Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UO7baDoE_CcsSlN0NnIPc6tiFZI.roa
File: UO7baDoE_CcsSlN0NnIPc6tiFZI.roa (raw, json)
Hash identifier: m1h2/5m4UEJr1WTFesitCbIJQn3joRiLJRPo01Tqbdg=
Subject key identifier: 50:EE:DB:68:3A:04:FC:27:2C:4A:53:74:36:72:0F:73:AB:62:15:92
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E34AB00D31D74628B9F5335336D80D302
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UO7baDoE_CcsSlN0NnIPc6tiFZI.roa
Signing time: Tue 12 Mar 2024 21:56:45 +0000
ROA not before: Tue 12 Mar 2024 21:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 08:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:34:ab:00:d3:1d:74:62:8b:9f:53:35:33:6d:80:d3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 12 21:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50eedb683a04fc272c4a537436720f73ab621592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:e1:eb:6b:1c:3c:db:d1:71:af:d4:ac:a1:
aa:7a:d7:f4:73:85:62:d6:dd:9c:ab:a2:5e:07:be:
7e:44:ad:f1:43:f1:ab:04:be:09:31:a2:4e:ea:75:
e1:1d:0d:b0:bb:31:10:99:8e:1d:3c:4b:67:d1:42:
c3:92:bc:39:35:80:a9:f8:26:4d:64:71:fd:a4:1c:
60:28:5e:fd:42:db:8f:83:fd:43:45:d4:f2:6e:ec:
00:38:12:ee:4c:6d:e9:ab:ea:11:db:30:f1:3f:00:
34:a1:e6:ec:a3:ba:75:1c:b7:ff:0a:02:74:22:7e:
ec:7c:62:41:3e:09:3c:26:34:b4:e7:52:b4:c4:aa:
6c:b7:f9:1c:e4:8f:d7:a1:c9:b8:1d:dc:15:a5:2d:
8b:98:71:5d:d9:3c:5d:6b:21:d5:4c:2b:a7:45:4a:
36:9a:87:42:39:15:9a:fc:4e:8f:b1:c3:34:ee:2d:
51:e5:c0:c0:0e:e9:64:d9:d9:a1:18:f2:6a:80:66:
d9:4b:05:6e:a8:e7:b6:07:6d:fa:da:a4:46:7b:dd:
85:b2:62:5a:bf:07:cc:ef:77:9b:4d:ba:66:38:77:
ae:19:07:9d:97:dd:b4:89:46:d7:e0:f8:39:c3:21:
9a:3f:20:d3:2a:97:d5:43:a7:30:63:89:70:4b:a1:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EE:DB:68:3A:04:FC:27:2C:4A:53:74:36:72:0F:73:AB:62:15:92
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UO7baDoE_CcsSlN0NnIPc6tiFZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.88.139.0/24
45.94.170.0/23
45.132.181.0/24
45.151.3.0/24
85.209.120.0/22
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
194.242.97.0/24
195.177.92.0/23
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:7b:2f:71:40:d9:00:cd:ef:89:5a:ba:09:fc:29:df:fb:
4b:c3:28:37:32:76:dd:e1:68:31:ff:f4:aa:79:b6:90:76:a1:
d7:52:80:82:e8:63:eb:b8:c6:c8:67:80:08:33:f4:73:3c:7e:
a4:e7:24:f4:6c:dd:2b:84:3e:9a:bc:73:48:34:3e:21:09:90:
8f:3b:04:77:0c:bd:d7:99:75:a7:0a:db:5d:70:7a:9c:dc:be:
7d:b2:08:35:5d:06:a2:d1:88:ec:28:15:a2:bc:66:64:18:68:
be:05:09:6d:5a:5d:20:e4:d0:a7:af:ea:c8:fa:8c:3a:e0:c2:
74:3d:f8:22:eb:72:32:4d:5d:a9:5a:88:57:29:92:0a:e7:d3:
e2:76:3b:1d:b6:2b:83:c8:4e:ea:18:63:93:b9:76:41:f3:f9:
e0:20:1b:69:bd:6c:a6:d5:25:54:d2:f0:c6:04:73:5d:73:05:
81:b8:63:0d:88:5e:ef:d7:2c:ea:9d:dd:bd:cf:0d:e9:2d:5b:
76:43:a7:08:58:76:c9:1c:6b:19:00:bd:5d:31:f0:cb:36:49:
5a:cd:10:00:83:de:6f:e5:d4:e5:06:1f:54:f8:3d:b7:d8:8e:
24:ec:b6:03:f0:22:16:8a:b0:38:fa:8b:ad:b8:d3:e9:21:49:
14:5d:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 11:37:07 2024 by rpki-client on console-fra.rpki-client.org