Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/21s5IJHTKMZmXhb8jsULVrG9XLU.roa
File: 21s5IJHTKMZmXhb8jsULVrG9XLU.roa (raw, json)
Hash identifier: fAjL3hQqVnLJ5PJcUG3jmng4PdXtsB4A5az7y8I34oU=
Subject key identifier: DB:5B:39:20:91:D3:28:C6:66:5E:16:FC:8E:C5:0B:56:B1:BD:5C:B5
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 018CC2DAB5E98088329AD8BB3AB2B3A850A9
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/21s5IJHTKMZmXhb8jsULVrG9XLU.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8814
IP address blocks: 91.135.246.0/24 maxlen: 24
91.135.245.0/24 maxlen: 24
91.135.251.0/24 maxlen: 24
91.135.250.0/24 maxlen: 24
91.135.249.0/24 maxlen: 24
91.135.248.0/24 maxlen: 24
91.135.247.0/24 maxlen: 24
158.181.36.0/24 maxlen: 24
158.181.35.0/24 maxlen: 24
158.181.33.0/24 maxlen: 24
158.181.32.0/24 maxlen: 24
158.181.44.0/22 maxlen: 22
158.181.40.0/22 maxlen: 22
91.135.255.0/24 maxlen: 24
91.135.254.0/24 maxlen: 24
212.47.132.0/22 maxlen: 22
212.47.128.0/22 maxlen: 22
212.47.136.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.140.0/22 maxlen: 22
80.69.52.0/24 maxlen: 24
80.69.58.0/24 maxlen: 24
80.69.55.0/24 maxlen: 24
80.69.54.0/24 maxlen: 24
80.69.63.0/24 maxlen: 24
80.69.62.0/24 maxlen: 24
80.69.61.0/24 maxlen: 24
80.69.59.0/24 maxlen: 24
92.39.95.0/24 maxlen: 24
212.47.148.0/22 maxlen: 22
212.47.159.0/24 maxlen: 24
92.39.89.0/24 maxlen: 24
92.39.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 13:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b5:e9:80:88:32:9a:d8:bb:3a:b2:b3:a8:50:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db5b392091d328c6665e16fc8ec50b56b1bd5cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:27:99:7e:ea:33:e6:c7:11:e1:a2:04:25:
82:f8:48:a0:d3:b0:a4:9a:47:3b:3f:8d:c3:7b:f0:
f6:c1:ff:8c:38:fc:9c:d8:3a:3f:d6:39:cf:ae:4d:
76:70:1c:b9:a2:55:70:53:c8:94:ed:2a:9d:89:a3:
84:69:ab:9e:aa:83:66:5f:5f:37:90:cd:98:19:c5:
b0:40:42:ed:11:d5:75:5d:fe:51:c4:5a:93:f1:4a:
54:c8:09:2b:54:9d:28:6b:ea:08:50:fb:bf:7c:bb:
b1:be:fa:aa:cf:77:46:f8:49:22:1a:9b:fd:51:6e:
16:67:b8:52:23:55:9f:a1:76:7a:c8:24:0b:f5:a0:
b4:c7:05:e6:c6:6a:97:9d:63:2a:b2:92:17:6d:7f:
98:2c:97:5c:dc:85:0c:81:a3:ac:38:a3:4a:cb:4e:
65:f7:7d:56:77:19:de:ea:37:f3:9e:95:bd:55:c0:
d2:07:13:f8:08:57:9e:d8:d1:d7:b1:78:e7:67:6c:
dc:ff:b0:8d:47:cc:c8:f3:93:dc:06:e4:b7:e3:c0:
43:bd:0c:15:58:9f:a0:e1:d2:4a:a8:2d:cb:de:e6:
40:60:77:be:0b:0d:00:b0:e6:a3:af:7a:87:0f:85:
70:dd:70:37:21:a2:a4:46:81:23:4d:9b:74:45:d7:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5B:39:20:91:D3:28:C6:66:5E:16:FC:8E:C5:0B:56:B1:BD:5C:B5
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/21s5IJHTKMZmXhb8jsULVrG9XLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.52.0/24
80.69.54.0/23
80.69.58.0/23
80.69.61.0-80.69.63.255
91.135.245.0-91.135.251.255
91.135.254.0/23
92.39.88.0/23
92.39.95.0/24
158.181.32.0/23
158.181.35.0-158.181.36.255
158.181.40.0/21
212.47.128.0-212.47.151.255
212.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4f:d7:31:ca:e1:5e:8c:f5:d6:e4:5c:ba:ce:7c:14:96:0e:
e9:7c:47:4a:21:0a:85:1b:4d:8b:2b:03:22:3a:94:e9:c1:0c:
e4:69:96:ad:9a:22:41:19:c5:a7:d8:8e:6a:33:c7:e4:f3:0f:
20:5d:0c:8d:d9:f3:b8:7d:e4:23:0f:d9:73:15:05:e7:17:de:
dd:95:b0:0d:5a:04:81:02:3b:0c:90:8e:2a:e4:be:17:0d:51:
4c:86:de:da:53:75:2d:c7:9c:41:92:85:e1:6d:45:cd:8c:d2:
50:a2:2a:4d:5a:5d:ac:2d:71:14:87:e9:3f:0e:15:fe:fb:24:
41:7a:ec:39:0a:17:2e:37:de:6c:58:1e:4c:b2:6d:58:95:65:
37:08:86:29:df:40:43:7d:17:4a:42:cb:06:ab:66:b2:02:9b:
36:78:00:2c:a8:d1:9b:13:7d:4b:8b:2a:f2:01:bf:9a:cd:b2:
fa:37:18:ed:91:5e:ae:aa:72:5c:bb:e1:d9:c3:10:94:79:4a:
d5:4b:9d:22:e7:27:7c:f1:a9:c9:e6:c9:c7:98:42:a4:71:99:
3e:0c:c4:45:8b:1a:70:9d:79:db:8e:bb:46:41:70:e0:53:f4:
e8:16:cc:33:b2:e3:05:bd:cd:b2:1c:cc:f6:35:e6:c7:c7:8c:
9e:1a:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:00 2025 by rpki-client