Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moVqdfUSMyYsdRjN2O2-5OvkNrg.roa
File: moVqdfUSMyYsdRjN2O2-5OvkNrg.roa (raw, json)
Hash identifier: SJh0xyscG9wr1dvjApUV7mcbFjy2vCPRcbkzjLUUigY=
Subject key identifier: 9A:85:6A:75:F5:12:33:26:2C:75:18:CD:D8:ED:BE:E4:EB:E4:36:B8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D6C650760CE4C87AB06B42F4EAFED3070
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moVqdfUSMyYsdRjN2O2-5OvkNrg.roa
Signing time: Sat 03 Feb 2024 00:36:16 +0000
ROA not before: Sat 03 Feb 2024 00:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 5.253.64.0/24 maxlen: 24
5.253.66.0/24 maxlen: 24
5.253.67.0/24 maxlen: 24
87.120.192.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
87.121.62.0/24 maxlen: 24
87.121.63.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 13:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6c:65:07:60:ce:4c:87:ab:06:b4:2f:4e:af:ed:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 3 00:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a856a75f51233262c7518cdd8edbee4ebe436b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:d0:26:9a:07:47:34:1d:53:7a:cf:06:8d:
d9:cc:8c:49:34:bd:b8:59:4d:92:4f:f5:a4:0a:0d:
10:3f:95:11:9e:4a:8e:96:10:fa:ec:b1:4c:5b:d2:
1c:6c:e4:43:5f:45:96:10:34:23:e8:01:58:1f:78:
23:68:02:29:65:90:69:1d:d7:d2:32:3a:e4:0f:da:
8c:89:ce:33:c5:a7:66:68:b8:b8:ce:29:9b:1b:a2:
61:10:20:02:be:19:25:5a:13:05:75:d2:03:a7:99:
bc:88:c4:d5:f1:5d:59:2a:a2:9c:26:17:7b:37:31:
15:63:68:89:60:14:3a:79:f1:99:a6:2a:b5:8a:ac:
a9:af:be:ec:ba:7a:08:48:9e:62:54:a3:ee:24:cf:
d6:1f:16:ed:f6:4b:91:ce:a6:c1:4a:f0:79:9c:70:
60:b2:2b:09:69:1c:e2:7a:49:7e:c5:4b:e5:e6:da:
be:16:99:df:bc:11:ad:0d:73:0b:3b:01:b0:b9:0d:
80:49:15:3d:06:34:72:5f:8b:08:cf:c0:8f:8d:0a:
fc:a5:03:8c:6c:74:57:96:5e:17:df:48:f7:db:9a:
23:c7:3b:57:69:90:52:cf:e8:8b:68:0c:6c:23:7a:
26:9f:eb:58:5b:5b:aa:b0:a9:dd:75:a7:87:03:f9:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:6A:75:F5:12:33:26:2C:75:18:CD:D8:ED:BE:E4:EB:E4:36:B8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/moVqdfUSMyYsdRjN2O2-5OvkNrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
5.253.66.0/23
87.120.192.0/23
87.121.60.0/22
87.121.114.0/23
93.123.75.0/24
93.123.80.0/24
93.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:76:df:b5:49:42:11:60:1a:77:2b:34:06:1b:1b:3a:90:d5:
2a:17:28:36:38:a8:1a:06:32:25:7c:d5:07:ed:7c:f5:32:76:
80:01:8a:42:29:97:6a:7c:1b:16:9e:87:da:4c:a7:79:82:64:
c6:88:91:3f:b5:bb:ea:76:f5:0b:5b:d4:f3:f4:94:2f:b3:20:
c7:27:ea:3b:81:d6:47:97:4e:0b:1e:8e:26:9c:73:1d:39:b3:
a6:4f:3c:aa:62:3f:36:c1:90:31:6c:40:c6:ba:f6:f3:df:48:
14:f8:8c:20:13:f2:5f:a2:ce:80:b2:89:3b:96:72:17:a9:0e:
9c:51:fe:c3:b5:6a:19:6c:2b:7b:4a:fb:93:33:20:32:36:f8:
ba:62:0b:b3:42:b7:8b:e7:cc:48:ab:fd:74:9d:f5:1a:14:0c:
b8:a1:78:72:35:d5:c2:b8:5c:ba:9c:1a:2a:08:24:03:42:08:
d1:3c:ea:8d:8e:93:1a:3e:8b:37:dc:63:d9:5a:28:d3:32:ab:
2f:73:40:7b:22:01:bd:f4:a8:e3:20:6c:05:8a:26:e4:a5:ee:
e9:0b:2d:68:5b:d3:ca:51:eb:6e:0c:8c:cb:d1:f2:09:be:20:
5d:38:77:45:d1:89:c7:42:53:9e:cf:48:80:f0:38:2c:9c:c7:
40:d0:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:29 2024 by rpki-client on console-ams.rpki-client.org