Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/5bF6E54_ysj3sYf5mKc4dMsWZv0.roa
File: 5bF6E54_ysj3sYf5mKc4dMsWZv0.roa (raw, json)
Hash identifier: jVrE2Xe/chvT98b4wWTZRDXhOh4Kb4aU0IGhtsbS9Vk=
Subject key identifier: E5:B1:7A:13:9E:3F:CA:C8:F7:B1:87:F9:98:A7:38:74:CB:16:66:FD
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 018CC94D8BA1D14AB3D9CD141D307E92C593
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/5bF6E54_ysj3sYf5mKc4dMsWZv0.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197453
IP address blocks: 185.196.116.0/24 maxlen: 24
91.200.86.0/23 maxlen: 23
185.162.232.0/24 maxlen: 24
213.5.224.0/23 maxlen: 23
178.57.80.0/21 maxlen: 21
185.9.84.0/22 maxlen: 22
178.57.88.0/22 maxlen: 22
46.183.176.0/21 maxlen: 21
178.57.95.0/24 maxlen: 24
178.57.93.0/24 maxlen: 24
185.195.243.0/24 maxlen: 24
2a01:bc40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 20 Mar 2024 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8b:a1:d1:4a:b3:d9:cd:14:1d:30:7e:92:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5b17a139e3fcac8f7b187f998a73874cb1666fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:90:50:61:c8:81:b2:24:8d:b1:80:ac:b6:
7b:2a:c4:d8:8c:1a:02:2b:a9:7e:b6:36:6a:ff:ab:
61:be:38:09:9e:e4:97:66:41:cb:20:3d:ea:d1:a7:
3b:f3:bb:a0:28:ac:c5:e7:4b:dc:59:d2:87:0b:76:
45:92:40:19:b4:fa:e3:92:e4:f9:de:a3:57:26:a5:
28:81:76:1c:ad:f8:34:c9:d9:2c:04:21:44:50:5c:
89:b8:e4:0f:ea:71:9c:c2:2c:c4:1c:0c:84:37:c3:
6d:b3:71:81:81:c6:0f:54:b9:ec:3c:79:ef:6e:cb:
90:bf:28:5f:2b:a0:c7:be:b9:b1:8d:8d:40:f2:af:
dd:a2:89:2d:44:b5:37:3b:48:05:a7:aa:ad:5a:64:
0c:a4:52:4c:08:9e:80:71:06:a9:d7:c1:55:98:ec:
29:06:aa:0c:31:ac:5a:a0:0b:7c:3f:20:a2:c3:0f:
81:4b:79:89:7d:91:a0:50:e8:9a:ec:3d:2a:e4:c0:
2b:ba:ef:4e:be:96:02:ea:1f:d0:36:db:a5:6b:04:
d8:b1:68:c1:49:13:64:14:c8:9e:c8:c9:85:73:d5:
ba:f5:14:93:1d:27:48:3a:5d:8d:9f:2a:fb:7e:ce:
bc:37:39:e7:e9:0f:69:bf:9b:22:ff:e3:03:63:26:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:7A:13:9E:3F:CA:C8:F7:B1:87:F9:98:A7:38:74:CB:16:66:FD
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/5bF6E54_ysj3sYf5mKc4dMsWZv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.176.0/21
91.200.86.0/23
178.57.80.0-178.57.91.255
178.57.93.0/24
178.57.95.0/24
185.9.84.0/22
185.162.232.0/24
185.195.243.0/24
185.196.116.0/24
213.5.224.0/23
IPv6:
2a01:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
40:7b:f9:d5:b8:e5:0e:e3:25:14:7e:e6:93:96:58:8c:fb:6f:
ae:20:89:6c:ae:1f:aa:ac:73:b2:1c:19:70:e5:3f:68:42:a3:
c9:92:b1:c6:42:54:cc:c6:2e:1a:e5:53:c1:d6:f2:2b:6f:70:
20:47:ea:48:4a:8e:f9:91:ab:5d:ec:6a:78:43:35:4a:48:b2:
4b:50:07:95:ed:34:fc:c9:d3:45:59:4b:e5:94:13:17:1e:25:
21:cf:2d:58:c2:86:45:d0:51:ac:37:a9:cf:5f:f8:26:5c:76:
e5:3a:8e:bf:5f:6c:e9:04:7c:26:bf:18:b3:26:d1:84:4f:17:
a1:f4:ab:bd:f9:3b:7d:8f:0d:6c:be:7f:48:af:a4:69:4e:22:
f0:a7:73:d0:5d:7a:0f:6e:9d:f2:3c:81:ce:ba:5c:e1:94:d6:
46:1f:e2:db:9b:83:86:1f:e9:1a:11:3a:10:a8:f3:5a:b7:93:
49:01:81:ae:86:c8:e9:72:c3:74:4c:f7:0a:f1:c1:29:af:4a:
7e:a2:c8:11:48:bf:03:32:b5:46:cd:4a:65:e0:57:07:ce:44:
29:a7:5d:18:c0:45:c6:fc:2c:ef:15:8f:84:ce:e2:98:d7:82:
30:97:6b:f4:a4:63:ed:f7:cc:e5:bf:83:ff:ce:1e:72:c6:16:
4a:5e:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:52 2025 by rpki-client