Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/F5Td3vDT8VO8WO2gu-5vWCiB7ak.roa
File: F5Td3vDT8VO8WO2gu-5vWCiB7ak.roa (raw, json)
Hash identifier: LA2XQilQ7b77+OxL9UMjZ++iuG+Mn5qZ/nKSwFes6R8=
Subject key identifier: 17:94:DD:DE:F0:D3:F1:53:BC:58:ED:A0:BB:EE:6F:58:28:81:ED:A9
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E990C03BED941AC2C8E990D59F4A5EF03
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/F5Td3vDT8VO8WO2gu-5vWCiB7ak.roa
Signing time: Mon 01 Apr 2024 09:44:45 +0000
ROA not before: Mon 01 Apr 2024 09:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.115.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.250.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 07:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:0c:03:be:d9:41:ac:2c:8e:99:0d:59:f4:a5:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 1 09:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1794dddef0d3f153bc58eda0bbee6f582881eda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:9e:72:8e:aa:68:6b:31:1e:e0:46:9e:2e:
0b:cd:24:d4:99:a8:10:07:3e:a4:44:ce:bd:ee:ba:
89:25:2b:70:96:e6:0a:71:50:0a:dd:8c:da:64:57:
21:28:d3:78:ab:5a:1c:ac:0c:b0:12:e4:3b:ae:d9:
11:f9:47:a4:da:f5:93:fe:99:13:cf:f7:35:34:4f:
48:44:17:f3:66:91:05:f2:a2:dd:8c:f7:b1:3f:13:
f5:24:79:8f:80:46:28:e5:2f:5f:dc:80:0f:0d:93:
39:36:6a:f4:75:f3:f4:02:04:b2:2c:6a:00:c7:3f:
0c:ff:27:e9:ab:b7:76:93:76:9b:a3:0b:5d:33:14:
2d:c4:43:b4:3e:84:a4:db:27:88:1c:ed:e3:3a:ef:
83:3b:e0:0b:7d:62:e2:49:e3:7f:5a:05:aa:e3:12:
1b:67:6b:e8:1e:3e:40:95:c7:b9:2a:da:94:cd:e7:
f7:06:53:53:a5:4d:51:17:35:cb:9f:2d:88:82:d6:
ce:03:0a:53:d6:6e:64:d6:f7:21:65:a6:31:d0:97:
53:67:64:28:79:64:00:f5:4b:94:35:80:74:c6:de:
bd:12:1b:42:d3:0f:6a:dc:c0:8f:5c:d7:4c:5f:aa:
ad:46:c7:85:9e:2a:45:67:75:95:17:e6:ba:81:46:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:DD:DE:F0:D3:F1:53:BC:58:ED:A0:BB:EE:6F:58:28:81:ED:A9
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/F5Td3vDT8VO8WO2gu-5vWCiB7ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
90.157.68.0/23
90.157.115.0/24
92.54.90.0/24
94.31.195.0/24
94.31.202.0/24
94.31.250.0/24
94.31.255.0/24
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
94:92:0d:44:2b:a5:4c:df:22:f3:c0:f8:32:eb:49:44:2d:27:
85:10:ee:71:e0:28:c5:ba:8d:87:fa:fc:28:5c:b8:56:7c:95:
91:35:e2:87:3a:89:1f:83:d7:c6:78:cf:db:31:26:f1:53:4d:
d7:69:15:8c:6c:84:0e:52:7d:42:47:b3:dc:ea:fe:44:a6:82:
e5:98:03:46:bc:28:ac:70:0c:f1:53:14:8c:97:60:c6:f0:0f:
36:30:50:19:94:7d:36:3a:2d:7c:89:86:d0:cb:c1:56:bb:e1:
b1:35:2e:62:7c:8a:01:38:6d:7b:01:02:80:77:31:85:70:4d:
b2:c2:7b:f5:93:9e:5b:90:c1:d7:60:dc:00:b2:f2:d7:d6:ba:
6f:fb:9e:ff:2d:0e:63:0d:ae:d0:30:e8:0d:8f:7e:dc:b1:e4:
0b:33:7e:a4:17:96:22:04:69:c5:51:c3:16:30:be:3f:6b:4b:
68:3f:f7:1e:d0:09:83:db:2d:76:0a:21:24:9b:2c:35:db:c3:
00:99:2b:ec:95:ad:2a:d8:0b:c3:74:99:89:5d:72:ed:00:77:
8b:04:69:93:e9:2d:fa:5e:da:39:f1:18:28:5f:fe:d2:c5:2c:
f5:1f:c9:b3:68:82:e4:bd:d1:c0:42:b9:1f:a5:48:1d:6a:57:
49:c7:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org