Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/IBzej9hQYLeY71BXQbzlc9zfdNw.roa
File: IBzej9hQYLeY71BXQbzlc9zfdNw.roa (raw, json)
Hash identifier: kfO4Tj/t8tVVBuE185PDjlH7u03pauX7v69EDW6tWQ4=
Subject key identifier: 20:1C:DE:8F:D8:50:60:B7:98:EF:50:57:41:BC:E5:73:DC:DF:74:DC
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 018D3C12582E9B0E8DF82AF29C39B6043C3E
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/IBzej9hQYLeY71BXQbzlc9zfdNw.roa
Signing time: Wed 24 Jan 2024 15:24:11 +0000
ROA not before: Wed 24 Jan 2024 15:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34244
IP address blocks: 5.180.0.0/22 maxlen: 22
31.170.24.0/21 maxlen: 21
31.170.26.0/23 maxlen: 23
31.170.28.0/22 maxlen: 22
37.221.104.0/22 maxlen: 22
45.8.152.0/22 maxlen: 22
45.14.4.0/22 maxlen: 22
45.93.232.0/22 maxlen: 22
45.131.188.0/22 maxlen: 22
45.152.172.0/22 maxlen: 22
81.92.196.0/22 maxlen: 22
81.92.220.0/22 maxlen: 22
85.30.128.0/18 maxlen: 18
92.39.32.0/20 maxlen: 20
94.46.136.0/22 maxlen: 22
94.46.240.0/22 maxlen: 22
128.127.184.0/21 maxlen: 21
141.98.236.0/22 maxlen: 22
155.137.24.0/21 maxlen: 21
178.236.64.0/20 maxlen: 24
178.236.65.48/29 maxlen: 29
178.236.72.28/30 maxlen: 30
178.236.72.48/28 maxlen: 28
178.236.72.88/29 maxlen: 29
178.236.73.80/29 maxlen: 29
178.236.73.112/29 maxlen: 29
178.236.73.128/29 maxlen: 29
178.236.73.160/29 maxlen: 29
178.236.73.176/29 maxlen: 29
178.236.73.200/29 maxlen: 29
178.236.73.224/29 maxlen: 29
178.236.74.88/29 maxlen: 29
178.255.112.0/22 maxlen: 22
185.4.8.0/22 maxlen: 22
185.121.44.0/22 maxlen: 22
185.176.28.0/22 maxlen: 22
185.186.32.0/22 maxlen: 22
185.197.224.0/22 maxlen: 22
185.216.152.0/22 maxlen: 22
185.223.236.0/22 maxlen: 22
185.240.208.0/22 maxlen: 22
185.247.236.0/22 maxlen: 22
188.66.48.0/22 maxlen: 22
193.34.202.0/24 maxlen: 24
193.221.93.0/24 maxlen: 24
193.221.120.0/24 maxlen: 24
193.221.123.0/24 maxlen: 24
193.221.219.0/24 maxlen: 24
195.210.52.0/23 maxlen: 23
2a02:80::/29 maxlen: 29
2a02:80::/32 maxlen: 32
2a02:1610::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3c:12:58:2e:9b:0e:8d:f8:2a:f2:9c:39:b6:04:3c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jan 24 15:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=201cde8fd85060b798ef505741bce573dcdf74dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:f4:45:61:21:52:e9:0f:e6:a0:8d:32:f6:
dd:ea:e1:40:30:66:47:56:76:a4:0d:4c:e8:d3:21:
a5:bb:4a:eb:d2:99:0a:ce:6e:9f:6b:3b:87:37:6a:
b7:96:10:c4:bf:92:3c:4e:ae:60:2e:66:24:92:95:
a4:4f:6f:a2:6c:94:5c:d7:7f:b1:88:fb:2a:de:72:
9b:50:87:13:07:98:48:f4:8f:3f:6f:1d:40:f6:95:
63:01:5d:29:aa:40:63:d1:a9:07:a3:35:09:b1:28:
91:12:a9:1b:9a:0e:ab:b5:0d:83:38:e2:1b:b4:33:
5e:77:f4:34:d2:03:e7:0e:b3:58:cc:44:1c:7e:d4:
1d:4b:03:e3:2b:f0:ef:48:d0:86:7e:93:3a:89:06:
d6:25:2e:76:2b:48:ec:cc:d6:d0:97:37:52:c9:8d:
f5:bf:c2:30:b1:37:16:6f:b0:b1:88:46:74:b1:08:
dc:f2:aa:79:0d:eb:5f:78:40:1e:80:26:46:b5:b1:
a9:49:08:ce:71:68:07:e8:b0:60:37:d6:f0:35:02:
b8:9a:98:da:6c:8b:fe:93:35:7d:94:d9:91:e4:8e:
1c:9c:0f:2b:ef:03:2c:67:15:59:8b:33:6e:3f:5f:
15:2e:6b:ad:c9:49:25:ac:3c:32:f9:52:02:df:3f:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:DE:8F:D8:50:60:B7:98:EF:50:57:41:BC:E5:73:DC:DF:74:DC
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/IBzej9hQYLeY71BXQbzlc9zfdNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.0.0/22
31.170.24.0/21
37.221.104.0/22
45.8.152.0/22
45.14.4.0/22
45.93.232.0/22
45.131.188.0/22
45.152.172.0/22
81.92.196.0/22
81.92.220.0/22
85.30.128.0/18
92.39.32.0/20
94.46.136.0/22
94.46.240.0/22
128.127.184.0/21
141.98.236.0/22
155.137.24.0/21
178.236.64.0/20
178.255.112.0/22
185.4.8.0/22
185.121.44.0/22
185.176.28.0/22
185.186.32.0/22
185.197.224.0/22
185.216.152.0/22
185.223.236.0/22
185.240.208.0/22
185.247.236.0/22
188.66.48.0/22
193.34.202.0/24
193.221.93.0/24
193.221.120.0/24
193.221.123.0/24
193.221.219.0/24
195.210.52.0/23
IPv6:
2a02:80::/29
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
76:fb:ed:64:1c:11:15:11:ce:9c:c9:ed:50:b6:2c:e2:27:9e:
2c:76:34:8d:74:58:97:9b:1e:2f:e3:1f:37:ab:f6:3c:11:41:
a0:5d:30:8e:8c:50:e3:2a:b4:8c:4a:9d:d0:dd:6a:9b:db:c8:
88:f3:74:6f:f1:b2:39:68:00:04:e4:51:6c:e3:86:c9:8e:1d:
9a:aa:db:20:32:4c:59:a1:05:2c:4e:8c:2f:ff:de:a7:d6:81:
f5:f9:44:f5:95:82:49:b2:f8:63:a1:b4:f7:ad:cc:fa:3a:db:
42:35:bc:28:3e:96:bd:c8:df:bb:a4:f3:d5:7f:8c:6e:b7:de:
79:a0:49:99:51:08:82:78:39:95:46:a6:af:c0:a8:b4:54:bf:
3a:88:21:2a:0e:60:9c:73:a2:eb:3e:8e:5f:8b:77:8a:4a:41:
3c:78:70:27:f6:ae:8a:fd:63:0d:15:68:30:dd:f7:f5:75:09:
18:d9:36:c1:6b:c2:b1:59:a0:e3:57:95:b4:83:4f:c3:dd:b7:
f1:3b:14:2a:4b:3c:15:e1:29:f6:81:3b:78:b5:52:73:9c:0d:
bf:2d:32:7f:55:73:bc:60:48:1a:98:df:b9:5c:e2:08:f7:f3:
a9:a9:0e:63:bd:52:d7:42:0c:90:b5:6d:91:09:a9:74:0c:63:
e4:37:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:21 2025 by rpki-client