Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ioZaZad8h7VsfeapqFH9KUzd2BA.roa
File: ioZaZad8h7VsfeapqFH9KUzd2BA.roa (raw, json)
Hash identifier: MsV2E5m2BbUctqIHSUV6LTcJKppqORdsmuRh4XMNKgU=
Subject key identifier: 8A:86:5A:65:A7:7C:87:B5:6C:7D:E6:A9:A8:51:FD:29:4C:DD:D8:10
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018C532014B5D13590E02813B5E1E8AC60CD
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ioZaZad8h7VsfeapqFH9KUzd2BA.roa
Signing time: Sun 10 Dec 2023 09:47:40 +0000
ROA not before: Sun 10 Dec 2023 09:47:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.100.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.178.108.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:20:14:b5:d1:35:90:e0:28:13:b5:e1:e8:ac:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Dec 10 09:47:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a865a65a77c87b56c7de6a9a851fd294cddd810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:1f:49:ac:f4:d9:ff:c7:71:c2:ee:47:22:
25:25:09:25:1a:43:c7:42:97:1f:49:bc:6a:6c:e8:
3e:61:9c:0c:d2:44:fe:98:35:8e:84:76:d0:5f:1a:
0b:1f:53:64:1d:59:98:e7:90:af:89:1b:af:fc:46:
6c:f7:fb:61:61:90:b6:6e:30:cb:82:50:89:d4:94:
fd:3d:c1:41:6b:24:50:4f:b8:16:8d:1f:e7:01:68:
62:94:9b:c5:fa:75:e1:02:18:89:8f:4e:c9:19:fe:
63:9d:89:7b:90:68:ef:33:0b:50:19:03:44:01:07:
97:17:0c:8d:d1:ba:1f:1a:4e:1f:9d:bb:e4:c8:5f:
72:a0:e5:2c:38:46:e8:da:4b:d6:9a:8e:c0:a1:78:
ff:96:55:51:9c:03:77:15:d3:10:e6:18:b0:4d:19:
ec:1c:10:d9:ed:ee:59:3d:65:25:b1:54:6c:c6:6d:
6b:94:9d:06:1e:38:4f:e0:1f:08:2c:b1:b5:e5:3d:
31:c4:0a:af:15:f4:c4:f9:80:95:0d:88:49:14:d0:
b4:32:59:44:4c:0e:5f:ad:f2:59:a4:30:15:a0:31:
6c:2f:e2:70:25:76:4d:fc:9f:f2:13:10:5e:bd:39:
df:19:6e:81:ad:d9:7f:17:7b:b3:fd:c3:b9:f4:63:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:5A:65:A7:7C:87:B5:6C:7D:E6:A9:A8:51:FD:29:4C:DD:D8:10
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ioZaZad8h7VsfeapqFH9KUzd2BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0-5.178.100.255
5.178.104.0-5.178.106.255
5.178.108.0/23
31.192.240.0/21
45.12.216.0/24
45.12.219.0/24
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:9a:3a:b5:3f:c6:4b:7a:20:13:e4:dc:61:6a:98:67:ca:76:
45:fa:84:a1:28:7b:cc:2a:12:3d:f1:ae:04:a6:3c:37:25:40:
53:64:69:ef:af:a3:e9:50:65:7a:13:b5:d4:37:0f:d6:6c:c1:
6b:43:a0:ec:4e:64:8b:d0:99:83:03:49:d8:13:36:e1:24:08:
93:05:59:62:45:52:ba:92:aa:28:f2:4c:4f:a0:0d:e6:ad:73:
e8:1a:a5:e2:f9:aa:fb:c0:8a:cf:64:f9:c5:0d:44:31:f7:17:
40:5e:22:75:37:07:a5:87:29:1c:7a:de:a2:0b:c6:e8:08:cd:
14:cf:6c:37:36:e0:dc:16:be:3b:dc:8d:fc:61:4a:dc:cc:2e:
b9:63:a0:60:81:91:68:8b:ad:5f:96:60:fb:da:ef:07:0d:1d:
0a:cf:d2:9c:0d:d0:47:14:58:02:34:33:a3:ef:2e:d8:8c:ec:
9f:7f:0c:16:d4:55:9e:37:eb:76:00:26:cf:1d:5f:3e:3c:f4:
cb:8e:8e:c7:da:a8:28:9c:b4:b1:ca:77:c0:1e:4f:5f:4d:bf:
af:63:b9:95:58:8d:fb:88:27:60:53:e5:fc:78:7e:4b:1e:e3:
ce:2c:ee:41:cb:dc:18:60:a1:f8:f7:f0:0b:fc:1c:a4:0d:05:
e0:04:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 15:47:36 2023 by rpki-client on console-ams.rpki-client.org