Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/07Y0JBxzW5jROBUnX0zQi2RKpbQ.roa
File: 07Y0JBxzW5jROBUnX0zQi2RKpbQ.roa (raw, json)
Hash identifier: vhHvUYRg3wYIGHOM2BrrrTfbjm64Z3saucjkOigJmtU=
Subject key identifier: D3:B6:34:24:1C:73:5B:98:D1:38:15:27:5F:4C:D0:8B:64:4A:A5:B4
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018D55BD0EFD1BC5AA09AB9F799815E36491
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/07Y0JBxzW5jROBUnX0zQi2RKpbQ.roa
Signing time: Mon 29 Jan 2024 15:01:09 +0000
ROA not before: Mon 29 Jan 2024 15:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
31.192.240.0/21 maxlen: 21
31.192.246.0/24 maxlen: 24
45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 29 Jan 2024 19:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:bd:0e:fd:1b:c5:aa:09:ab:9f:79:98:15:e3:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 29 15:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3b634241c735b98d13815275f4cd08b644aa5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:ba:2c:fa:03:69:15:2a:6a:ca:4a:c7:e0:
c7:1f:dd:51:e8:b2:8f:8e:23:75:f0:97:dc:90:62:
58:00:59:d3:9a:21:fe:ae:77:4e:43:cb:01:e6:89:
39:29:91:a0:a8:67:5d:fc:0e:a7:5a:f2:b6:c9:37:
89:4d:e4:b7:a9:ba:17:75:d1:a2:b7:57:06:80:52:
17:85:68:9a:12:9b:59:25:48:62:92:6d:02:72:77:
67:f1:57:84:92:e0:1c:c3:a6:70:7e:c0:ee:3c:6a:
30:8b:fe:25:fe:40:14:33:73:c0:05:d3:26:5f:2b:
69:8d:f5:f5:86:c9:6d:70:f2:ed:f6:e4:95:c2:3a:
c0:98:b5:9e:9e:50:66:87:9e:39:3d:34:13:7a:13:
bd:10:1f:a6:72:47:85:64:b9:da:50:23:c4:50:5a:
fb:24:0b:6c:13:17:ba:ae:9e:d6:7a:80:c7:e4:0d:
14:e7:59:63:b9:8c:cb:8b:34:fa:86:01:e4:2c:eb:
7d:39:a5:9e:04:1e:05:8e:ae:bd:8c:71:56:26:bb:
8a:ac:c0:ff:b3:92:6d:32:c2:9b:71:4c:cd:57:fc:
16:7c:83:33:b6:c5:e7:3d:63:bf:08:94:13:4e:de:
b1:8e:da:8b:9a:1c:8b:41:da:94:19:2b:fc:dd:aa:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:34:24:1C:73:5B:98:D1:38:15:27:5F:4C:D0:8B:64:4A:A5:B4
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/07Y0JBxzW5jROBUnX0zQi2RKpbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0/23
5.178.99.0/24
5.178.104.0/24
5.178.109.0/24
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
75:2a:52:1f:75:85:15:05:e2:86:8a:9e:80:ad:af:85:4f:23:
55:24:72:1a:13:f5:a2:3e:52:62:fc:58:f6:1c:0c:4b:7c:d3:
18:ec:85:0a:f3:5d:9c:a6:1a:4b:3a:20:39:2c:fd:9f:b0:9e:
da:8d:60:20:28:4b:29:76:6b:78:9b:f6:ef:6b:1c:10:81:00:
cf:95:6d:b5:9e:a4:0b:af:16:28:18:6c:0c:c0:15:3c:22:c5:
36:d5:5a:d7:43:cc:fd:af:28:93:c1:7f:c8:56:8d:d1:ff:fc:
1e:70:65:ef:5b:e5:f0:9b:61:62:96:f1:63:f1:f6:9f:0e:a1:
7c:7f:f2:f8:c4:ca:62:6f:50:19:e7:51:9e:98:86:82:b5:22:
24:01:4e:db:24:3a:8b:32:9b:8c:26:dd:c1:62:18:0a:d4:4c:
fa:fa:1c:cd:70:ed:2b:35:b1:58:09:0a:2e:23:35:4b:63:94:
c9:d0:c6:dd:7e:47:ec:c2:f2:a3:05:05:5a:a3:e1:56:8b:cd:
d7:8f:60:64:27:b1:e4:89:d4:f3:74:15:dc:2a:2f:73:02:58:
31:28:7a:96:e8:85:6e:d8:54:0c:80:5a:2e:ca:3d:33:c9:32:
3c:8d:95:24:b3:df:b3:50:5c:eb:d3:64:b7:57:27:50:dc:9a:
db:8d:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 22:26:41 2024 by rpki-client on console-fra.rpki-client.org