Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/8onrkNUU5nl1anTLGULEk9B2MKQ.roa
File: 8onrkNUU5nl1anTLGULEk9B2MKQ.roa (raw, json)
Hash identifier: 55RrvVRaaSO7VAfdw9KRxo57+WZWKiBlY6dwVoewVAE=
Subject key identifier: F2:89:EB:90:D5:14:E6:79:75:6A:74:CB:19:42:C4:93:D0:76:30:A4
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 018CFE295FBB5FF2A29A0C65193C2F99D0BA
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/8onrkNUU5nl1anTLGULEk9B2MKQ.roa
Signing time: Fri 12 Jan 2024 14:52:53 +0000
ROA not before: Fri 12 Jan 2024 14:52:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201589
IP address blocks: 5.101.71.0/24 maxlen: 24
185.238.152.0/24 maxlen: 24
185.238.153.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
185.238.154.0/24 maxlen: 24
5.101.37.0/24 maxlen: 24
5.101.38.0/24 maxlen: 24
5.101.36.0/24 maxlen: 24
91.108.187.0/24 maxlen: 24
5.101.39.0/24 maxlen: 24
31.184.233.0/24 maxlen: 24
31.184.232.0/24 maxlen: 24
31.184.235.0/24 maxlen: 24
31.184.234.0/24 maxlen: 24
2a13:1ec0:1000::/44 maxlen: 44
2a13:1ec0:1010::/44 maxlen: 44
2a13:1ec0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 02 Feb 2024 15:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:29:5f:bb:5f:f2:a2:9a:0c:65:19:3c:2f:99:d0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Jan 12 14:52:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f289eb90d514e679756a74cb1942c493d07630a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:64:36:b6:ba:f7:5f:55:8e:27:a8:ba:92:
2d:11:65:60:68:2a:30:03:02:14:49:96:bd:65:47:
5a:d3:9e:51:dd:9c:33:ac:39:a4:fa:22:b5:16:13:
01:1d:8e:a8:1c:00:2f:fd:2c:03:f2:e6:bc:13:41:
42:b9:72:5d:39:15:fe:a8:30:06:f6:89:cc:f2:79:
af:03:4f:9f:d3:81:66:9c:66:83:d1:8b:b0:69:c2:
2a:91:e0:d0:63:58:4a:b3:d8:13:98:62:50:51:d7:
85:68:cd:2c:90:cd:20:6a:02:04:20:e4:a5:a6:36:
fd:21:4a:57:1c:26:7e:ad:da:29:ca:54:9d:d0:f2:
53:9d:2d:92:3a:e5:41:50:cf:29:4e:92:99:72:a8:
cb:37:f9:9f:fb:94:a2:8e:75:b1:cb:cf:ff:e4:46:
d0:06:dc:de:92:89:36:c1:92:6b:f3:d7:2e:bc:6e:
74:3c:bb:36:47:d2:26:a3:c2:c3:37:3c:ad:53:c0:
71:a6:fa:49:5f:45:67:be:06:b1:bb:21:1e:b3:1e:
46:7b:99:4d:9c:4d:92:08:af:2c:d7:95:92:06:fb:
30:d3:9b:cc:b7:5f:2f:78:9d:27:02:bb:82:0e:e8:
a1:c1:6f:ed:53:1b:22:91:2c:e8:dd:51:df:bf:9b:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:EB:90:D5:14:E6:79:75:6A:74:CB:19:42:C4:93:D0:76:30:A4
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/8onrkNUU5nl1anTLGULEk9B2MKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.36.0/22
5.101.71.0/24
31.184.232.0/22
91.108.187.0/24
185.238.152.0/22
IPv6:
2a13:1ec0::/44
2a13:1ec0:1000::/43
Signature Algorithm: sha256WithRSAEncryption
14:6c:dd:a9:f3:2a:a1:26:da:52:4a:1f:c5:0c:fe:07:b6:56:
97:43:f1:fb:1b:1f:54:c0:a3:c5:b5:2a:af:d7:e2:74:e6:ec:
af:b7:1c:16:02:77:d2:77:f3:44:44:30:f1:2e:0d:ea:23:1d:
ab:35:54:2c:6e:9a:5d:2a:95:98:05:e3:10:00:81:64:c3:0c:
64:0a:e9:6b:88:20:06:97:ab:32:99:fd:1a:24:b0:bc:21:c7:
62:95:6b:c8:7d:19:83:c3:04:45:07:e5:3d:e6:64:db:ab:90:
7b:04:55:1a:39:46:1c:46:90:05:b8:aa:66:02:74:33:f6:75:
8a:99:0e:c7:41:52:bd:0c:b5:07:15:d3:65:37:aa:56:a7:b8:
cb:24:7c:f3:df:64:3d:76:0f:69:69:9d:a7:5e:67:b1:39:8c:
de:58:66:57:b2:aa:81:69:f0:aa:ad:26:b2:b9:b9:3b:78:9a:
17:e7:5f:a5:15:9e:79:0c:3e:7c:c7:b7:3c:cf:a8:f3:1f:11:
9e:bc:98:ff:ad:c0:4b:02:04:8a:52:d1:12:b6:55:bb:c4:e4:
b8:a2:f9:be:09:b7:5f:3d:77:79:fa:91:f2:8d:52:07:c8:89:
a3:c7:1c:33:b3:cb:82:67:1f:90:da:7d:62:e7:de:87:5a:a3:
3e:a6:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:38 2024 by rpki-client on console-ams.rpki-client.org