Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/4WvYtsYU-_wlp76hWpAJkzGLiso.roa
File: 4WvYtsYU-_wlp76hWpAJkzGLiso.roa (raw, json)
Hash identifier: gM0FmFUIHIiY3TpE/4D9qaqY+IX0XGR4Oq58hDfpH0w=
Subject key identifier: E1:6B:D8:B6:C6:14:FB:FC:25:A7:BE:A1:5A:90:09:93:31:8B:8A:CA
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01907D26E1F09E9B591E40E3BCC512EB214F
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/4WvYtsYU-_wlp76hWpAJkzGLiso.roa
Signing time: Thu 04 Jul 2024 09:50:18 +0000
ROA not before: Thu 04 Jul 2024 09:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51684
IP address blocks: 5.181.196.0/24 maxlen: 24
5.181.197.0/24 maxlen: 24
5.181.198.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.216.0/24 maxlen: 24
82.199.217.0/24 maxlen: 24
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
82.199.220.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.222.0/24 maxlen: 24
82.199.223.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.200.0/24 maxlen: 24
89.46.201.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.203.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
91.213.191.0/24 maxlen: 24
91.217.185.0/24 maxlen: 24
185.16.26.0/23 maxlen: 23
185.16.26.0/24 maxlen: 24
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.206.0/24 maxlen: 24
185.95.207.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.247.36.0/24 maxlen: 24
185.247.37.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.38.0/24 maxlen: 24
185.247.39.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.200.0/24 maxlen: 24
185.254.201.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
212.95.128.0/24 maxlen: 24
212.95.129.0/24 maxlen: 24
212.95.130.0/24 maxlen: 24
212.95.131.0/24 maxlen: 24
212.95.132.0/24 maxlen: 24
212.95.133.0/24 maxlen: 24
212.95.134.0/24 maxlen: 24
212.95.135.0/24 maxlen: 24
212.95.136.0/24 maxlen: 24
212.95.137.0/24 maxlen: 24
212.95.138.0/24 maxlen: 24
212.95.139.0/24 maxlen: 24
212.95.140.0/24 maxlen: 24
212.95.141.0/24 maxlen: 24
212.95.142.0/24 maxlen: 24
212.95.143.0/24 maxlen: 24
212.95.144.0/24 maxlen: 24
212.95.145.0/24 maxlen: 24
212.95.146.0/24 maxlen: 24
223.25.120.0/24 maxlen: 24
223.25.121.0/24 maxlen: 24
223.25.122.0/24 maxlen: 24
223.25.123.0/24 maxlen: 24
223.25.124.0/24 maxlen: 24
223.25.125.0/24 maxlen: 24
223.25.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 16:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:26:e1:f0:9e:9b:59:1e:40:e3:bc:c5:12:eb:21:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jul 4 09:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e16bd8b6c614fbfc25a7bea15a900993318b8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:56:83:89:f2:b4:80:2e:6f:80:9b:64:b0:
5a:7f:53:43:f4:d3:21:db:44:43:4d:02:fa:f4:92:
10:3a:1a:10:73:fb:fb:53:d6:8d:de:c9:8e:7b:cd:
06:5e:fc:f6:f5:04:ba:f3:72:fa:c5:8e:c1:e1:c2:
a5:d6:f6:81:21:e2:b2:2d:4e:a8:d8:6b:29:a1:a0:
87:98:9f:20:bf:d9:29:b9:5e:a8:64:b4:5a:cb:af:
78:22:30:3b:51:cd:47:04:1f:87:8f:72:de:9b:fe:
ca:01:e1:d6:27:bb:2f:ce:02:cd:82:3e:87:df:e9:
3b:1e:3a:91:47:bd:28:13:1e:70:9b:24:76:9a:6f:
33:bd:e7:55:88:1b:0c:9d:a6:ad:d4:f3:a5:c6:59:
d1:b5:57:76:ff:36:af:a4:49:fc:95:71:d7:2a:e4:
12:d3:9a:39:1d:8a:3c:54:f9:b9:75:a1:03:0b:96:
28:aa:d2:0c:a5:d6:d4:a3:6d:64:9c:0a:cd:a5:6c:
b5:ef:e4:d0:69:14:9a:c8:1f:e9:cd:53:54:78:ff:
88:d9:ef:60:ca:f5:92:00:fc:e7:11:0a:d3:45:93:
b4:a3:49:a6:01:82:03:c4:0c:41:a3:3d:ab:06:56:
4b:cd:8c:6b:98:2b:ce:ed:03:c8:39:89:ea:c9:df:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6B:D8:B6:C6:14:FB:FC:25:A7:BE:A1:5A:90:09:93:31:8B:8A:CA
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/4WvYtsYU-_wlp76hWpAJkzGLiso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0-5.181.198.255
82.199.208.0/20
89.46.200.0/21
91.213.191.0/24
91.217.185.0/24
185.16.26.0/23
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
212.95.128.0-212.95.146.255
223.25.120.0-223.25.126.255
Signature Algorithm: sha256WithRSAEncryption
de:13:3e:a8:83:bd:ec:e4:52:b5:f9:57:7c:44:d1:f5:df:ee:
f6:02:df:bd:3d:15:de:56:cb:f7:3e:ce:58:72:a3:13:0c:12:
a7:f5:ca:b1:38:42:c0:f0:29:17:06:ef:94:cc:75:44:45:f8:
9d:49:95:e7:45:9b:53:e1:39:e6:9b:5b:90:73:88:f9:83:fa:
a5:f4:a6:df:97:eb:7c:57:f9:db:1d:f8:e6:0b:00:98:4a:a4:
62:02:41:8f:42:ff:af:e1:5e:8e:ac:6f:08:c0:19:e9:04:fb:
ff:1e:52:8e:83:88:a4:cd:16:9a:42:dc:45:d2:74:f9:74:20:
59:93:a8:87:2d:2f:7d:c7:3f:f6:1f:21:e6:05:ca:b4:48:d1:
ac:a0:9a:29:0c:ac:2b:9e:a9:96:8e:dc:6d:c2:a6:b4:df:2b:
bf:91:c6:41:e0:c5:12:c6:b4:d4:6a:b8:ea:25:a2:47:b7:2b:
e1:a9:78:22:90:19:4f:76:b3:52:72:a8:59:e1:43:79:99:18:
b1:88:ee:2b:25:28:f3:a7:ff:cd:db:4e:2c:b1:9f:ac:0c:db:
00:5c:72:c7:32:6b:19:a7:9e:03:ed:7a:aa:8f:45:e5:de:7b:
09:f4:fa:11:bc:5d:d8:1e:4a:f3:b5:b7:15:1c:71:18:7a:23:
df:34:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 17:15:52 2024 by rpki-client on console-ams.rpki-client.org