Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/J_SY8yBxE2n6ktmeYIFNFmu4Ekg.roa
File: J_SY8yBxE2n6ktmeYIFNFmu4Ekg.roa (raw, json)
Hash identifier: zpkXeeC6SBCBSqsfUGvRpuQ876OHjg04Bf2XQhEqsIM=
Subject key identifier: 27:F4:98:F3:20:71:13:69:FA:92:D9:9E:60:81:4D:16:6B:B8:12:48
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191526CFC18CA936E587F310FD16CFA5BF4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/J_SY8yBxE2n6ktmeYIFNFmu4Ekg.roa
Signing time: Wed 14 Aug 2024 19:45:59 +0000
ROA not before: Wed 14 Aug 2024 19:45:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 5.182.116.0/24 maxlen: 24
45.86.3.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
46.149.174.0/24 maxlen: 24
62.204.32.0/24 maxlen: 24
83.171.212.0/22 maxlen: 22
178.212.78.0/24 maxlen: 24
185.253.2.0/24 maxlen: 24
188.64.140.0/24 maxlen: 24
188.93.136.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
212.115.48.0/24 maxlen: 24
212.115.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 06:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:6c:fc:18:ca:93:6e:58:7f:31:0f:d1:6c:fa:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 14 19:45:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f498f320711369fa92d99e60814d166bb81248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:f0:62:2a:bb:6d:71:a0:89:9c:dc:20:50:
50:35:d9:42:6b:fb:e4:0a:73:14:1e:68:30:c2:98:
87:64:e5:8a:6a:c6:ed:cf:44:92:d2:08:a7:25:22:
e7:c5:03:95:ec:3a:28:4e:9e:f9:91:3a:6b:2d:bb:
b3:6b:fd:0e:19:bd:aa:85:16:6b:53:cd:0f:23:01:
b2:e0:26:7d:e2:bf:1b:3c:15:6f:30:73:08:31:24:
f7:6a:7d:99:75:d8:36:97:44:14:e1:43:5f:bf:1d:
6e:d3:87:53:c0:e7:1e:52:f3:b4:6b:e3:ec:cf:06:
5c:cc:7c:d1:91:4c:8c:e1:d4:38:5d:e5:a9:05:3c:
53:31:c3:43:9c:ec:dd:43:26:cf:0e:8d:32:f9:6f:
79:bb:f1:a2:69:19:0a:78:8b:25:af:fd:84:4d:5c:
5f:0b:0d:a1:7d:55:e3:7b:15:75:b4:3c:87:67:3f:
ec:23:93:0f:ac:32:59:dd:4e:e7:5a:55:9b:70:93:
76:75:57:bd:2d:53:29:83:b2:29:b1:1c:1a:bd:0a:
84:d2:62:a6:a1:9d:be:ea:0c:0a:f3:af:e5:c0:ff:
e3:19:39:3c:a4:d6:1b:32:ae:99:47:e1:3a:cd:95:
66:10:a6:68:e6:7c:61:b7:f0:50:bb:80:fb:cb:01:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:98:F3:20:71:13:69:FA:92:D9:9E:60:81:4D:16:6B:B8:12:48
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/J_SY8yBxE2n6ktmeYIFNFmu4Ekg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
45.86.3.0/24
45.128.130.0/23
46.149.174.0/24
62.204.32.0/24
83.171.212.0/22
178.212.78.0/24
185.253.2.0/24
188.64.140.0/24
188.93.136.0/24
212.60.6.0/24
212.107.24.0/24
212.115.48.0/24
212.115.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:40:92:6c:55:4f:5e:c6:8d:03:e5:37:7d:fa:a7:82:f5:63:
c8:b8:65:3c:cf:c1:9e:55:6b:57:1d:44:4b:72:fa:2b:9a:b9:
d3:fb:8d:d3:f0:60:17:5c:73:cd:0a:97:e2:3b:c6:36:27:f1:
26:03:86:01:56:d7:e7:bc:92:a7:dc:86:fb:bf:44:64:52:4c:
aa:bb:4b:01:37:d1:78:73:f9:01:2c:13:10:56:e6:81:b2:53:
56:6c:fd:aa:55:e5:87:db:65:2f:d5:84:88:3c:0b:0d:8d:57:
6b:7f:04:ae:d5:33:ad:a6:0a:e0:65:e0:9c:b2:56:cd:9e:e5:
27:10:d2:65:ff:ef:a5:3c:66:54:19:c4:b4:4b:7f:a9:f9:f0:
c1:ac:4e:53:7e:97:bd:7d:35:22:5c:be:12:b1:1a:12:ba:02:
a0:07:2c:09:cd:72:8b:08:fe:b4:80:2b:48:3e:dc:59:22:91:
d7:58:5d:55:5c:7c:c3:eb:33:57:5a:fb:4a:77:8a:bc:58:d5:
85:9a:e3:48:29:86:76:06:0c:aa:12:36:5e:28:1f:2e:6d:00:
0c:0a:dd:da:b7:4a:27:8d:ad:e0:c1:c8:e9:c3:f3:e0:8a:12:
cb:45:12:df:56:4d:7a:4f:1c:b0:e5:d6:60:94:19:d0:a3:2a:
f0:b5:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:04:40 2024 by rpki-client on console-fra.rpki-client.org