Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/4hk0muJUCjgNUnZ5Q4leOgfNDuU.roa
File: 4hk0muJUCjgNUnZ5Q4leOgfNDuU.roa (raw, json)
Hash identifier: 5j82/IGXtXtjwHruBQISK0pwuxT532UgoGw5asJAaUo=
Subject key identifier: E2:19:34:9A:E2:54:0A:38:0D:52:76:79:43:89:5E:3A:07:CD:0E:E5
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 019407E90611411D3ED9FC8D29CF5983A013
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/4hk0muJUCjgNUnZ5Q4leOgfNDuU.roa
Signing time: Fri 27 Dec 2024 11:38:19 +0000
ROA not before: Fri 27 Dec 2024 11:38:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.188.0/22 maxlen: 22
91.223.3.0/24 maxlen: 24
91.226.198.0/23 maxlen: 23
91.226.198.0/24 maxlen: 24
91.226.199.0/24 maxlen: 24
95.214.52.0/22 maxlen: 23
95.214.52.0/23 maxlen: 23
95.214.54.0/23 maxlen: 23
146.19.24.0/24 maxlen: 24
178.211.139.0/24 maxlen: 24
185.16.36.0/22 maxlen: 24
185.225.191.0/24 maxlen: 24
185.248.24.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
193.34.212.0/23 maxlen: 23
193.34.214.0/23 maxlen: 23
193.34.215.0/24 maxlen: 24
195.3.220.0/22 maxlen: 22
195.3.220.0/23 maxlen: 23
195.3.222.0/23 maxlen: 23
195.3.222.0/24 maxlen: 24
212.23.222.0/24 maxlen: 24
2a03:cfc0::/32 maxlen: 32
2a03:cfc0::/33 maxlen: 33
2a03:cfc0:8000::/33 maxlen: 33
2a09:d580::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:e9:06:11:41:1d:3e:d9:fc:8d:29:cf:59:83:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Dec 27 11:38:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e219349ae2540a380d52767943895e3a07cd0ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:b6:a6:6a:2e:23:58:17:14:95:a6:6d:36:
20:ff:b1:2d:4b:4e:ff:55:2f:08:0b:d2:68:03:16:
41:01:4f:4e:d6:12:b0:a2:ef:3b:8c:bd:b5:57:64:
00:8b:da:9a:a8:f0:c9:11:e3:11:c8:02:f5:c9:43:
14:fe:fa:00:8b:9a:89:ad:35:7f:f7:28:3d:4c:27:
60:ca:d6:9f:b3:04:d1:61:28:c3:30:3a:d1:71:55:
62:0b:45:1d:98:49:0e:be:aa:36:c2:c5:8e:ef:e6:
28:5e:54:7b:45:3c:ca:80:4a:17:b2:ab:16:db:89:
b6:e0:5d:1d:74:68:0c:2a:e3:9e:e3:18:46:50:91:
31:9a:8b:3b:8e:f0:72:23:80:65:11:a7:a1:6d:e6:
88:b4:d9:96:58:9d:98:88:3d:4f:30:8e:ff:59:e6:
a8:77:97:85:aa:e1:2e:80:a4:6f:e8:93:dc:28:6c:
6c:81:3a:d7:87:83:3e:1f:d6:08:df:8d:96:5e:5a:
8f:0c:29:b0:6b:30:b5:aa:c8:fa:c5:ac:4e:ec:39:
4f:b3:95:f3:6f:0e:56:07:b0:6a:54:2a:83:4c:88:
cf:8b:a1:45:9f:c7:9f:a2:08:54:c6:82:57:a8:e1:
35:e5:ca:2a:1e:d1:7c:70:33:a5:f1:59:0d:41:86:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:34:9A:E2:54:0A:38:0D:52:76:79:43:89:5E:3A:07:CD:0E:E5
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/4hk0muJUCjgNUnZ5Q4leOgfNDuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
91.223.3.0/24
91.226.198.0/23
95.214.52.0/22
146.19.24.0/24
178.211.139.0/24
185.16.36.0/22
185.225.191.0/24
185.248.24.0/24
193.34.212.0/22
195.3.220.0/22
212.23.222.0/24
IPv6:
2a03:cfc0::/32
2a09:d580::/29
Signature Algorithm: sha256WithRSAEncryption
59:08:c7:3a:7e:7e:f7:9f:3e:a0:b1:1e:f2:ae:4b:db:8b:ee:
88:f4:2b:75:7a:fa:be:85:ea:70:00:60:46:45:38:d1:3e:49:
55:21:e4:6c:65:9a:50:b6:57:14:4e:b4:54:a2:52:41:13:b7:
d0:3f:99:d9:ac:ad:4d:d3:a5:8e:49:32:a8:c3:c6:ba:e5:d7:
bd:4b:56:36:7b:f6:23:4d:a0:de:08:1f:ed:f6:04:06:fd:5a:
14:96:f3:be:cd:59:bd:ae:cd:dc:a8:4a:cb:3f:b0:7d:57:ad:
13:18:0e:b9:84:cb:37:4a:da:26:7e:56:f7:e0:2a:ac:5e:78:
00:b1:33:84:e7:51:ac:50:d8:59:25:e5:d5:4b:cc:6b:5d:79:
99:7b:f3:e2:db:c8:8e:83:73:67:84:b8:06:13:59:de:e8:13:
13:e6:0d:41:d4:90:d7:4d:0e:54:c7:df:b4:8f:58:1f:6a:65:
9d:7d:65:8c:9a:df:25:ac:d8:fd:6e:d5:4d:52:25:34:b2:21:
71:6b:68:84:aa:0a:0b:a8:fa:04:c1:66:21:04:c5:22:f0:62:
17:fd:63:53:78:e8:82:4b:69:ec:93:70:b7:a8:99:0b:fc:33:
ca:15:f2:7b:4d:5a:be:43:af:65:f0:45:15:15:8d:99:61:fa:
2f:18:24:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:35:13 2025 by rpki-client