Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/i8A5hqEaS91dqIycUBF9mlS4I50.roa
File: i8A5hqEaS91dqIycUBF9mlS4I50.roa (raw, json)
Hash identifier: Go11UCwe2frnq64p+D2IrvKgS4XLyVozC7X3XPABxok=
Subject key identifier: 8B:C0:39:86:A1:1A:4B:DD:5D:A8:8C:9C:50:11:7D:9A:54:B8:23:9D
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 018E9D68F4A4A2AA7155615A02F61A9A8DD4
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/i8A5hqEaS91dqIycUBF9mlS4I50.roa
Signing time: Tue 02 Apr 2024 06:04:45 +0000
ROA not before: Tue 02 Apr 2024 06:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57293
IP address blocks: 5.197.0.0/16 maxlen: 21
5.197.0.0/17 maxlen: 17
5.197.116.0/22 maxlen: 22
5.197.128.0/17 maxlen: 17
5.197.128.0/20 maxlen: 20
5.197.128.0/21 maxlen: 21
5.197.136.0/21 maxlen: 21
5.197.144.0/20 maxlen: 20
5.197.160.0/20 maxlen: 20
5.197.176.0/20 maxlen: 20
5.197.176.0/21 maxlen: 21
5.197.184.0/21 maxlen: 21
5.197.192.0/20 maxlen: 20
5.197.192.0/21 maxlen: 21
5.197.200.0/21 maxlen: 21
5.197.208.0/20 maxlen: 20
5.197.208.0/21 maxlen: 21
5.197.216.0/21 maxlen: 21
5.197.224.0/20 maxlen: 20
5.197.224.0/21 maxlen: 21
5.197.232.0/21 maxlen: 21
5.197.240.0/20 maxlen: 20
5.197.240.0/21 maxlen: 21
5.197.248.0/21 maxlen: 21
149.255.144.0/20 maxlen: 24
149.255.144.0/21 maxlen: 21
149.255.152.0/21 maxlen: 21
149.255.152.0/24 maxlen: 24
149.255.153.0/24 maxlen: 24
149.255.154.0/24 maxlen: 24
149.255.155.0/24 maxlen: 24
185.146.112.0/22 maxlen: 23
Validation: Failed, certificate revoked on Fri 24 May 2024 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:68:f4:a4:a2:aa:71:55:61:5a:02:f6:1a:9a:8d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Apr 2 06:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bc03986a11a4bdd5da88c9c50117d9a54b8239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3a:5c:f1:03:d5:1c:4e:86:57:15:50:37:a4:
a4:77:5e:ca:41:ed:44:0d:4e:db:b5:51:70:7d:19:
06:8c:55:ad:12:9a:aa:c4:1e:53:1c:da:03:e2:e3:
89:53:26:f2:f0:b1:4e:25:50:1e:d7:bb:a0:f4:e1:
90:d2:ae:05:49:d4:59:ed:1a:75:a7:0e:71:33:01:
b7:c0:b4:36:aa:8e:40:a9:cb:58:17:95:b2:b3:3a:
f6:b2:9d:1c:b5:b9:da:e4:27:a6:22:73:82:62:fa:
a2:6f:3f:cb:82:76:6d:fe:02:66:5c:0d:4f:e5:a8:
92:f1:ef:06:12:1e:70:3a:fd:46:67:ab:54:4f:c3:
74:93:93:9a:34:ee:3b:25:7a:c0:de:72:9c:3d:d7:
7c:56:ca:d8:1d:e2:75:71:ad:5a:64:86:aa:5b:25:
a9:75:05:c3:fb:70:fd:b5:fc:c1:3f:79:04:e9:98:
1d:b3:ec:e9:7e:08:0e:13:da:15:93:66:cf:51:89:
26:fc:c3:15:70:9f:5f:42:19:2d:d1:2f:4b:ed:c0:
b8:2c:d3:8d:3a:30:db:74:61:21:f8:da:92:e7:92:
4f:a5:c2:b6:dd:c4:50:27:38:a7:4f:25:82:57:14:
83:40:4b:34:8e:62:59:64:8b:83:2b:c2:68:ed:80:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:39:86:A1:1A:4B:DD:5D:A8:8C:9C:50:11:7D:9A:54:B8:23:9D
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/i8A5hqEaS91dqIycUBF9mlS4I50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.197.0.0/16
149.255.144.0/20
185.146.112.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a7:13:dd:ec:63:09:e1:5b:6e:1a:9b:32:0d:f5:b6:f3:20:
3b:c3:4f:e8:e5:85:75:9e:1a:a9:75:7d:45:46:af:76:7f:16:
b2:4d:62:52:40:38:f1:99:28:55:ab:ee:60:25:15:4b:47:11:
7d:f5:14:82:b5:ad:54:a3:a7:8f:5c:e6:ab:bc:ce:0c:55:f5:
f3:27:f2:e7:97:3f:25:0b:54:9b:6c:b7:12:b7:93:38:97:31:
83:fa:33:c3:c6:67:3a:3c:62:9f:d1:37:0d:9f:af:1a:d3:18:
cf:7a:88:a5:0c:c6:8b:ca:ca:9e:de:95:7a:f0:d4:5c:df:56:
f9:bf:4c:bd:59:8a:8c:ab:b9:88:7a:ef:cc:c5:ee:0e:79:11:
f4:e3:9a:d3:93:02:13:f0:ec:cd:37:a1:b6:6f:92:30:41:5c:
73:60:06:5b:d2:80:3b:54:26:0a:65:be:11:14:99:ee:8e:ea:
42:db:a4:ef:81:cc:01:6b:69:a7:02:1b:a3:1d:68:93:f1:88:
ab:8e:da:0d:d8:5b:e2:46:13:99:35:95:e9:0c:39:4d:e6:1e:
c0:a2:3d:91:a0:19:7f:d3:70:d3:7e:d7:49:6e:e4:8d:a6:5e:
2e:bf:47:bc:95:36:9b:6d:bd:32:54:71:d3:d8:6c:83:3f:47:
95:ae:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 17:11:23 2024 by rpki-client on console-ams.rpki-client.org