Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5plon0lboSqojZdDZd7Bwigv-SM.roa
File: 5plon0lboSqojZdDZd7Bwigv-SM.roa (raw, json)
Hash identifier: fMmgNOpTZlU3FqTye0FNckX5Om26YhHAfjyIWNI2ijo=
Subject key identifier: E6:99:68:9F:49:5B:A1:2A:A8:8D:97:43:65:DE:C1:C2:28:2F:F9:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F283B905B70652450D54B6A9CC802588E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5plon0lboSqojZdDZd7Bwigv-SM.roa
Signing time: Mon 29 Apr 2024 05:02:23 +0000
ROA not before: Mon 29 Apr 2024 05:02:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a06:de01:d0::/44 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
2a10:ccc3:cccc::/48 maxlen: 48
2a10:ccc3:ccce::/47 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 May 2024 09:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:3b:90:5b:70:65:24:50:d5:4b:6a:9c:c8:02:58:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 29 05:02:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e699689f495ba12aa88d974365dec1c2282ff923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:36:7f:52:4a:c0:f8:96:a3:6e:96:7e:1c:
dd:5d:fb:08:8a:85:58:da:39:e3:d9:7e:60:88:b3:
8b:18:cc:bf:0c:9b:4c:95:06:6a:2d:f6:40:f3:c6:
19:66:94:96:03:02:bf:88:b2:81:67:19:70:d3:98:
81:de:4e:70:24:d5:1c:c4:9d:24:ca:43:d8:42:1a:
9a:14:0d:39:5d:1c:05:77:d8:07:d4:e6:ab:ac:f9:
a2:94:2f:b7:88:1e:71:08:d3:b6:ad:71:7e:86:eb:
82:1d:54:c6:31:52:43:bb:ed:f4:a4:30:b8:59:c7:
62:dc:fd:a6:ce:e5:ff:0d:12:bb:ed:8e:cc:b8:19:
19:2f:f9:6d:9f:97:7c:2f:bd:8e:89:c5:b8:43:25:
05:50:ed:02:e7:c8:62:99:50:4d:d4:f8:4f:01:a3:
96:ad:bc:c2:ec:f3:33:92:0a:4b:2b:12:cc:fe:2e:
07:6d:85:e0:dd:cb:f1:0d:23:dd:05:24:dc:98:a8:
a5:b1:18:09:ed:fe:fa:75:ce:47:0b:0a:b5:9f:03:
62:a3:7c:e2:4c:ff:e9:ba:0a:15:96:27:f3:bd:c1:
4f:53:72:92:f1:0e:e1:44:ec:6b:7f:54:06:9c:ad:
d0:20:ff:d3:f0:da:55:c6:2a:a4:4b:29:80:c4:9c:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:68:9F:49:5B:A1:2A:A8:8D:97:43:65:DE:C1:C2:28:2F:F9:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5plon0lboSqojZdDZd7Bwigv-SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc3:ccca::/48
2a10:ccc3:cccc::/48
2a10:ccc3:ccce::/47
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
9a:c7:9d:94:db:b0:e0:b0:13:2d:f1:e2:cd:27:2a:8a:89:ee:
3f:ae:d9:7f:2a:6b:c5:d3:34:0d:c1:fc:b7:e0:06:74:71:4b:
c6:44:23:27:6b:0f:43:d4:78:cc:52:3a:69:f6:8e:d3:6a:8f:
6b:13:35:c5:62:81:2b:78:01:18:d8:ee:72:d6:c0:ed:3d:44:
f1:75:64:ae:70:a6:67:83:24:6a:32:b1:2b:a5:71:f4:a0:88:
f5:99:db:25:3d:49:e1:5c:59:fb:9e:2b:0a:dd:36:e3:7c:c6:
09:9d:3e:4f:1e:90:0a:19:7a:d8:96:2e:97:89:03:29:b5:75:
90:23:1e:06:30:c2:f5:79:8a:7e:24:e9:55:86:c8:a3:fc:b1:
91:5d:fc:50:5e:31:cd:89:d0:fa:3b:c4:58:68:53:93:20:6f:
e0:02:8e:85:17:e5:2d:83:ec:6b:bf:75:77:70:df:07:0e:7d:
e1:6c:6e:7b:82:ef:f3:55:61:92:01:89:1e:86:b9:eb:aa:46:
c0:f0:30:aa:75:c1:e1:6b:e4:8e:ab:0c:94:28:52:ec:94:70:
cf:fc:05:0d:72:3a:17:3d:d9:d0:4c:b3:9a:76:c9:db:31:fa:
64:fd:38:61:af:41:ba:11:97:b7:a2:7d:e9:5f:14:12:d8:e9:
50:5a:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:54 2024 by rpki-client on console-ams.rpki-client.org