Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RXlA2sHKgptWFvNlPybyNc4Hylw.roa
File: RXlA2sHKgptWFvNlPybyNc4Hylw.roa (raw, json)
Hash identifier: yL62DMRX7lJGHlibgJM+3P8HaNvxdxc5oB3aI/74bXk=
Subject key identifier: 45:79:40:DA:C1:CA:82:9B:56:16:F3:65:3F:26:F2:35:CE:07:CA:5C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EBDAE7C66FABA567FD037AB53608534C5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RXlA2sHKgptWFvNlPybyNc4Hylw.roa
Signing time: Mon 08 Apr 2024 12:28:32 +0000
ROA not before: Mon 08 Apr 2024 12:28:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 31.41.253.0/24 maxlen: 24
45.87.255.0/24 maxlen: 24
45.95.28.0/24 maxlen: 24
45.128.129.0/24 maxlen: 24
45.131.160.0/24 maxlen: 24
45.131.161.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.222.214.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 19:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:ae:7c:66:fa:ba:56:7f:d0:37:ab:53:60:85:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 8 12:28:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=457940dac1ca829b5616f3653f26f235ce07ca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:72:4d:ae:61:52:96:63:3c:1c:73:6f:81:
08:61:a1:8b:fa:18:5c:37:6f:29:ac:70:82:b0:1f:
a5:81:62:01:ff:08:c8:84:82:ac:12:2a:4f:e7:4e:
43:76:a3:8a:2c:b3:11:bd:13:15:48:79:90:28:d8:
7d:8e:4b:81:0c:07:0b:fe:23:da:52:67:82:ae:8b:
11:0e:8a:e2:b3:cd:1e:b1:fa:20:3e:83:44:c0:22:
f9:5c:83:13:96:5e:41:55:b5:89:2e:c6:d2:cb:04:
21:65:a8:ea:58:d8:e1:37:c1:8e:5e:72:40:a3:33:
bd:56:85:c1:cb:b9:17:db:ad:d6:9e:f6:ec:34:88:
92:7b:fa:f0:56:5d:6a:25:78:91:9a:a3:dc:3e:ba:
95:19:82:fd:cb:2f:d4:20:6b:9e:57:f1:be:5b:67:
08:d0:aa:74:f5:ad:50:ba:19:ba:8a:e9:f2:fe:69:
b9:63:26:1a:2c:14:4e:da:40:80:33:53:f0:7b:70:
8a:58:97:76:97:15:41:31:34:94:de:a5:79:02:ff:
f3:18:18:4e:6f:ff:ff:fb:67:f1:43:fa:46:19:4b:
12:21:fb:50:a9:42:b7:f2:04:9d:e9:e5:9e:56:23:
e8:d9:98:9f:c0:0a:bf:fe:cb:ef:cb:dd:35:d1:f3:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:79:40:DA:C1:CA:82:9B:56:16:F3:65:3F:26:F2:35:CE:07:CA:5C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RXlA2sHKgptWFvNlPybyNc4Hylw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.253.0/24
45.87.255.0/24
45.95.28.0/24
45.128.129.0/24
45.131.160.0/23
91.190.158.0/24
94.154.188.0/23
94.154.191.0/24
176.126.102.0/24
185.222.214.0/24
193.187.106.0/24
212.60.7.0/24
Signature Algorithm: sha256WithRSAEncryption
45:93:d5:b7:f7:02:2e:12:60:74:5a:df:60:c1:f7:c4:94:5a:
e0:b2:f4:37:db:88:3d:c4:87:9e:98:b5:ee:d2:2d:37:ca:8e:
2b:d5:ab:42:bd:a3:09:c0:4a:6f:6b:cf:ac:00:1b:fb:13:98:
f6:e2:be:76:1d:c9:63:5b:f3:f9:fa:11:56:a9:ff:10:6f:8c:
1b:bd:34:4c:5d:79:b3:75:65:e1:69:48:95:36:11:fe:2c:ec:
ea:58:0f:a8:cd:ec:5a:89:cd:91:08:96:4d:9d:a2:8c:68:e7:
e7:b5:0a:a5:a3:8e:27:43:dc:37:03:54:9a:e2:83:92:4d:e6:
41:00:78:fe:e4:0a:ae:51:b4:be:fb:02:5b:28:b8:49:72:0f:
71:20:d8:23:f8:0d:21:89:f1:54:74:d4:04:d8:55:9d:eb:68:
05:f4:39:70:d6:25:28:3b:95:af:42:25:ca:87:3c:2f:0f:5d:
70:de:68:17:a8:fb:b7:c3:35:7e:00:15:c9:2a:7d:a2:35:83:
8b:d6:85:f7:ad:16:13:4f:35:4c:59:f2:2c:a5:31:ee:69:c0:
01:9f:09:2e:f7:00:56:03:7c:13:90:4c:36:82:16:9e:35:f0:
bb:58:d7:f1:5e:b0:28:e9:52:6b:f1:6e:ec:88:a7:47:5d:20:
83:99:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:08 2024 by rpki-client on console-fra.rpki-client.org