Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Xk8lkOlV7_iunPP1oRJ7LRN4hPE.roa
File: Xk8lkOlV7_iunPP1oRJ7LRN4hPE.roa (raw, json)
Hash identifier: hhj/zFaUsYAZsISZoDEoKLtVXpket4pS1oYFYNIr3Ug=
Subject key identifier: 5E:4F:25:90:E9:55:EF:F8:AE:9C:F3:F5:A1:12:7B:2D:13:78:84:F1
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DF5350422E7D09AFBC2022C69E3BC69F2
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Xk8lkOlV7_iunPP1oRJ7LRN4hPE.roa
Signing time: Thu 29 Feb 2024 14:11:48 +0000
ROA not before: Thu 29 Feb 2024 14:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:35:04:22:e7:d0:9a:fb:c2:02:2c:69:e3:bc:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 29 14:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e4f2590e955eff8ae9cf3f5a1127b2d137884f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:e2:0b:c3:35:9f:2c:9e:ed:06:62:06:62:
60:a2:2d:a7:91:41:cf:e3:58:0c:5c:9c:e8:0d:d4:
53:88:70:23:1f:76:da:94:8f:46:f3:cc:a8:e5:b0:
27:30:6a:20:7b:60:35:ef:05:9e:06:56:d4:6b:22:
32:a3:d3:4e:20:6f:bd:00:30:84:ba:65:00:33:6e:
28:47:6a:9d:8b:96:fb:10:1e:7f:ce:30:2c:05:dd:
94:2a:b2:44:88:c5:7f:72:47:1d:b1:5f:4a:2d:cd:
7b:51:8a:48:dc:d1:0e:a7:37:fd:84:dd:aa:73:91:
5d:87:df:9d:66:00:45:02:65:fd:b0:54:72:6c:03:
2d:9e:3f:aa:e3:11:b0:7a:ae:b2:42:d5:89:f7:24:
a7:c2:01:08:18:f8:18:49:ef:a2:5d:8f:32:02:61:
51:ec:b1:62:c6:38:04:70:4d:41:45:cc:6c:96:3f:
96:72:46:13:e9:43:e4:d2:79:e5:ae:01:ca:88:4a:
9e:ce:a4:fc:55:45:ab:a1:90:03:57:9d:c6:fe:85:
ef:30:73:e5:97:1c:bc:da:db:0c:41:84:dc:ae:e0:
4c:69:93:4a:df:12:c3:9f:b5:47:40:8e:aa:00:ab:
69:e7:10:d3:16:63:40:0e:62:58:87:34:da:9f:2e:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4F:25:90:E9:55:EF:F8:AE:9C:F3:F5:A1:12:7B:2D:13:78:84:F1
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Xk8lkOlV7_iunPP1oRJ7LRN4hPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
62.68.83.0/24
62.233.49.0/24
80.91.210.0/24
91.242.238.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
176.56.38.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.239.209.0/24
194.26.221.0/24
194.32.243.0/24
195.64.112.0/24
195.96.146.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6d:fa:4d:68:a5:21:96:76:b0:2e:58:8b:60:a9:c5:8c:05:
ca:50:5a:b0:32:02:5c:c3:42:e2:bb:c7:64:a0:0d:0e:25:06:
5d:b3:a0:25:07:e1:4e:cb:c2:06:a4:01:77:b6:c0:4c:37:fd:
86:28:68:6c:4c:65:8c:5c:20:e1:14:49:05:4e:86:76:fa:81:
74:5d:43:79:af:0b:20:75:34:9e:66:65:d5:9c:e4:9e:3e:11:
e3:0a:9b:d3:6d:73:37:b8:4c:77:aa:cd:d1:25:06:83:dc:0e:
51:b0:68:c6:25:b1:c4:8b:c2:ce:ca:42:65:d2:37:91:6f:94:
af:8a:29:ad:d9:6a:72:ed:7f:11:37:97:d3:f7:97:51:8e:3b:
ce:a0:0a:ae:84:cd:2b:24:54:2a:56:e4:57:c9:f5:88:a1:13:
2c:59:5d:82:fb:56:6e:0a:e5:52:76:a2:4e:bc:61:cd:16:ea:
b7:54:85:ea:74:d2:c8:33:e6:cd:30:d6:a9:55:ad:36:d9:3c:
40:c7:aa:aa:58:bb:92:77:ca:7a:0e:0b:06:37:9b:2f:5b:7e:
e0:77:e1:cc:47:0d:42:32:98:ff:46:88:0b:20:9c:66:38:06:
d2:7a:06:c3:8e:4c:2e:de:99:4f:f6:5d:59:46:2c:d8:71:9f:
08:78:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 12:18:10 2024 by rpki-client on console-ams.rpki-client.org