Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/5UnDNoBDdChKgPHVLpf_kodCGWM.roa
File: 5UnDNoBDdChKgPHVLpf_kodCGWM.roa (raw, json)
Hash identifier: 5mLCWPEHfQ8whHuy4CO+4QQWWqF1KVmQavdO65KzYdc=
Subject key identifier: E5:49:C3:36:80:43:74:28:4A:80:F1:D5:2E:97:FF:92:87:42:19:63
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0185B4D57E54848468FD89FD3229B15B14E5
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/5UnDNoBDdChKgPHVLpf_kodCGWM.roa
Signing time: Sun 15 Jan 2023 09:49:28 +0000
ROA not before: Sun 15 Jan 2023 09:49:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.21.76.0/22 maxlen: 24
217.66.211.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
185.70.60.0/22 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.219.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 23
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 23
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
86.109.32.0/23 maxlen: 23
81.29.250.0/24 maxlen: 24
81.29.250.0/23 maxlen: 23
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
188.75.122.0/23 maxlen: 23
86.109.41.0/24 maxlen: 24
185.142.233.0/24 maxlen: 24
86.109.56.0/23 maxlen: 23
79.132.213.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.190.20.0/22 maxlen: 24
78.158.182.0/23 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
87.247.180.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.124.0/23 maxlen: 23
80.71.122.0/23 maxlen: 23
80.71.127.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
188.136.220.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
185.104.228.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 10:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b4:d5:7e:54:84:84:68:fd:89:fd:32:29:b1:5b:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 15 09:49:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e549c336804374284a80f1d52e97ff9287421963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:fb:3f:76:88:83:db:73:0d:b9:43:18:5f:
91:90:43:03:f2:47:2c:fb:11:48:09:e4:2b:c9:30:
7d:bc:e1:f2:27:61:6c:19:e1:d9:9c:e2:1f:3d:37:
30:c2:8a:af:c5:cc:30:86:2c:e1:fe:9d:01:e8:dd:
d2:47:fd:8e:f7:5a:d1:eb:77:7d:ac:0e:df:ba:02:
ab:97:c8:7a:7a:80:f7:24:35:87:66:a5:6a:28:f9:
79:18:09:11:c4:38:06:09:d6:c1:dd:19:c7:89:87:
26:69:58:88:9b:1b:d5:c7:57:62:ab:9f:65:bc:9d:
aa:ab:f3:e7:7c:6c:19:cf:14:1e:2e:c8:c5:e8:18:
a7:dc:a4:6d:51:0b:4c:82:25:72:17:ba:3e:f4:9b:
18:7d:41:7c:f2:b1:60:05:db:ab:cd:57:18:34:70:
4b:b9:ed:9c:e5:24:12:4e:21:f6:9a:13:9b:83:f2:
5f:d2:ee:b1:91:2d:a3:f3:ef:2a:4c:0d:3a:db:ba:
cc:5c:5f:73:d6:c2:de:00:58:9d:69:b8:ff:b4:32:
a9:0d:4c:4d:a8:f1:2b:82:e0:4f:10:7c:fa:e7:05:
a5:6f:14:5a:d5:19:4e:cf:21:68:99:79:45:77:8b:
e4:3c:7f:6b:a7:1c:c8:db:3e:cc:ce:9c:77:ef:4d:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:C3:36:80:43:74:28:4A:80:F1:D5:2E:97:FF:92:87:42:19:63
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/5UnDNoBDdChKgPHVLpf_kodCGWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.248.0/21
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
78.158.182.0/23
79.132.213.0/24
79.132.217.0/24
79.132.219.0/24
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
86.109.32.0/23
86.109.41.0/24
86.109.56.0/23
87.247.180.0/23
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.70.60.0/22
185.104.228.0/24
185.142.233.0-185.142.235.255
185.190.20.0/22
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.122.0/23
188.136.220.0/23
217.66.208.0/24
217.66.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:31:9d:5c:57:62:2e:12:7e:78:76:60:04:14:a6:8a:7b:54:
fd:32:0e:c3:37:c6:b3:11:7f:a6:33:d8:66:29:b4:e6:38:e4:
cf:44:ec:ea:da:17:99:05:a7:5f:35:01:95:d2:82:bf:bb:82:
fa:13:a5:b9:8d:9c:cf:4e:a3:1e:e7:0f:46:31:d4:63:6c:28:
54:ba:d7:1c:ad:f2:7f:ca:95:7a:c9:20:59:8b:1d:3e:27:45:
03:6b:12:ef:3b:88:ff:66:90:8d:6c:77:a5:5e:9a:b0:e8:3a:
ea:40:de:58:73:e4:20:21:e9:34:e0:c7:af:3d:ee:5e:41:90:
62:f3:4d:a7:cb:62:85:4d:da:c3:b2:ea:c4:69:19:20:07:00:
de:39:f9:84:3e:db:d2:d2:57:7c:c9:55:4b:be:79:f5:b0:85:
c1:1b:90:12:16:58:27:20:ef:a5:c0:f8:61:28:9f:56:3c:05:
06:da:d8:62:49:8d:dc:2d:3d:ce:6d:e0:3c:4f:fc:29:9f:df:
0d:18:47:6f:3d:13:7a:73:15:cf:99:bd:f5:c2:f8:dd:2c:a3:
dc:63:50:81:45:4a:08:c1:61:cf:ff:fb:e4:47:98:c6:95:0e:
5f:02:fb:3a:63:a5:f3:e4:2d:b3:76:e8:1c:a5:4c:d4:71:ee:
89:fb:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org