Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CO7vB7YH3FO2IlS6bhA4wABkFu8.roa
File: CO7vB7YH3FO2IlS6bhA4wABkFu8.roa (raw, json)
Hash identifier: 9xzFmrc4MR+cZwp2DoCYYYCTJ0Ssz2DkFf28miQJJDI=
Subject key identifier: 08:EE:EF:07:B6:07:DC:53:B6:22:54:BA:6E:10:38:C0:00:64:16:EF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE35783C7CDDF737F5F375411824FA266
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CO7vB7YH3FO2IlS6bhA4wABkFu8.roa
Signing time: Mon 15 Apr 2024 19:59:07 +0000
ROA not before: Mon 15 Apr 2024 19:59:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 5.182.116.0/24 maxlen: 24
45.86.3.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
46.149.174.0/24 maxlen: 24
62.204.32.0/24 maxlen: 24
83.171.212.0/22 maxlen: 22
178.212.78.0/24 maxlen: 24
185.253.2.0/24 maxlen: 24
188.64.140.0/24 maxlen: 24
188.93.136.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:83:c7:cd:df:73:7f:5f:37:54:11:82:4f:a2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08eeef07b607dc53b62254ba6e1038c0006416ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:20:d6:7c:d8:03:16:ac:8b:e8:8c:37:1e:
d8:9e:de:67:55:b0:ef:12:42:38:d5:6c:08:02:24:
0d:f5:db:e2:df:36:eb:09:bc:17:49:53:b3:b3:be:
8b:b1:d9:18:f1:8f:81:a4:84:34:2d:81:e5:6c:40:
e7:a9:df:2d:ac:cd:44:25:05:18:f3:3c:23:2d:ca:
c9:10:c8:e8:8f:21:a1:42:35:b2:17:35:6a:74:94:
d3:96:38:89:0b:88:97:d3:4a:9d:e2:e9:52:7a:08:
48:64:60:f9:1b:01:45:45:f8:cc:f4:a1:b7:8e:77:
cc:be:e0:19:21:aa:ae:3f:36:0a:ff:f8:89:37:de:
cc:c5:d5:93:05:1f:de:4b:4e:f7:54:41:94:08:b3:
74:f9:ac:ed:75:77:af:03:75:e3:f2:c0:24:84:fa:
b7:d0:ae:fd:11:dd:3e:19:e5:cd:c2:46:9b:70:f4:
48:8d:79:97:a0:1c:15:1a:22:3b:ed:f1:3a:ba:61:
69:53:7f:84:e2:f4:8c:98:98:1a:2f:b9:0e:f3:61:
1f:a9:04:c3:7f:a6:2e:93:38:10:59:7c:43:40:2b:
26:8d:2d:d5:3b:4d:a1:32:5e:4e:89:60:39:0f:ae:
50:92:94:4a:74:f0:28:7e:52:66:0f:a2:31:11:54:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:EF:07:B6:07:DC:53:B6:22:54:BA:6E:10:38:C0:00:64:16:EF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CO7vB7YH3FO2IlS6bhA4wABkFu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
45.86.3.0/24
45.128.130.0/23
46.149.174.0/24
62.204.32.0/24
83.171.212.0/22
178.212.78.0/24
185.253.2.0/24
188.64.140.0/24
188.93.136.0/24
212.60.6.0/24
212.107.24.0/24
Signature Algorithm: sha256WithRSAEncryption
51:53:e4:e4:34:06:62:d1:42:43:a7:dc:43:d1:86:7a:fd:fc:
a7:48:c6:94:cb:09:4d:41:0e:c5:d6:20:18:5b:f0:a7:69:a7:
1d:70:86:82:9a:13:40:00:a0:a9:b2:90:a4:23:c9:a2:04:65:
ef:66:39:17:81:ac:36:bb:ff:a7:7b:57:61:58:4b:8d:bf:51:
51:ea:43:8c:bb:b9:94:ee:a6:44:f2:b6:0a:b4:c7:21:26:5a:
df:a5:89:84:8d:24:4e:cc:79:95:ab:9d:18:58:08:fd:93:b3:
43:d9:1a:34:76:ae:2a:2a:2a:ba:36:dc:8c:9d:84:93:25:12:
a1:34:d6:be:22:56:56:c5:db:29:13:ef:4d:5e:25:e7:b1:38:
47:10:64:47:94:fb:f9:b5:5a:f4:22:04:ca:1f:d3:03:a9:98:
69:dc:5a:85:a6:e3:f2:96:d1:60:24:de:90:68:04:63:72:bd:
17:d5:20:39:3f:70:b2:63:af:48:50:a2:39:83:6b:2c:97:65:
41:70:cc:cd:e7:31:cc:b2:46:6d:f9:03:d0:4e:1c:eb:bd:f1:
7b:e6:bd:dc:79:dd:c9:9c:2a:40:a0:99:1e:1d:b3:95:06:10:
31:81:70:3b:9e:33:8a:42:91:d0:b7:c0:ab:81:25:b0:fd:f6:
4a:a0:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:47:11 2024 by rpki-client on console-ams.rpki-client.org