Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/rGMBA55Es1_3ZUZWM-VDTsuZi9I.roa
File: rGMBA55Es1_3ZUZWM-VDTsuZi9I.roa (raw, json)
Hash identifier: m0h5vsKsu/UYXm07T2UPopWd8Zv8a+KFvU8NzXpsHQM=
Subject key identifier: AC:63:01:03:9E:44:B3:5F:F7:65:46:56:33:E5:43:4E:CB:99:8B:D2
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 01926FAC8D1AE825F00F2A775E54E977303A
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/rGMBA55Es1_3ZUZWM-VDTsuZi9I.roa
Signing time: Wed 09 Oct 2024 05:07:12 +0000
ROA not before: Wed 09 Oct 2024 05:07:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31200
IP address blocks: 5.128.0.0/16 maxlen: 16
5.128.119.0/24 maxlen: 24
5.129.0.0/17 maxlen: 17
5.129.128.0/19 maxlen: 19
5.129.181.0/24 maxlen: 24
5.129.184.0/23 maxlen: 23
5.129.186.0/24 maxlen: 24
5.130.0.0/16 maxlen: 16
5.130.162.0/24 maxlen: 24
5.130.163.0/24 maxlen: 24
5.130.164.0/24 maxlen: 24
5.130.165.0/24 maxlen: 24
5.130.166.0/24 maxlen: 24
5.131.0.0/16 maxlen: 16
5.131.0.0/17 maxlen: 17
5.131.128.0/18 maxlen: 18
5.131.192.0/19 maxlen: 19
5.131.224.0/20 maxlen: 20
5.131.240.0/20 maxlen: 20
5.131.251.0/24 maxlen: 24
5.131.253.0/24 maxlen: 24
37.192.0.0/14 maxlen: 14
37.192.0.0/16 maxlen: 16
37.193.0.0/16 maxlen: 16
37.194.0.0/16 maxlen: 16
37.195.0.0/16 maxlen: 16
178.49.0.0/16 maxlen: 24
178.49.0.0/17 maxlen: 17
178.49.12.0/22 maxlen: 22
178.49.56.0/22 maxlen: 22
178.49.128.0/17 maxlen: 24
178.49.132.0/24 maxlen: 24
178.49.133.0/24 maxlen: 24
178.49.141.0/24 maxlen: 24
178.49.142.0/24 maxlen: 24
178.49.144.0/24 maxlen: 24
178.49.145.0/24 maxlen: 24
178.49.146.0/24 maxlen: 24
178.49.147.0/24 maxlen: 24
178.49.148.0/24 maxlen: 24
178.49.150.0/23 maxlen: 23
178.49.152.0/22 maxlen: 22
178.49.152.0/23 maxlen: 23
178.49.152.0/24 maxlen: 24
178.49.154.0/23 maxlen: 23
178.49.154.0/24 maxlen: 24
178.49.156.0/23 maxlen: 23
178.49.158.0/24 maxlen: 24
178.49.159.0/24 maxlen: 24
178.49.200.0/22 maxlen: 22
178.49.248.0/22 maxlen: 22
2a00:7700::/32 maxlen: 32
2a00:7700:8a02::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Oct 2024 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6f:ac:8d:1a:e8:25:f0:0f:2a:77:5e:54:e9:77:30:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Oct 9 05:07:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac6301039e44b35ff765465633e5434ecb998bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:e7:07:3a:d8:b4:6e:10:3c:64:68:25:aa:
3b:74:3e:76:ad:b7:26:b6:03:84:6d:64:ec:d6:0d:
1a:df:8c:59:7f:2c:ab:34:2a:70:78:ef:f3:fd:47:
40:78:a8:d2:df:88:88:34:98:2d:ba:90:6a:97:68:
45:3c:4e:a6:81:aa:46:a1:ce:fa:a2:68:ce:6e:96:
ee:a6:b2:e8:5c:01:7b:f5:57:6e:ee:c0:78:de:9c:
bc:65:a6:e6:54:7e:32:f2:65:43:0f:22:21:fe:a4:
9c:90:d7:0d:4a:32:7e:84:b5:48:9d:b0:60:54:13:
e8:9b:ee:53:1d:d7:e0:b8:df:f0:d1:da:75:93:8c:
16:a2:99:ff:96:0c:49:45:70:bc:47:b3:09:8e:63:
75:87:35:ca:2b:c8:33:6b:98:57:39:40:17:94:90:
f9:00:54:b6:99:0f:11:61:ce:85:b2:7e:cb:68:7d:
5f:82:b3:de:62:fa:30:b4:37:35:41:4c:7f:4f:db:
b3:a5:72:83:01:55:03:be:f0:ba:be:09:33:bb:a8:
d2:d3:2a:fd:3c:fc:ad:3b:23:14:34:45:43:b7:c2:
65:ab:2b:66:36:22:a5:2f:f9:be:99:64:e9:d4:52:
21:f0:83:91:92:2b:eb:18:2f:b3:c4:3e:14:75:b9:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:01:03:9E:44:B3:5F:F7:65:46:56:33:E5:43:4E:CB:99:8B:D2
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/rGMBA55Es1_3ZUZWM-VDTsuZi9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.128.0.0-5.129.159.255
5.129.181.0/24
5.129.184.0-5.129.186.255
5.130.0.0/15
37.192.0.0/14
178.49.0.0/16
IPv6:
2a00:7700::/32
Signature Algorithm: sha256WithRSAEncryption
b6:20:03:73:0c:b5:d0:ab:28:59:fe:79:8c:6b:51:92:0f:4a:
00:86:89:6f:8c:30:cf:ee:26:0a:9c:27:e1:1d:32:9d:97:fd:
3d:3a:8d:bb:64:b0:68:dd:1f:c2:a4:d3:1b:cf:51:43:86:a5:
c3:2f:03:aa:cf:0f:44:48:fb:82:c6:04:cd:c6:26:fe:3a:61:
25:e1:e3:b6:ea:42:a9:00:db:a1:5f:61:9c:1f:10:66:7c:e3:
82:80:2b:26:a7:7e:a6:ba:81:6b:eb:5b:3b:8f:66:0b:eb:38:
48:6c:93:95:cf:2c:66:77:1e:e0:60:2d:31:7f:bf:fc:eb:a6:
54:29:4a:1d:e5:44:a9:16:1c:69:06:38:e0:e8:dc:87:bd:54:
37:8f:dd:78:fe:d5:8a:b3:ee:75:09:72:64:48:c8:92:23:71:
39:c7:fd:3e:4e:60:2f:ec:15:a1:6a:8c:73:d3:c4:60:91:e5:
6d:4b:d3:73:7d:da:07:bf:fe:46:bb:72:c5:a0:12:1f:a1:6b:
ce:6a:2a:49:7c:37:9d:b9:a1:60:ac:72:0b:88:1f:36:d6:25:
a4:f1:db:13:c8:09:b1:db:5d:e6:2f:b1:8b:01:5c:91:36:f1:
a3:16:d3:30:de:d3:fb:95:c6:3d:f9:23:f1:4f:80:9f:3c:06:
45:e1:07:13
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 23 04:07:03 2024 by rpki-client on console-fra.rpki-client.org