Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/ZSIpsdZ-o_zpPryl3CVKk9x6Xm8.roa
File: ZSIpsdZ-o_zpPryl3CVKk9x6Xm8.roa (raw, json)
Hash identifier: srpkDKZu9FT34DSma521Vp5zEnvaX5Ag9dgPKrym+cA=
Subject key identifier: 65:22:29:B1:D6:7E:A3:FC:E9:3E:BC:A5:DC:25:4A:93:DC:7A:5E:6F
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 018DC169F0294CD178F004EFF024F2809B53
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/ZSIpsdZ-o_zpPryl3CVKk9x6Xm8.roa
Signing time: Mon 19 Feb 2024 12:49:21 +0000
ROA not before: Mon 19 Feb 2024 12:49:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.253.184.0/23 maxlen: 23
5.253.187.0/24 maxlen: 24
45.81.161.0/24 maxlen: 24
45.81.162.0/24 maxlen: 24
45.81.163.0/24 maxlen: 24
45.94.136.0/24 maxlen: 24
45.130.33.0/24 maxlen: 24
45.130.34.0/23 maxlen: 23
88.214.0.0/24 maxlen: 24
88.214.1.0/24 maxlen: 24
88.214.2.0/24 maxlen: 24
88.214.3.0/24 maxlen: 24
88.218.196.0/22 maxlen: 22
185.114.204.0/24 maxlen: 24
185.219.160.0/24 maxlen: 24
185.219.161.0/24 maxlen: 24
185.219.163.0/24 maxlen: 24
193.111.184.0/22 maxlen: 22
193.135.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Mar 2024 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:69:f0:29:4c:d1:78:f0:04:ef:f0:24:f2:80:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Feb 19 12:49:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=652229b1d67ea3fce93ebca5dc254a93dc7a5e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f6:95:74:9e:08:68:09:50:0b:f9:47:7b:35:
6e:0e:b9:e5:42:fd:b6:be:13:c0:1d:7a:5a:17:85:
25:ea:ef:06:17:56:75:b9:94:92:e8:7f:a5:4e:c6:
d2:90:a6:06:d5:93:cd:4a:3f:c3:9e:0b:fc:0c:ee:
77:c5:2f:9c:3e:25:6a:52:2e:96:dd:6d:83:cb:76:
bb:72:55:7c:c1:10:d5:c0:76:f4:af:42:04:ca:0c:
ce:7b:a5:4b:29:f2:56:a8:9e:76:69:db:6c:99:d9:
18:f7:c6:3b:93:e6:74:ba:b0:98:45:37:4e:9f:e7:
13:ec:05:cf:8e:00:df:f0:be:5c:8c:92:94:aa:ac:
e7:d6:34:7c:00:c2:f8:ff:d3:3d:60:dc:33:51:d7:
5c:1d:21:76:59:5a:4f:99:fb:91:43:56:47:e4:36:
bc:68:4d:c2:a4:b7:97:f8:7f:92:b3:a0:56:52:cc:
ec:49:4b:84:18:48:11:98:14:bf:96:f3:6a:c7:90:
37:e0:57:11:c0:e7:2f:8c:76:98:ba:e6:d4:3f:0c:
4c:41:56:23:cc:81:70:47:1c:bb:be:24:83:06:81:
86:a5:13:15:8b:07:5d:d5:3c:f2:43:b0:86:66:cf:
32:a5:af:55:f4:a4:c0:b9:30:97:ec:97:08:4f:54:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:29:B1:D6:7E:A3:FC:E9:3E:BC:A5:DC:25:4A:93:DC:7A:5E:6F
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/ZSIpsdZ-o_zpPryl3CVKk9x6Xm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.184.0/23
5.253.187.0/24
45.81.161.0-45.81.163.255
45.94.136.0/24
45.130.33.0-45.130.35.255
88.214.0.0/22
88.218.196.0/22
185.114.204.0/24
185.219.160.0/23
185.219.163.0/24
193.111.184.0/22
193.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:04:8b:49:a7:b3:cc:bc:f4:5e:50:69:e0:c7:bf:b0:f4:d0:
27:27:5b:3b:a3:71:7e:24:c4:2a:2e:8e:35:44:01:16:5f:74:
d7:38:e1:34:c9:7d:1a:38:ed:62:1d:05:76:df:3b:f2:c0:14:
13:9f:34:28:6b:28:56:88:38:bf:9a:9d:a3:02:1e:1a:78:db:
69:e2:14:a5:9b:e8:98:06:b0:0f:c8:9c:6c:f1:94:40:82:7d:
76:c2:34:83:57:17:a4:63:c9:e1:25:a6:24:52:f1:22:43:d7:
b4:1d:bf:50:ec:48:1a:a5:a0:4c:c5:e3:bb:ae:fb:fe:5a:24:
b1:dd:27:67:86:f6:dc:e8:d2:f0:09:32:5e:34:ba:0b:a8:f6:
9c:d2:27:5f:c9:30:b3:d2:ce:18:90:85:dd:5c:d1:62:2b:86:
1e:c3:96:e6:e1:40:02:46:27:bc:f8:3c:15:d1:51:bf:d1:40:
30:a9:f0:81:0e:13:31:25:1e:ca:c7:42:86:1c:a1:0e:5d:a6:
e0:a9:14:cb:de:6c:79:1f:c9:22:2e:5c:50:96:3c:b1:e5:83:
94:a1:cb:29:9f:fb:49:0e:3e:4d:7e:b9:71:18:fa:dc:0b:0f:
ec:e5:ca:e1:ce:09:53:bd:c7:15:3c:19:7b:2d:85:f0:09:fc:
2a:59:fc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 01:10:35 2024 by rpki-client on console-ams.rpki-client.org