Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/L4exyJ3n7xp9VjZAhgw0OuTd77M.roa
File: L4exyJ3n7xp9VjZAhgw0OuTd77M.roa (raw, json)
Hash identifier: wK+UPBQMIH3f8Ikxs0V43BjqWa1LjzUpZSOe35fTPSs=
Subject key identifier: 2F:87:B1:C8:9D:E7:EF:1A:7D:56:36:40:86:0C:34:3A:E4:DD:EF:B3
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018C53067239FBDF64CA81BE5C2306DA51A3
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/L4exyJ3n7xp9VjZAhgw0OuTd77M.roa
Signing time: Sun 10 Dec 2023 09:19:40 +0000
ROA not before: Sun 10 Dec 2023 09:19:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211183
IP address blocks: 79.133.183.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:06:72:39:fb:df:64:ca:81:be:5c:23:06:da:51:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Dec 10 09:19:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f87b1c89de7ef1a7d563640860c343ae4ddefb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:59:63:0d:a0:02:fa:e4:f4:5e:fa:95:89:
b3:49:12:ec:ed:e5:45:f1:cb:d6:ab:60:bc:9d:a6:
0c:4c:74:8b:dc:de:ea:2f:d9:ae:d0:7a:42:5f:2d:
0b:04:f3:db:71:35:cd:5e:52:8d:77:e3:d1:e4:ad:
cf:ed:da:c7:6c:c2:97:8b:13:3b:ad:bf:96:44:7f:
04:d7:ba:cf:b4:f9:31:fb:e8:58:c5:c8:40:81:b3:
d6:17:00:bd:a3:22:9d:86:71:d6:c0:37:b3:9b:84:
fc:0a:9f:35:77:f1:a9:e5:18:9d:f1:96:7e:34:40:
d7:24:3f:a6:7d:96:01:94:68:d5:f1:62:11:dc:83:
39:3a:09:d4:81:94:eb:9b:7e:11:a7:6d:21:06:eb:
d5:3c:60:47:89:ec:8e:27:fc:f0:e7:6e:b8:21:68:
54:f1:99:fc:78:41:a8:02:3c:6e:26:b7:b0:c4:72:
d9:b4:a4:b5:b4:5b:11:ab:bd:43:67:ab:5f:c3:27:
f2:38:eb:62:44:2f:ec:2d:a2:53:78:e2:f6:32:f5:
62:37:c9:07:5c:af:6b:9f:89:99:e2:00:4b:fc:2b:
d9:d3:fd:27:33:35:c6:c2:c6:5b:39:b5:76:8e:05:
aa:4c:3f:6d:27:fb:d8:6d:2d:0c:bb:c5:76:29:3a:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:B1:C8:9D:E7:EF:1A:7D:56:36:40:86:0C:34:3A:E4:DD:EF:B3
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/L4exyJ3n7xp9VjZAhgw0OuTd77M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.62.0/24
37.140.241.0/24
79.133.181.0-79.133.183.255
91.200.84.0/24
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4b:b9:c0:79:9c:0b:69:d3:b7:8f:7a:40:80:bc:3b:98:ad:
5f:2b:27:de:07:e9:49:91:e9:25:bf:d6:11:5a:0c:ab:d3:a0:
f9:b1:12:2a:02:f5:b3:6f:70:4d:92:c4:69:e6:2b:ae:d7:f6:
f8:2b:d3:ac:4d:93:b0:50:75:ff:94:79:30:e7:21:82:86:d5:
cb:a6:89:56:54:4e:45:d9:48:ee:19:89:18:b0:ae:99:13:e6:
31:ea:d8:2b:7e:1d:ab:f0:3d:74:ff:71:e9:d0:5d:43:ea:aa:
ae:77:b8:a5:e0:c3:90:e9:53:72:1b:97:20:c6:31:36:7b:63:
31:d3:64:a3:fe:7f:99:b0:6a:26:23:15:b7:e9:1d:7e:29:99:
86:28:6f:be:bf:d6:9b:c9:81:f8:a3:16:38:68:92:80:f7:cd:
d8:ff:cc:e4:c5:0a:20:4f:70:93:6f:5d:2c:b1:44:c5:b7:96:
f7:66:3f:66:ca:f3:52:08:f7:3e:ca:d5:37:0c:9d:a9:71:2b:
43:d1:87:cc:d4:77:36:11:2d:67:b6:fd:60:35:ed:b8:ed:17:
fb:2b:5a:6d:bb:0b:3d:97:3f:e2:8a:e6:1c:08:98:71:8f:7a:
c6:20:3e:d0:68:5c:c7:ec:65:03:a3:97:db:47:b4:55:1c:fc:
b2:a2:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org