Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-e9pCcBZm4f4lvFjfwyhC4gyBGc.roa
File: 1-e9pCcBZm4f4lvFjfwyhC4gyBGc.roa (raw, json)
Hash identifier: 7fjhYdseiXXSNZQO/3JbD2YuRJeSvGfabj/aere8Sf8=
Subject key identifier: F9:EF:69:09:C0:59:9B:87:F8:96:F1:63:7F:0C:A1:0B:88:32:04:67
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0189F50450CFE4BF619C3BCE4D0D00BBD5FD
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-e9pCcBZm4f4lvFjfwyhC4gyBGc.roa
Signing time: Mon 14 Aug 2023 17:07:27 +0000
ROA not before: Mon 14 Aug 2023 17:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.144.183.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.178.110.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 09:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f5:04:50:cf:e4:bf:61:9c:3b:ce:4d:0d:00:bb:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 14 17:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ef6909c0599b87f896f1637f0ca10b88320467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:a3:5a:8d:d1:42:a6:33:55:25:35:9e:81:
20:eb:a0:65:fe:05:87:ab:ca:05:50:b1:b2:b0:47:
3b:79:71:e9:b5:3b:64:02:d3:49:d1:4f:7f:50:5c:
9b:a1:b3:1e:a3:dc:07:51:25:ac:1b:b3:d0:2b:ad:
3d:f4:86:2c:08:85:59:df:f6:87:ce:b9:5f:1c:55:
90:51:52:24:40:3c:57:68:ca:d9:db:7b:0c:b1:0c:
12:91:e5:83:12:1c:e7:34:6e:9f:e6:ec:97:79:41:
12:7e:61:6b:32:d2:d3:c4:e3:6d:ef:3d:18:9c:d4:
2a:a1:70:1b:04:6e:71:00:22:63:82:4b:26:10:10:
d0:73:76:11:b1:30:c6:08:6e:06:e7:dd:94:ca:80:
4b:88:98:78:3c:05:56:cd:c8:57:a4:2b:72:4a:ff:
e3:b9:e9:ae:a2:7d:2b:91:82:4d:82:bd:3e:5c:53:
b8:e9:45:e9:7f:ed:56:06:71:27:be:5b:7a:10:63:
84:17:46:60:db:e3:cd:be:00:58:03:b7:b7:99:bb:
f5:b6:2b:47:79:cd:65:c6:71:32:cb:c0:31:61:5a:
db:95:0c:25:22:09:ed:b2:d4:97:56:f3:22:73:fd:
4a:3b:26:f7:91:64:7d:a4:2c:90:0b:6d:b6:97:70:
ac:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:69:09:C0:59:9B:87:F8:96:F1:63:7F:0C:A1:0B:88:32:04:67
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/1-e9pCcBZm4f4lvFjfwyhC4gyBGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.144.183.0/24
5.178.96.0/23
5.178.99.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.109.0-5.178.110.255
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:10:58:5e:68:63:d9:a2:5b:8b:4d:32:32:13:05:fe:be:04:
f0:f5:74:24:cc:1d:4b:98:bc:69:4d:32:9f:20:9d:95:21:b7:
5c:7a:c4:f4:00:23:c7:84:f7:0c:c1:5a:cb:46:d9:13:d5:87:
1f:21:d4:82:a2:83:dd:80:9b:b6:8f:60:98:dc:7a:57:e6:11:
1b:c1:d4:2a:bc:bd:49:1c:34:37:cf:66:91:df:50:27:f3:8d:
85:78:c5:42:a2:d1:97:90:d0:81:5f:a8:c3:a5:16:17:9c:12:
69:02:c9:0f:3e:9c:0e:0a:72:88:4d:71:2e:7b:88:69:0c:7e:
b8:d0:ec:c1:6d:22:c5:13:09:2d:6c:b9:b3:46:a5:af:6f:1f:
73:cd:90:f8:94:3f:8a:93:fd:28:5f:3f:e4:1d:09:08:7a:f2:
f0:ed:5a:eb:65:77:6f:cc:b1:76:f3:f4:6f:e1:74:53:c8:f3:
2a:c4:3b:be:12:fd:27:3e:aa:59:0d:3b:da:bf:31:73:c3:1d:
52:52:93:48:a2:6e:d0:c0:e9:12:f6:6d:ea:57:c6:2b:de:31:
c5:cf:2f:22:14:d8:da:74:45:5e:dc:0d:cd:99:0a:d5:a1:b2:
51:06:b0:d7:f5:78:f6:2c:29:99:d7:71:d5:e4:d2:21:29:9e:
b7:db:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:14 2024 by rpki-client on console-ams.rpki-client.org