Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/GJ5rlgCz4A58vLR2vhlr9KVKwVM.roa
File: GJ5rlgCz4A58vLR2vhlr9KVKwVM.roa (raw, json)
Hash identifier: AkiNA7tNi+OvoLMRv3/BJVxysVpLfwSPa1cSCPC8Vj4=
Subject key identifier: 18:9E:6B:96:00:B3:E0:0E:7C:BC:B4:76:BE:19:6B:F4:A5:4A:C1:53
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018896DF8971E861C7573271F00C357A6F78
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/GJ5rlgCz4A58vLR2vhlr9KVKwVM.roa
Signing time: Wed 07 Jun 2023 17:20:12 +0000
ROA not before: Wed 07 Jun 2023 17:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 88.218.80.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
5.104.75.0/24 maxlen: 24
5.104.74.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
45.140.4.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
193.228.48.0/22 maxlen: 24
95.214.83.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 13:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:df:89:71:e8:61:c7:57:32:71:f0:0c:35:7a:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jun 7 17:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189e6b9600b3e00e7cbcb476be196bf4a54ac153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:1f:d6:47:c1:ec:e4:9e:6c:04:42:e0:d9:
b8:35:f1:2f:a0:7b:2c:8b:76:b1:65:f1:33:5f:ad:
83:48:86:fd:e5:ea:e1:c8:20:69:ae:83:ee:da:89:
b8:1d:0c:b5:2e:5d:01:53:13:2e:d1:9e:a0:0c:c5:
75:af:dc:06:c8:8d:dc:51:b2:0d:8c:1b:7b:23:ca:
62:52:64:4b:07:b2:67:c3:42:19:d3:8f:f0:07:cc:
92:ac:f1:d5:4f:e4:ac:87:af:8b:fa:29:82:2a:88:
8e:19:f3:a7:9e:5e:77:45:17:49:07:2d:f6:83:cb:
11:96:cd:31:80:11:d6:25:07:22:e8:ea:fa:e6:56:
1c:b1:0c:d1:9e:85:e0:0c:76:93:a9:85:87:e9:a9:
13:93:10:b6:01:80:ea:b9:51:32:e4:fe:da:b4:73:
e1:c8:cf:5a:e0:86:2e:d1:31:37:1e:05:d0:3a:f8:
87:44:d8:d8:a0:dd:ed:d4:f5:9e:5c:28:62:fc:8e:
91:b4:b8:b1:94:64:71:4a:a2:f8:2d:eb:5a:9a:d7:
ca:af:aa:15:65:d0:9a:ad:fb:5d:2c:2f:f2:3a:7b:
5c:2b:94:ce:f8:92:b0:6e:e9:12:af:42:1c:51:08:
22:ed:0d:f4:e1:eb:7b:09:c6:0f:76:39:72:5b:ed:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:6B:96:00:B3:E0:0E:7C:BC:B4:76:BE:19:6B:F4:A5:4A:C1:53
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/GJ5rlgCz4A58vLR2vhlr9KVKwVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/23
45.130.184.0-45.130.186.255
45.140.4.0/24
45.140.7.0/24
77.83.20.0/22
84.252.64.0/22
88.218.80.0/24
88.218.239.0/24
91.245.239.0/24
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
193.160.72.0/24
193.228.48.0/22
194.28.157.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9b:2b:1b:02:63:e4:16:b2:7e:31:99:03:23:fd:72:a8:74:
0c:94:1e:8f:35:9b:12:1c:76:df:26:94:f3:26:45:86:ac:dc:
f8:d4:e7:b8:59:54:53:a6:14:65:29:65:7e:4b:d9:39:25:51:
e4:b2:37:70:73:35:76:8a:e1:dd:5d:1d:05:02:3a:8c:dc:23:
82:db:c6:fd:35:84:42:8a:50:e3:90:97:6f:d7:e5:47:06:14:
59:dd:0a:ac:ba:d9:57:0c:5c:3a:44:39:a5:1b:3a:7b:4c:3d:
c9:03:66:00:e1:21:7d:d6:8e:ac:b3:4f:3c:cf:ac:51:2a:82:
11:1c:60:5b:3e:34:d6:b2:26:3a:ee:8f:47:2e:81:eb:41:78:
d2:08:ad:c6:48:65:24:9e:c2:b0:10:c7:2b:a5:2e:3f:fb:c6:
09:c5:da:f4:ac:15:f7:ad:e4:d0:f2:80:0f:1d:b0:d5:45:4d:
74:f7:9e:0a:ed:45:16:78:63:e0:c6:df:99:80:08:86:4a:92:
6f:98:ef:5d:51:58:41:57:d8:70:35:a5:07:85:9f:6b:66:a6:
34:4d:fb:40:6b:3c:99:ee:63:16:cb:84:1d:ca:dc:2f:ac:83:
0e:ed:c3:f4:6b:6f:f7:91:82:ce:7d:18:6f:d8:8a:26:9f:96:
05:87:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org