Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/t5Hlhy-UhP3mherutmfBYdcWLvs.roa
File: t5Hlhy-UhP3mherutmfBYdcWLvs.roa (raw, json)
Hash identifier: VNivl/2gYqf4exMFtWF2UPxXnEEUFYdubVg2AnD/VDI=
Subject key identifier: B7:91:E5:87:2F:94:84:FD:E6:85:EA:EE:B6:67:C1:61:D7:16:2E:FB
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018D54BA6A8FD8AB38E22FB5F717AF2B53A7
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/t5Hlhy-UhP3mherutmfBYdcWLvs.roa
Signing time: Mon 29 Jan 2024 10:18:39 +0000
ROA not before: Mon 29 Jan 2024 10:18:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.98.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
31.192.240.0/21 maxlen: 21
31.192.246.0/24 maxlen: 24
45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:ba:6a:8f:d8:ab:38:e2:2f:b5:f7:17:af:2b:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 29 10:18:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b791e5872f9484fde685eaeeb667c161d7162efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:f9:9c:3d:40:c0:10:b4:2e:8e:9f:28:5a:
c3:41:7e:c8:01:70:48:bf:f1:2c:3e:98:ca:1f:eb:
02:88:0d:6f:49:ef:56:14:3a:c9:2b:d2:8e:8f:31:
ba:dd:49:a7:a9:77:5b:19:76:8d:6d:a0:6b:75:09:
55:e5:54:18:64:95:bb:73:23:87:dc:f3:20:25:21:
fd:d3:25:6a:31:48:bc:e6:dc:3e:4b:17:66:9d:2d:
9e:c9:e2:7c:4a:e2:35:09:84:52:c1:1e:9c:ff:55:
4a:50:11:dc:9b:92:b3:ab:a7:31:46:d0:4d:94:dc:
eb:d1:82:5c:d3:0b:11:1f:e0:87:f2:6d:9c:07:23:
28:69:e1:25:08:76:4a:a2:5d:2f:36:0c:70:3a:5d:
fd:13:13:49:e2:6e:b1:3f:e7:60:81:9f:b9:c1:c7:
06:de:32:1a:2f:3d:a0:4c:06:19:18:ac:9d:5c:19:
5a:7e:1f:72:8f:7b:d6:b8:38:15:d0:d5:2f:7e:7e:
ba:76:07:08:54:d1:a8:8c:f7:5b:01:ba:8c:2c:b6:
91:ed:04:4a:3b:20:b2:ef:ec:35:24:5f:f5:30:d4:
e0:40:40:ea:e3:17:de:a4:dd:41:ac:99:9f:af:8e:
f5:58:dc:2e:b7:e1:34:bb:e3:35:19:e0:d1:ba:9e:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:E5:87:2F:94:84:FD:E6:85:EA:EE:B6:67:C1:61:D7:16:2E:FB
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/t5Hlhy-UhP3mherutmfBYdcWLvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.178.96.0/22
5.178.104.0/24
5.178.106.0/24
5.178.109.0/24
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
25:7c:a2:64:63:ec:d9:5d:1f:9a:b5:26:93:bf:76:f0:db:8a:
39:1a:f5:fa:01:02:2c:a9:10:72:42:d6:c7:d4:20:d8:10:a7:
17:da:05:00:89:7b:d9:af:f2:33:15:40:76:ac:62:5c:15:bf:
66:64:c0:9a:09:33:e5:f7:96:60:28:b7:0f:82:8c:6f:35:43:
4f:c1:ec:ec:b4:b1:52:42:58:6c:b4:19:06:a6:39:e3:b8:b6:
44:dc:db:64:3a:f6:6c:0d:ee:c6:f9:5b:03:03:5f:9f:79:1d:
10:c3:a0:ff:a5:22:65:50:bc:6c:c0:8c:5e:8d:dd:88:c0:d3:
93:d7:82:62:57:95:e8:f3:0f:e7:63:d3:45:4d:1d:d8:6d:9e:
c0:88:a1:33:6f:ce:92:24:05:7c:c8:15:e9:d5:a4:28:e8:94:
6e:07:b3:60:a2:c0:a7:03:4c:f9:cc:67:be:2b:b9:f1:03:b6:
c6:62:02:52:6c:86:3c:eb:5e:28:cf:93:4c:72:07:f2:ec:25:
2f:3f:4d:ba:09:5f:d4:c2:96:7f:94:b3:70:1e:d5:38:87:a0:
4d:f4:00:85:41:88:83:ce:3a:98:e4:52:1e:2e:2c:94:6b:aa:
ae:85:61:b3:be:41:42:e0:95:53:35:1f:42:f5:e9:ad:87:c2:
99:e7:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 19:47:40 2024 by rpki-client on console-fra.rpki-client.org