Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/5htHyOkq6bYm37Ok4r_cO6NLt9g.roa
File: 5htHyOkq6bYm37Ok4r_cO6NLt9g.roa (raw, json)
Hash identifier: ukylS2/P+NwuMyP3ZRoscW/E74QQmWUccEVjhcyK+AI=
Subject key identifier: E6:1B:47:C8:E9:2A:E9:B6:26:DF:B3:A4:E2:BF:DC:3B:A3:4B:B7:D8
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0188165772250FA6EE0CA23CAACA80794DD9
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/5htHyOkq6bYm37Ok4r_cO6NLt9g.roa
Signing time: Sat 13 May 2023 18:20:09 +0000
ROA not before: Sat 13 May 2023 18:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48159
IP address blocks: 2.188.1.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
217.218.67.0/24 maxlen: 24
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
78.38.160.0/19 maxlen: 19
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.176.128.0/17 maxlen: 17
2.185.0.0/20 maxlen: 20
2.185.0.0/16 maxlen: 16
78.39.0.0/16 maxlen: 24
2.185.164.0/24 maxlen: 24
2.185.160.0/19 maxlen: 19
2.188.179.0/24 maxlen: 24
2.185.88.0/22 maxlen: 22
217.219.0.0/16 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.177.0.0/16 maxlen: 16
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.191.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
2.189.42.0/24 maxlen: 24
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.182.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 14 May 2023 12:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:57:72:25:0f:a6:ee:0c:a2:3c:aa:ca:80:79:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 18:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e61b47c8e92ae9b626dfb3a4e2bfdc3ba34bb7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:6c:f7:a2:d3:6e:cf:53:74:4a:88:99:a8:
5c:5b:ce:a8:a2:b6:c7:72:16:fe:ef:68:0c:62:a2:
0e:e9:e0:6c:31:45:eb:98:4c:4b:04:e0:c5:0e:5f:
e9:ed:6b:7a:ca:11:10:82:54:c8:1e:38:11:0d:8c:
61:45:b9:f2:21:d3:4b:00:77:6f:67:56:74:93:c4:
fe:26:d6:1c:e6:b3:11:c2:ed:5e:50:0e:35:48:da:
3e:d8:d9:68:7e:b2:f3:fc:82:b1:ac:4c:1f:51:8f:
cb:1a:ae:39:a9:46:3f:ac:22:cb:4d:f0:0f:f4:80:
12:d8:29:b1:58:d3:a1:6f:94:8e:d5:be:da:d3:78:
56:04:f7:bf:94:0c:41:55:2d:38:30:9e:bf:29:5f:
89:30:6b:57:a7:c8:a4:e5:8e:e9:88:a1:ac:40:9b:
0c:07:f2:7f:23:c0:f1:d3:69:71:55:83:0e:39:9d:
a4:a1:5c:0a:73:95:17:5b:2b:2d:bf:fb:a6:37:41:
06:1b:2b:92:2e:66:93:1b:c4:32:de:9d:86:24:52:
e6:cf:b7:50:71:8a:bd:63:68:33:8c:7e:82:a7:d0:
9b:37:df:b8:24:f8:28:0b:16:b1:a9:85:83:93:13:
4c:ae:7e:05:da:cb:4d:fd:51:4d:8d:61:51:92:7e:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:47:C8:E9:2A:E9:B6:26:DF:B3:A4:E2:BF:DC:3B:A3:4B:B7:D8
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/5htHyOkq6bYm37Ok4r_cO6NLt9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.128.0/21
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.42.0/23
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7f:06:f9:d2:9e:22:d6:d5:ba:96:e7:ae:7f:b4:04:7f:53:d9:
12:8b:57:62:0f:dc:27:2a:23:72:6c:31:98:40:16:0e:ac:ad:
95:75:4c:6c:17:0e:16:76:e1:b7:de:71:a8:51:6e:b7:b8:18:
8e:9c:c2:c6:34:a9:4e:59:64:ca:e7:e3:75:40:f8:35:02:e5:
e7:d2:ac:8d:d8:d2:38:df:b3:db:43:5e:e2:11:24:82:c0:21:
68:c4:ba:59:84:7c:d4:39:64:33:4f:04:79:d2:24:ce:e7:59:
a4:8c:d2:1a:2f:b6:9a:b6:f2:6d:8c:e4:ec:44:2d:f8:80:6c:
cc:33:15:52:c8:39:a9:51:95:65:c4:7e:6e:69:f5:95:f8:9f:
39:e5:c4:65:c4:ea:97:32:ac:ae:b1:20:ea:35:c1:18:2a:c7:
a3:cd:e7:7a:ed:2a:20:d5:94:c5:dc:b9:4f:d5:1b:c1:4a:b2:
0e:7d:49:ae:d0:28:2f:55:b9:9b:96:29:f5:96:3c:27:74:ca:
ed:f0:88:6f:9c:23:16:e8:4f:33:7b:ad:5a:32:de:72:75:ba:
7a:65:86:4a:be:2c:eb:de:df:08:be:00:fa:b8:1d:9f:ee:56:
14:75:f3:e5:71:14:60:cc:34:0d:92:1c:72:a6:16:c5:67:5a:
3d:e0:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org