Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/5pGM6bUtvotsy009r5z2YInBcHk.roa
File: 5pGM6bUtvotsy009r5z2YInBcHk.roa (raw, json)
Hash identifier: qDzWqZEjh/87qK8Et+faBTH0/i5sPrk++ITZwziz2qk=
Subject key identifier: E6:91:8C:E9:B5:2D:BE:8B:6C:CB:4D:3D:AF:9C:F6:60:89:C1:70:79
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 018CC26D08ACDB2D835176DADA37B458FE14
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/5pGM6bUtvotsy009r5z2YInBcHk.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29467
IP address blocks: 178.251.160.0/21 maxlen: 24
185.97.244.0/22 maxlen: 24
185.4.124.0/22 maxlen: 24
5.149.112.112/30 maxlen: 30
5.149.112.0/21 maxlen: 24
185.123.216.0/22 maxlen: 24
185.123.218.72/30 maxlen: 30
2a03:2f00::/32 maxlen: 32
2a02:70c0::/32 maxlen: 32
2a03:92e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Feb 2024 17:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:08:ac:db:2d:83:51:76:da:da:37:b4:58:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6918ce9b52dbe8b6ccb4d3daf9cf66089c17079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:40:18:7a:d5:c2:09:ad:7f:ac:10:54:48:
73:2c:bf:2c:59:2c:d7:78:0d:4f:f8:8e:8a:fe:a9:
fc:8f:95:cc:49:e9:3b:d7:0e:2b:ba:62:5e:0f:12:
aa:cd:06:1c:02:fc:39:73:89:f6:c8:47:82:d0:ee:
e7:0a:12:b9:af:19:3e:fc:ee:27:e0:72:ff:0a:08:
14:31:c9:06:c3:f7:06:ac:13:96:4a:12:36:12:fa:
e8:58:1d:f9:71:fc:68:00:e9:3f:0b:42:88:ef:d6:
e7:3d:47:e6:16:83:15:b4:d3:30:6c:c1:ed:80:7b:
fc:2c:1d:69:b4:84:e1:47:45:61:a6:7e:7c:8e:7a:
e3:98:d7:f7:64:f0:27:f4:86:ff:72:19:9c:20:d0:
f2:10:6c:15:66:ff:ea:af:0b:ad:48:67:0a:2f:2c:
83:91:1f:f1:ff:13:45:60:59:2a:4e:80:d5:d3:28:
55:04:2e:4c:34:5f:85:97:59:1d:92:fa:fc:ac:e0:
03:26:70:ff:c6:bc:7a:e1:67:6c:ea:8d:fd:44:99:
3d:79:8d:63:5f:eb:07:09:68:06:fc:33:97:2f:7d:
0c:62:1f:bd:94:8d:13:68:7f:b9:08:be:eb:88:da:
31:3e:de:45:8d:d1:ef:99:b1:f6:84:c5:2f:ae:d4:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:8C:E9:B5:2D:BE:8B:6C:CB:4D:3D:AF:9C:F6:60:89:C1:70:79
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/5pGM6bUtvotsy009r5z2YInBcHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.112.0/21
178.251.160.0/21
185.4.124.0/22
185.97.244.0/22
185.123.216.0/22
IPv6:
2a02:70c0::/32
2a03:2f00::/32
2a03:92e0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:ad:f1:4c:08:23:dc:f9:ed:54:ba:80:73:b7:b1:62:62:31:
f9:cc:e4:68:b6:6c:11:6a:73:f1:18:34:5b:c3:57:e4:12:99:
58:dd:ed:7e:b7:e0:c8:92:c5:80:39:f4:9e:24:c5:5f:0a:a4:
3e:c0:53:26:94:04:b4:fa:b8:ff:8d:d9:9d:67:fd:56:ff:c5:
21:b4:71:95:df:a1:cd:67:4d:8b:4b:1b:98:23:b9:4c:8e:01:
09:55:90:85:c1:12:c0:6b:6c:ef:7b:8b:ea:6d:84:5a:d9:80:
a3:6e:9c:7c:39:92:77:bb:51:35:09:4f:a0:3e:6a:d5:56:16:
c0:6d:a6:eb:34:63:d0:72:60:2e:95:53:86:23:b0:f4:3d:96:
1c:d0:ce:5a:9f:46:77:53:ee:06:12:95:5d:23:99:30:87:a3:
85:fb:f7:6a:6d:9c:99:da:cb:9c:96:79:7e:63:2b:a8:f7:c9:
82:0f:a0:cb:9d:39:9f:ef:95:6d:7c:98:5f:f2:d9:9b:df:60:
16:c8:54:87:27:62:df:1b:20:9a:24:46:f8:4b:87:da:08:bc:
ed:69:93:3e:b4:41:1f:4b:9a:ff:9f:ff:aa:6c:82:c7:9d:a2:
1a:e7:97:0e:97:86:11:31:43:48:6d:94:44:8f:92:1a:ea:58:
7b:21:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 20:34:23 2024 by rpki-client on console-fra.rpki-client.org