Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1SsWto1zaufw8nvouwsWYtzmW0w.roa
File: 1SsWto1zaufw8nvouwsWYtzmW0w.roa (raw, json)
Hash identifier: wKd4dRd1V8INtE/h8TempUrvtbHnFMhez0km6pKOWKg=
Subject key identifier: D5:2B:16:B6:8D:73:6A:E7:F0:F2:7B:E8:BB:0B:16:62:DC:E6:5B:4C
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018DA7384E25AA7F61924CFB34D27DA8B60C
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1SsWto1zaufw8nvouwsWYtzmW0w.roa
Signing time: Wed 14 Feb 2024 10:45:01 +0000
ROA not before: Wed 14 Feb 2024 10:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62164
IP address blocks: 5.181.164.0/22 maxlen: 22
5.181.164.0/23 maxlen: 23
5.181.167.0/24 maxlen: 24
45.11.88.0/22 maxlen: 22
45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
45.81.150.0/24 maxlen: 24
45.92.29.0/24 maxlen: 24
85.209.84.0/23 maxlen: 23
85.209.87.0/24 maxlen: 24
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
185.191.228.0/23 maxlen: 23
185.191.231.0/24 maxlen: 24
185.199.224.0/23 maxlen: 23
185.199.226.0/24 maxlen: 24
185.202.172.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
185.202.175.0/24 maxlen: 24
185.215.148.0/24 maxlen: 24
185.215.151.0/24 maxlen: 24
185.218.235.0/24 maxlen: 24
185.235.14.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
193.39.185.0/24 maxlen: 24
193.39.186.0/24 maxlen: 24
193.39.187.0/24 maxlen: 24
212.162.148.0/22 maxlen: 22
2a0b:aac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 25 Apr 2024 13:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:38:4e:25:aa:7f:61:92:4c:fb:34:d2:7d:a8:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Feb 14 10:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52b16b68d736ae7f0f27be8bb0b1662dce65b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:9b:42:1f:b1:7c:5b:ea:8e:65:98:83:e2:
79:21:22:fc:9c:a2:e6:87:07:eb:30:e8:67:74:eb:
6c:c8:74:43:40:5f:8c:3f:d7:e8:c0:14:49:63:e5:
90:08:be:ee:f8:79:79:42:5b:5b:d2:d2:8e:01:57:
d7:b3:6c:6f:1a:09:29:00:e2:79:b9:e5:85:51:77:
cd:2f:1d:e8:f8:6e:6a:b7:83:69:11:f7:8b:83:ad:
be:c7:a6:e6:38:1e:d0:75:12:c5:b9:a1:54:12:74:
e2:be:2d:df:c1:11:05:82:88:b0:6b:69:0f:b3:cf:
a1:3d:14:8c:21:b2:33:74:ff:28:23:9d:e7:cc:e7:
65:62:15:3e:98:9b:be:19:79:a6:71:ee:39:c5:9b:
3b:0a:7c:63:24:f1:c5:94:45:ec:f4:46:2d:85:35:
92:b3:96:17:a6:7a:80:5d:a0:ca:47:9e:40:58:6b:
cb:ba:c4:7d:00:2e:0d:fc:f2:53:84:36:44:4e:e1:
10:c5:8c:89:5d:a0:e5:3b:a9:b9:d0:3b:b3:3a:d6:
4f:b1:39:b7:85:3c:ed:04:7c:e3:99:d5:9b:b9:e1:
04:d1:db:b1:27:16:7d:30:e3:d2:91:c2:de:8d:45:
f1:e2:44:90:ad:f7:b7:8f:8c:06:13:c8:48:78:e0:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:16:B6:8D:73:6A:E7:F0:F2:7B:E8:BB:0B:16:62:DC:E6:5B:4C
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1SsWto1zaufw8nvouwsWYtzmW0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/22
45.11.88.0/22
45.81.150.0/24
45.92.29.0/24
85.209.84.0/23
85.209.87.0/24
185.149.232.0/22
185.191.228.0/23
185.191.231.0/24
185.199.224.0-185.199.226.255
185.202.172.0/22
185.215.148.0/24
185.215.151.0/24
185.218.235.0/24
185.235.14.0/23
193.39.184.0/22
212.162.148.0/22
IPv6:
2a0b:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
47:42:56:db:b0:d1:15:ee:c6:c8:32:40:01:a9:9f:c6:3f:6c:
a9:cd:2f:62:65:c5:de:e5:82:4a:1f:9f:dd:54:1f:12:4d:86:
40:22:70:e5:21:c0:f3:20:8d:df:14:e9:ce:36:8f:c0:ca:09:
6f:80:6c:09:72:a6:53:b4:34:5b:37:7d:ec:3f:d2:52:d6:4b:
0f:8a:8e:a5:fe:2b:1b:76:e8:2d:41:72:84:3e:8e:06:cb:6a:
ae:91:b4:8e:f3:37:ed:d3:74:56:83:36:97:18:39:39:9d:99:
9d:33:e7:0b:3f:b3:38:78:f7:ee:90:73:6e:64:a2:96:19:26:
25:4b:ac:92:79:85:10:d2:bc:d8:07:4b:61:d0:74:79:f1:4a:
a5:6f:43:09:8f:4f:d6:6d:d3:63:36:09:2e:d1:bd:1d:fc:95:
99:aa:8f:49:4f:33:3c:31:c1:07:5e:65:35:18:b0:b3:8c:27:
4c:08:ab:2e:e8:37:7a:23:a6:10:32:78:59:a1:6e:f6:95:8e:
62:cb:3b:0a:36:c5:0e:f3:25:bd:f5:4d:92:81:0d:61:4c:40:
4d:82:79:0c:ae:fe:de:38:05:eb:c5:89:06:20:e4:63:94:75:
8b:62:f8:69:4a:8d:03:a0:72:10:a8:85:ee:b9:8f:0e:75:87:
a4:ea:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:15:30 2024 by rpki-client on console-ams.rpki-client.org