Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/nV1ezCLRXuw0EThV2QgueVaDVwY.roa
File: nV1ezCLRXuw0EThV2QgueVaDVwY.roa (raw, json)
Hash identifier: bsc1O/swI3IpZc+6ncST1ZC0VRKauy0bB0wMyVpGPeI=
Subject key identifier: 9D:5D:5E:CC:22:D1:5E:EC:34:11:38:55:D9:08:2E:79:56:83:57:06
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 01856D8AC723C8812FBC511BDE5A030F902D
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/nV1ezCLRXuw0EThV2QgueVaDVwY.roa
Signing time: Sun 01 Jan 2023 13:34:49 +0000
ROA not before: Sun 01 Jan 2023 13:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5466
IP address blocks: 194.125.192.0/19 maxlen: 19
95.44.0.0/15 maxlen: 15
82.141.192.0/18 maxlen: 18
217.183.0.0/16 maxlen: 16
83.174.160.0/19 maxlen: 19
195.7.32.0/19 maxlen: 19
194.106.128.0/19 maxlen: 19
194.125.128.0/18 maxlen: 18
51.171.0.0/16 maxlen: 16
159.134.0.0/16 maxlen: 24
185.57.112.0/22 maxlen: 22
83.70.0.0/15 maxlen: 15
62.77.160.0/19 maxlen: 19
213.94.128.0/17 maxlen: 17
213.190.128.0/19 maxlen: 19
86.40.0.0/13 maxlen: 24
2001:bb0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:c7:23:c8:81:2f:bc:51:1b:de:5a:03:0f:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Jan 1 13:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5d5ecc22d15eec34113855d9082e7956835706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:df:1e:8d:70:23:d6:23:f3:c8:bd:b1:57:
fe:5f:44:03:06:64:a9:dd:44:2c:42:4f:17:ae:c7:
ce:11:61:65:d2:bb:36:55:18:da:8a:1a:47:f2:7e:
40:06:a6:75:a2:1d:1f:0b:ba:53:45:b7:56:48:fb:
80:47:17:82:b1:04:e5:75:11:61:ab:1d:2a:75:23:
ea:0c:e7:02:4d:76:f2:c4:20:2b:b7:43:63:79:e6:
c5:11:e0:53:c8:3d:95:b1:0e:31:c7:a9:0e:b7:8c:
b3:c1:7e:33:d7:2b:33:eb:a1:d2:0d:a3:93:49:99:
78:e3:4f:e7:98:90:c1:33:12:b5:58:c3:cc:ca:cf:
fb:cf:eb:f7:f8:a7:46:94:1a:88:36:51:f7:27:b6:
69:79:dd:5c:8b:5b:c3:52:9a:f5:a9:d5:a8:d5:c1:
1f:16:23:26:15:77:c1:ab:54:ab:ea:2d:8a:61:3c:
c1:eb:5e:d0:90:5a:1e:0d:86:92:f6:59:51:cb:06:
75:7b:2e:ec:3d:9d:b5:5a:c2:01:dc:c4:ef:b0:72:
16:3f:ff:d3:b7:51:62:da:04:0f:41:0c:57:f8:ec:
3b:a5:bf:c4:27:c2:6b:c6:10:94:d5:e9:dc:33:10:
13:6c:ed:02:a5:cc:25:d9:3a:cb:62:d0:9b:0d:04:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:5E:CC:22:D1:5E:EC:34:11:38:55:D9:08:2E:79:56:83:57:06
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/nV1ezCLRXuw0EThV2QgueVaDVwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.171.0.0/16
62.77.160.0/19
82.141.192.0/18
83.70.0.0/15
83.174.160.0/19
86.40.0.0/13
95.44.0.0/15
159.134.0.0/16
185.57.112.0/22
194.106.128.0/19
194.125.128.0-194.125.223.255
195.7.32.0/19
213.94.128.0/17
213.190.128.0/19
217.183.0.0/16
IPv6:
2001:bb0::/29
Signature Algorithm: sha256WithRSAEncryption
32:f3:64:37:08:be:43:f6:e7:77:a9:d4:3f:ac:77:83:e0:de:
f6:0e:ba:e4:cb:05:70:52:f1:44:2d:84:51:16:51:56:cb:c0:
89:2c:4b:18:6c:ff:78:29:71:f5:84:42:46:94:94:32:ce:c0:
3e:30:10:c5:dd:a8:68:1a:ce:ad:ad:7d:a9:53:1c:76:d0:2a:
3b:6f:14:40:12:d3:4a:43:37:4a:47:1a:47:2b:ee:44:ed:8c:
cd:41:33:e3:2e:56:00:51:1d:6c:bf:2e:b4:93:da:69:a9:7e:
85:ee:ba:89:02:c8:48:2a:51:aa:84:26:f1:bb:f0:a7:3b:72:
87:df:40:f2:04:9d:6a:a6:03:f2:b5:c3:57:01:f5:ba:9a:ec:
57:65:3d:18:11:03:c7:96:bf:f2:a2:64:9a:06:43:d5:f2:99:
16:d1:7e:01:32:00:33:83:57:e4:6a:33:b3:e8:68:57:dc:da:
ed:54:10:6d:ac:82:de:7b:42:b9:ad:53:0e:c1:ca:45:3d:6c:
ce:a9:f1:4b:7b:0d:a1:ac:f9:d6:49:5f:a8:40:d0:73:9a:de:
f9:77:d1:7c:ae:39:42:85:ec:9b:c9:9e:ab:03:60:98:6e:e1:
56:49:90:df:a7:0e:75:94:44:00:50:ec:bd:2b:0e:c7:19:dc:
2b:1e:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:14 2024 by rpki-client on console-fra.rpki-client.org