Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5i_SzeYYqk68fNalDJGJYOMQiNc.roa
File: 5i_SzeYYqk68fNalDJGJYOMQiNc.roa (raw, json)
Hash identifier: QZy4585z8tRe/n3eWqrr7wsYSuUrdc5uWoPvB8sWkPg=
Subject key identifier: E6:2F:D2:CD:E6:18:AA:4E:BC:7C:D6:A5:0C:91:89:60:E3:10:88:D7
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DD1E8C5C0B1404CA64852E8C2A5EEE38E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5i_SzeYYqk68fNalDJGJYOMQiNc.roa
Signing time: Thu 22 Feb 2024 17:41:49 +0000
ROA not before: Thu 22 Feb 2024 17:41:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.132.39.0/24 maxlen: 24
45.135.35.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
45.140.65.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
83.138.52.0/24 maxlen: 24
84.246.82.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
176.116.5.0/24 maxlen: 24
176.116.20.0/24 maxlen: 24
193.0.245.0/24 maxlen: 24
193.0.246.0/24 maxlen: 24
193.5.1.0/24 maxlen: 24
193.58.171.0/24 maxlen: 24
193.58.178.0/24 maxlen: 24
194.107.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 18:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:e8:c5:c0:b1:40:4c:a6:48:52:e8:c2:a5:ee:e3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 22 17:41:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e62fd2cde618aa4ebc7cd6a50c918960e31088d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:f1:9b:cf:05:0b:90:00:dc:c8:0c:46:dd:
84:5a:b4:45:55:09:59:88:67:ce:08:52:3e:a7:9a:
d3:6e:d8:d6:d3:d0:36:bd:8e:5b:9a:26:14:40:3b:
af:89:7a:a2:d4:e5:f0:84:ea:a5:ee:98:cf:de:91:
db:2f:64:68:9a:aa:34:25:78:4c:fd:94:16:f3:39:
d3:3f:b7:16:44:ff:11:59:17:8d:ea:b8:09:ba:db:
03:0c:6d:48:90:31:e6:3f:bc:ad:66:22:67:5b:7b:
63:d0:22:8c:f9:b3:c0:42:56:f2:88:10:bd:9f:4a:
5d:44:3e:42:fc:8a:01:cb:f3:5c:a3:64:0f:18:5f:
95:67:b2:66:3c:46:ea:2d:82:f6:3a:00:4a:2a:21:
ef:3c:02:b1:1b:0b:75:7d:00:ae:ce:9d:13:48:b9:
ce:76:b0:2e:b0:de:36:76:1a:a1:2a:9b:5e:03:d5:
ea:11:10:55:ae:10:eb:01:65:c1:00:58:5f:cb:4e:
f6:5c:41:19:67:28:d3:0f:b9:e6:de:91:8d:47:8e:
5a:3a:ae:81:25:31:22:2a:6b:e0:a8:47:ed:97:62:
55:8b:8d:f2:86:d2:3c:7c:7f:f8:cc:5f:1e:b8:c9:
7c:88:31:98:ed:ce:7c:07:cd:d2:4a:cc:e2:cf:a6:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:D2:CD:E6:18:AA:4E:BC:7C:D6:A5:0C:91:89:60:E3:10:88:D7
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5i_SzeYYqk68fNalDJGJYOMQiNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
45.129.1.0/24
45.132.39.0/24
45.135.35.0/24
45.138.7.0/24
45.138.156.0/24
45.138.212.0/24
45.138.215.0/24
45.140.65.0/24
45.149.130.0/23
45.152.118.0/23
83.138.52.0/24
84.246.82.0/24
91.206.69.0/24
91.237.104.0/23
176.116.5.0/24
176.116.20.0/24
193.0.245.0-193.0.246.255
193.5.1.0/24
193.58.171.0/24
193.58.178.0/24
194.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:82:63:eb:cc:41:de:b5:a0:d2:06:00:54:f5:3d:b3:11:40:
08:7f:d2:56:7f:48:44:f5:62:8b:0f:bd:69:ed:09:2f:1a:d8:
83:db:7a:aa:72:5d:d8:83:d8:b8:1b:1b:16:1e:93:5e:c4:58:
d6:c2:ad:39:4c:8c:db:69:1d:1d:59:fd:06:0e:a0:99:70:ed:
15:47:71:87:26:e8:12:bc:a1:ca:c9:9e:6c:4d:dc:5f:f0:da:
a4:88:63:94:d5:f5:63:4d:68:70:41:ee:be:ab:50:d4:8d:20:
f4:0c:10:4c:13:79:16:64:9f:e2:fa:bf:cd:ac:f6:c1:70:e6:
ea:c7:b6:09:f7:49:44:40:69:d4:03:f9:9c:f7:e5:5f:e8:5e:
f5:3f:cb:d6:a4:25:7c:9b:7c:fa:b3:b9:32:1e:78:42:15:0b:
90:e3:60:66:f1:df:46:82:ff:86:61:13:35:98:b2:d1:f5:5b:
57:86:5b:6f:1e:eb:64:1c:50:db:4b:c2:9a:e4:1a:c3:1d:10:
ed:05:79:2d:39:e4:37:13:21:8e:98:f6:5f:c9:73:a5:bf:4d:
08:65:19:6e:06:1f:31:24:a5:e7:3a:30:50:cf:98:28:cf:8e:
8a:87:e8:33:fc:96:fe:46:57:be:a2:b1:ad:a0:28:74:3f:15:
2b:4c:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:30 2024 by rpki-client on console-ams.rpki-client.org