Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/1-B4LxYBCIFvBtMNgyfTeNxtDr5c.roa
File: 1-B4LxYBCIFvBtMNgyfTeNxtDr5c.roa (raw, json)
Hash identifier: 8h1RTk/A7pQOpBNcfW8IaV8Ea8QXw9ysW+M9mf4ELdM=
Subject key identifier: F8:1E:0B:C5:80:42:20:5B:C1:B4:C3:60:C9:F4:DE:37:1B:43:AF:97
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 018B6804F0BCA3E82CF7812B246090F57227
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/1-B4LxYBCIFvBtMNgyfTeNxtDr5c.roa
Signing time: Wed 25 Oct 2023 18:07:16 +0000
ROA not before: Wed 25 Oct 2023 18:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51684
IP address blocks: 185.16.26.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
5.181.198.0/24 maxlen: 24
5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.203.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.200.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.201.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
185.254.200.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.201.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.217.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.223.0/24 maxlen: 24
82.199.220.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
185.247.36.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
212.95.140.0/24 maxlen: 24
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Oct 2023 15:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:04:f0:bc:a3:e8:2c:f7:81:2b:24:60:90:f5:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Oct 25 18:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81e0bc58042205bc1b4c360c9f4de371b43af97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:40:c1:11:a0:85:92:a8:57:e8:ef:f0:ce:
54:57:36:00:b9:74:d5:ff:b4:1e:dd:b0:7b:df:5e:
e5:1f:2f:46:11:83:f0:78:a4:a7:0e:77:14:00:60:
11:60:c8:3f:e1:87:48:ae:80:e1:e5:3f:77:c3:57:
cf:ca:3c:37:ed:fb:e9:6b:39:f7:b7:fb:d2:25:f7:
f7:9b:2b:65:61:f0:81:79:78:1b:c6:a5:a0:7f:0e:
2a:bd:9d:bd:42:05:33:51:7b:dc:22:c9:56:52:71:
09:91:18:72:3d:14:33:2d:84:86:25:8a:a1:26:81:
83:ea:14:da:6f:8a:41:aa:ca:13:da:06:80:41:f8:
c7:30:b7:c8:e7:3f:cf:0a:88:f2:0f:16:4b:0b:75:
c8:41:32:b4:f9:7c:7e:bb:d8:0a:6b:30:51:c5:38:
1b:5f:bc:5d:0d:f2:eb:fa:80:94:7e:6c:21:b5:d9:
e4:0e:d9:33:49:2f:66:aa:29:d4:03:70:84:7b:9a:
fe:85:d2:fa:a6:f6:4b:54:70:2e:f1:13:6e:1b:f6:
19:41:59:4d:94:2b:c2:28:7d:58:92:cf:00:23:2c:
2f:53:25:56:49:e5:64:f9:42:12:5a:38:7d:cf:49:
ee:53:8f:9b:e1:59:07:de:ab:3d:88:dd:e7:5b:4f:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:0B:C5:80:42:20:5B:C1:B4:C3:60:C9:F4:DE:37:1B:43:AF:97
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/1-B4LxYBCIFvBtMNgyfTeNxtDr5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0-5.181.198.255
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.132.255
212.95.139.0-212.95.141.255
223.25.120.0-223.25.126.255
Signature Algorithm: sha256WithRSAEncryption
cd:cd:ca:83:10:4a:1d:fb:26:cf:83:90:93:df:a3:9f:15:9a:
04:2a:3f:4c:6e:16:2b:78:45:f0:42:99:5a:e6:33:82:93:c4:
14:b3:90:e1:bd:c7:69:85:6e:8e:51:6e:5f:4c:65:74:bf:60:
ee:09:c2:c5:70:d4:40:b2:70:2b:bf:05:75:0b:4c:65:29:b9:
09:4b:54:b2:4a:cf:16:9d:f6:89:2e:a1:3b:eb:d4:f0:31:4f:
24:55:da:03:28:90:e5:ba:57:e9:8f:d9:dc:3a:02:41:9a:66:
c1:cc:c8:56:fa:13:2c:0a:1c:11:e1:90:62:eb:d3:81:a0:bb:
bd:ed:1c:fc:ba:4d:4b:f5:48:7f:28:1f:3d:94:62:06:39:f1:
0a:3f:12:9d:43:5b:8c:18:3a:f1:eb:6d:18:89:62:8e:41:1a:
7d:91:47:af:e8:92:af:ed:37:9f:74:52:42:3b:1f:b9:d8:95:
2b:11:17:a4:da:3a:4a:6e:8a:3e:4b:8b:65:57:87:7b:27:22:
4f:8c:33:5b:e3:98:c9:98:3e:e2:30:e6:4f:87:42:2a:5a:bd:
57:73:b8:2d:8e:83:e2:aa:1d:bb:f9:6f:ec:c0:3c:0c:71:8b:
df:e8:46:d7:6f:7f:6d:65:fe:72:25:98:9b:9f:ca:bc:03:c4:
d8:c4:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:16 2024 by rpki-client on console-ams.rpki-client.org