Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/K_iITOJm-rxGKEvZ6QVexSFW29U.roa
File: K_iITOJm-rxGKEvZ6QVexSFW29U.roa (raw, json)
Hash identifier: Uq1qzgwBV/uJxsP2oaj6SNsK1ShSQIuMp1VPWEAOOak=
Subject key identifier: 2B:F8:88:4C:E2:66:FA:BC:46:28:4B:D9:E9:05:5E:C5:21:56:DB:D5
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0191C1BE09CF8D8E0E280008B6F1CF0C71D8
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/K_iITOJm-rxGKEvZ6QVexSFW29U.roa
Signing time: Thu 05 Sep 2024 10:32:22 +0000
ROA not before: Thu 05 Sep 2024 10:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80::/29 maxlen: 29
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f87:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Sep 2024 11:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:be:09:cf:8d:8e:0e:28:00:08:b6:f1:cf:0c:71:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Sep 5 10:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bf8884ce266fabc46284bd9e9055ec52156dbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5e:2b:e8:50:8b:18:dc:aa:3d:0a:1e:3d:ac:
c9:9e:09:bf:87:d2:b7:3a:5e:3e:c1:a7:ac:2a:50:
d8:7f:79:db:6c:aa:f3:6b:c7:c8:e4:49:82:34:63:
91:64:6a:7e:97:10:5b:dd:d0:1b:5e:e2:8b:9e:70:
71:74:e3:bf:27:5d:03:95:aa:65:6f:ca:2f:13:3b:
6e:47:cb:54:dd:60:07:e4:d3:45:76:eb:af:91:39:
a9:df:50:68:c0:1a:9c:b5:b3:7f:06:88:0a:37:42:
d3:48:b4:8d:9f:3c:eb:cd:ae:d2:da:cb:13:9f:05:
09:90:87:0d:ed:17:ee:f8:28:b7:fa:ff:9b:0c:5f:
db:06:e6:cf:55:4c:fe:7a:cb:50:23:6e:20:a9:d4:
ec:41:b4:80:1e:5c:80:f9:6f:59:1f:ed:92:b5:a5:
1c:79:19:97:53:77:12:c4:b2:aa:1a:75:a7:d0:ec:
11:fd:e8:57:51:88:c0:d6:79:0d:af:e4:00:30:2f:
4a:38:89:9c:6e:cf:f4:0b:4f:a7:f0:14:9d:af:42:
dd:63:2a:98:c6:a2:a3:18:0e:4f:6a:69:8e:07:29:
8b:8b:91:e1:38:2c:da:23:56:e5:87:73:7b:a9:43:
99:bd:bb:cd:16:78:52:5a:ae:1b:ac:df:41:ae:e9:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:88:4C:E2:66:FA:BC:46:28:4B:D9:E9:05:5E:C5:21:56:DB:D5
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/K_iITOJm-rxGKEvZ6QVexSFW29U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
95.156.205.0/24
103.57.250.0/24
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
188.214.33.0-188.214.34.255
213.183.54.0-213.183.57.255
IPv6:
2a03:f80::/29
Signature Algorithm: sha256WithRSAEncryption
50:83:57:d5:40:98:54:b1:d9:43:fc:12:d5:8e:b5:30:90:25:
db:23:87:55:d4:f2:22:ff:73:ae:21:a2:0d:15:88:93:1b:0e:
9b:c0:60:29:b9:8d:40:bc:77:d8:ea:c0:4e:cb:87:6f:8d:f3:
5f:67:8f:7c:1f:9c:95:ce:24:aa:04:91:2c:e3:6a:c2:0e:03:
48:8e:7f:be:e4:01:ea:6d:cc:7f:60:f8:57:b2:be:c7:d7:45:
1f:dd:23:a7:ad:16:24:93:d6:45:40:d0:4f:d5:04:93:23:54:
a8:04:41:1c:fe:c0:0e:60:59:49:6b:3b:2e:d3:d8:36:4a:47:
3e:d7:f7:cc:a3:a6:3a:8e:7d:7e:c5:f3:67:79:06:70:f8:a9:
d7:0e:a3:ae:fe:72:18:86:e8:bf:bc:6e:eb:38:a0:1c:92:4a:
0b:c9:c1:ca:3d:f1:d2:80:52:07:66:f4:95:66:f1:86:9f:2c:
56:53:a0:b1:dd:36:d6:87:15:64:fe:b2:af:f1:b9:3f:66:77:
9d:fd:3f:cd:24:8a:82:a2:d2:7b:90:88:69:1f:1a:0f:27:c8:
1c:86:62:1f:c2:46:11:5e:1e:26:a6:52:a9:ee:da:70:42:16:
bc:5b:f7:1f:88:c5:dd:cf:1c:e7:dd:6d:1b:b9:53:0b:a3:7e:
31:3b:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:14 2024 by rpki-client on console-ams.rpki-client.org