Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/7bXvSqTBFXEkuB9PfVN4GDhUBBY.roa
File: 7bXvSqTBFXEkuB9PfVN4GDhUBBY.roa (raw, json)
Hash identifier: yI+D1tK7Jk6ByFQ/tOwn5+bkB9WxQKa6prj7htEvZ44=
Subject key identifier: ED:B5:EF:4A:A4:C1:15:71:24:B8:1F:4F:7D:53:78:18:38:54:04:16
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018D8AB41A91E59DD6A5A1697AC3219084D9
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/7bXvSqTBFXEkuB9PfVN4GDhUBBY.roa
Signing time: Thu 08 Feb 2024 21:51:15 +0000
ROA not before: Thu 08 Feb 2024 21:51:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.100.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
5.182.103.0/24 maxlen: 24
45.14.72.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
88.218.101.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
92.119.180.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.182.0/24 maxlen: 24
139.28.137.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
194.124.52.0/22 maxlen: 22
195.206.108.0/24 maxlen: 24
195.206.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:b4:1a:91:e5:9d:d6:a5:a1:69:7a:c3:21:90:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Feb 8 21:51:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb5ef4aa4c1157124b81f4f7d53781838540416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:a0:4b:75:09:a8:dd:d2:d8:01:4b:9b:6f:
dd:22:54:df:54:2b:f6:09:d4:d9:7a:69:df:ae:9c:
9a:4e:7b:1d:87:69:de:a8:01:a0:99:4a:b2:6c:93:
8b:2a:e2:7f:cd:7e:a2:18:f3:73:32:7c:09:29:a4:
c9:81:41:98:42:4e:9f:d1:2d:06:45:e2:8b:f6:91:
49:af:5a:e6:91:62:2f:e6:b5:60:d8:71:79:df:20:
69:87:47:17:68:09:5f:e0:39:dc:86:af:d1:51:b4:
68:9b:e4:6c:be:27:85:0a:71:45:27:48:df:e3:77:
ad:1f:9d:29:0e:35:45:a1:80:1e:e8:8e:25:55:d5:
71:f8:2a:06:8f:e2:24:f4:c3:7d:12:a8:91:0f:74:
4d:34:f5:5d:4c:ab:35:19:91:33:0f:81:4b:89:de:
40:e2:84:5b:72:dc:2e:f8:99:63:5c:e1:05:e1:53:
87:94:d2:86:27:0c:91:4f:6e:5d:fe:25:ac:6f:fc:
dd:1f:cb:0e:24:cc:2c:5b:9c:3d:2f:62:98:a3:6f:
3b:4f:88:8a:62:a8:f8:aa:5f:44:26:a3:00:a2:e3:
af:30:12:7d:01:05:78:c9:18:23:6a:f7:ae:3e:2e:
17:81:81:c3:b6:b7:66:47:21:6e:3e:b0:dd:fe:1c:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:EF:4A:A4:C1:15:71:24:B8:1F:4F:7D:53:78:18:38:54:04:16
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/7bXvSqTBFXEkuB9PfVN4GDhUBBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/23
5.182.103.0/24
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/22
92.119.180.0-92.119.182.255
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/23
193.31.75.0/24
194.5.0.0/22
194.124.52.0/22
195.206.108.0/23
Signature Algorithm: sha256WithRSAEncryption
96:47:bc:26:68:bf:2b:3e:32:29:ba:ad:ee:57:6e:a0:8a:bb:
ad:f5:ba:9f:f9:53:58:8d:09:d2:df:c1:a2:c2:ce:f2:42:5d:
7e:93:4e:9e:00:b4:71:69:43:f0:05:83:5d:70:b9:e7:bd:68:
b8:18:ce:72:a0:f1:3c:ad:b3:a8:26:7d:57:81:5d:34:b7:5a:
86:e6:98:19:ed:47:5a:20:80:3c:b5:d1:c9:f2:c6:94:a6:59:
4d:62:3f:e6:43:78:ea:69:f3:74:49:ed:47:a3:b2:c6:70:f5:
39:3a:96:42:67:30:32:30:e7:13:4e:9f:8b:13:42:22:8d:1d:
00:a7:77:8b:03:33:40:bb:29:f4:f4:2f:2d:6b:00:6c:41:02:
fe:42:cb:b0:3a:f8:21:3d:f7:d2:61:ef:d5:38:7f:4a:f4:54:
3c:eb:aa:db:30:ba:7e:38:bf:9c:6b:66:3b:17:a9:5c:ea:05:
b4:57:f8:81:e9:76:f1:21:08:74:1a:9d:28:94:40:16:d7:dd:
48:ce:d5:ed:ab:d3:6f:a1:58:99:30:d6:ba:fd:ff:87:5d:be:
df:5a:03:8e:36:f2:33:f4:f6:e3:64:00:c4:c4:4e:94:ee:9e:
36:7f:3a:8a:bd:76:d7:b9:3e:59:4a:84:b0:91:5b:05:2a:39:
f9:e7:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 19:43:28 2024 by rpki-client on console-fra.rpki-client.org