8:4b:57:10:74:c0:
6d:12:77:c8:03:86:fe:c1:ed:c3:30:07:d3:72:10:57:56:52:
c8:22:20:8f:27:42:91:4d:b7:b8:fe:92:ce:07:b5:7a:fe:aa:
28:db:c2:16:81:ef:b4:0c:a3:d3:3a:2f:3e:66:36:73:dd:7f:
6a:b0:d7:5f:14:34:c0:d1:64:b3:bd:e0:5f:76:1f:ca:68:c8:
05:07:87:7f:fa:39:85:20:fd:df:ec:a1:8d:ce:88:4c:69:6a:
26:77:5c:60:04:20:30:53:86:27:40:3e:49:99:b6:48:48:3d:
4c:bd:1d:77:34:f7:3c:cf:01:12:66:a9:71:d6:4a:bf:93:14:
a4:db:28:41:57:de:f0:27:42:a7:67:25:21:d5:b1:51:eb:a5:
02:8b:f4:08:c9:d5:06:57:a2:27:ce:5c:ba:36:de:08:31:99:
0c:ae:d6:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org