Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/WvfPNpUcSTVIYLl2czM7dbDHOa4.roa
File: WvfPNpUcSTVIYLl2czM7dbDHOa4.roa (raw, json)
Hash identifier: 4gsn+TKftkASs2Ye6t+uQngfV1cc6/vAhdLEV+aZEtY=
Subject key identifier: 5A:F7:CF:36:95:1C:49:35:48:60:B9:76:73:33:3B:75:B0:C7:39:AE
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 018D6A854920D8ECEA9AF58771B76350933B
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/WvfPNpUcSTVIYLl2czM7dbDHOa4.roa
Signing time: Fri 02 Feb 2024 15:52:16 +0000
ROA not before: Fri 02 Feb 2024 15:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201589
IP address blocks: 5.101.36.0/24 maxlen: 24
5.101.37.0/24 maxlen: 24
5.101.38.0/24 maxlen: 24
5.101.39.0/24 maxlen: 24
5.101.71.0/24 maxlen: 24
31.184.232.0/24 maxlen: 24
31.184.233.0/24 maxlen: 24
31.184.234.0/24 maxlen: 24
31.184.235.0/24 maxlen: 24
91.108.187.0/24 maxlen: 24
185.238.152.0/24 maxlen: 24
185.238.153.0/24 maxlen: 24
185.238.154.0/24 maxlen: 24
185.238.155.0/24 maxlen: 24
2a13:1ec0::/44 maxlen: 44
2a13:1ec0:100::/44 maxlen: 44
2a13:1ec0:1000::/44 maxlen: 44
2a13:1ec0:1010::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 24 Jun 2024 14:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:85:49:20:d8:ec:ea:9a:f5:87:71:b7:63:50:93:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Feb 2 15:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5af7cf36951c49354860b97673333b75b0c739ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:a6:fc:4b:3f:bf:f8:c4:00:55:60:b7:65:
bd:f1:ac:54:d9:35:74:2c:f1:c9:1f:42:51:26:6e:
1d:d9:fe:53:d9:c3:aa:c4:b6:e3:14:a5:22:4e:33:
97:6c:53:28:fa:ed:bc:fa:47:4a:21:9b:5c:93:df:
be:e5:6d:46:e3:a6:d9:3c:e3:16:f8:5e:e3:7f:4d:
7b:f8:0e:d9:f5:e9:7f:14:ab:de:18:0b:d1:a1:52:
0c:ce:d9:aa:b5:8a:de:7d:7e:35:1b:2c:9f:af:dd:
70:d8:4b:d6:be:e6:6b:26:f0:42:ab:a8:dd:f4:1e:
84:60:1e:4a:ef:aa:fa:28:83:77:32:6c:34:f6:e9:
62:ff:8a:c8:9f:7c:de:09:29:5f:7e:ac:67:51:52:
da:99:0b:1d:86:87:63:92:a5:20:18:7a:27:cb:53:
e5:6b:b7:91:36:81:27:78:55:eb:7c:a0:c6:38:ea:
a0:b0:18:2d:56:94:11:82:80:f8:8d:75:a0:d7:a4:
4d:50:fc:6d:3d:ce:68:43:79:e1:c4:d9:f0:6a:03:
70:5d:1a:80:4c:78:58:0b:18:25:ce:dd:62:56:17:
9d:a8:b5:71:04:fd:66:95:be:4d:c5:4b:9c:76:51:
4f:66:24:4b:d3:81:8b:f4:12:ac:1f:87:05:e0:2c:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:CF:36:95:1C:49:35:48:60:B9:76:73:33:3B:75:B0:C7:39:AE
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/WvfPNpUcSTVIYLl2czM7dbDHOa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.36.0/22
5.101.71.0/24
31.184.232.0/22
91.108.187.0/24
185.238.152.0/22
IPv6:
2a13:1ec0::/44
2a13:1ec0:100::/44
2a13:1ec0:1000::/43
Signature Algorithm: sha256WithRSAEncryption
13:90:27:f1:a5:0a:79:3b:0c:28:3f:42:cd:dc:73:41:47:34:
0c:37:59:38:e4:23:64:64:2f:ba:20:11:86:59:54:dd:a5:d7:
e2:87:ec:9e:65:bb:94:39:46:99:eb:a1:76:4d:c0:d2:8f:d3:
55:25:d7:32:d7:0f:b0:f4:2c:ff:53:a5:88:51:5d:97:c7:7b:
a8:75:d4:11:28:17:84:df:d3:80:87:4e:cd:d9:40:4d:27:60:
63:89:1c:89:2a:73:92:10:94:43:ae:a1:a7:64:be:85:bf:00:
5d:3c:4a:05:8f:5a:d7:07:21:8a:11:81:1c:f2:31:e9:1e:d0:
7d:98:dc:16:6c:83:31:31:8b:58:fe:75:7e:d3:a1:c4:05:53:
67:35:3f:33:d3:86:74:d8:95:3f:b2:7b:63:c2:e3:0d:5f:7d:
de:fe:9f:c0:f0:22:5b:c5:20:6d:3f:d8:0c:b9:fa:fa:cf:da:
ae:01:e8:d8:04:9f:5f:67:57:12:35:3e:d1:25:e0:ef:ac:be:
74:c3:b8:72:da:92:2c:38:18:da:4b:d2:cf:fb:4d:09:65:e2:
bf:0a:72:51:15:44:12:1a:92:a6:23:34:1e:52:28:91:7f:c6:
3a:c4:0d:30:92:00:dd:f8:1c:6a:80:17:75:e1:8c:22:2d:98:
9e:07:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:58 2025 by rpki-client