Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Ub-xrO_Q2NiVnGOXX62UDZujxxU.roa
File: Ub-xrO_Q2NiVnGOXX62UDZujxxU.roa (raw, json)
Hash identifier: iO96nB/gxX+BIst7ftiQkJzmBuIX5zCOiO3RUbt+Q6E=
Subject key identifier: 51:BF:B1:AC:EF:D0:D8:D8:95:9C:63:97:5F:AD:94:0D:9B:A3:C7:15
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0191457DE74D871EE678BEC51AAAF3E7D29B
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Ub-xrO_Q2NiVnGOXX62UDZujxxU.roa
Signing time: Mon 12 Aug 2024 07:29:24 +0000
ROA not before: Mon 12 Aug 2024 07:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211183
IP address blocks: 5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 10:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:7d:e7:4d:87:1e:e6:78:be:c5:1a:aa:f3:e7:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Aug 12 07:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51bfb1acefd0d8d8959c63975fad940d9ba3c715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:db:04:35:75:1f:21:8d:b6:e3:f0:fd:44:
32:f0:99:5f:ed:4c:6f:df:de:96:96:ad:12:09:33:
db:c2:25:50:e3:53:81:4e:7a:f0:2d:e1:0b:10:fa:
97:8d:24:5d:e2:a6:a4:ce:89:5d:41:d2:f0:75:1d:
fa:aa:d9:e3:c5:80:6d:0c:f9:39:b8:63:9f:df:ed:
45:1a:5c:21:48:b0:15:e4:ff:1b:9d:0d:3c:69:80:
3c:4d:58:29:83:cc:24:e2:ed:fc:fb:ab:2e:31:80:
b0:20:4c:fc:19:7e:d0:fa:a8:f0:9b:56:fa:d2:bc:
a1:b1:e2:fa:ca:f3:70:3a:2c:fd:82:83:60:5f:c2:
ed:cf:11:a9:3c:47:9d:93:b1:7d:72:12:b8:a5:79:
99:e6:89:f0:0f:f1:13:71:c3:f3:e0:22:6f:08:e3:
e5:79:d9:6a:38:2a:c1:fd:a6:a5:70:ad:f0:85:4f:
96:ce:3e:68:76:29:53:c7:5a:39:9d:b9:74:42:bf:
9e:b9:bb:de:12:15:53:eb:9f:4a:3c:28:fb:57:86:
6b:1e:02:82:52:41:09:4b:ea:34:3e:af:bb:49:70:
ea:9f:21:61:6e:b2:86:da:b1:ff:42:1a:6c:a5:0f:
92:90:ff:4b:c5:d0:f6:65:9e:09:fa:15:f7:a0:d6:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:B1:AC:EF:D0:D8:D8:95:9C:63:97:5F:AD:94:0D:9B:A3:C7:15
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/Ub-xrO_Q2NiVnGOXX62UDZujxxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
185.198.152.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e1:fa:8d:7a:35:5b:da:87:50:e7:3c:7e:1d:52:1a:41:ca:
70:14:db:c3:21:15:c0:da:79:e1:b4:26:2f:7a:33:86:ef:8b:
a8:cd:ea:63:7f:a5:a1:89:8e:04:43:3c:71:43:00:4b:dc:68:
7f:f0:3c:a0:83:b4:c5:c9:6e:a9:bf:fe:4c:6b:6e:60:44:ab:
ad:dd:04:cb:b4:8a:f2:be:d5:6f:7c:ef:a3:cd:d8:3b:e5:6e:
28:22:8f:be:80:77:a6:d7:3e:73:90:ce:8e:b3:05:d1:b1:53:
35:d1:06:f5:06:b5:1a:1f:8a:63:67:1a:96:b8:a8:37:47:52:
20:5b:a4:dd:92:5e:d4:74:0d:f0:25:0e:62:12:29:19:01:08:
e0:3e:1e:40:5e:a3:d0:9b:5f:fb:33:73:87:a9:be:de:0f:c8:
4f:da:dc:1c:eb:45:e2:bc:e3:fd:52:a4:44:fa:05:70:87:34:
08:09:f8:54:80:dd:33:aa:52:c1:d4:0e:48:78:0c:c4:1f:73:
a1:04:4d:78:7a:14:e7:25:b0:0f:73:7c:cb:d1:cf:cc:59:95:
9b:ef:6f:fe:74:4b:56:90:99:1c:6c:b5:fa:61:9b:a8:dd:76:
fe:61:c2:f7:2e:d7:28:63:e6:4e:fb:8a:8e:6f:2a:e1:e6:4b:
4f:bf:f5:45
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZFFfedNhx7meL7FGqrz59KbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjQwODEyMDcyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJmYjFhY2VmZDBkOGQ4OTU5YzYzOTc1ZmFkOTQwZDliYTNjNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW7bBDV1HyGNtuPw/UQy8Jlf7Uxv
396Wlq0SCTPbwiVQ41OBTnrwLeELEPqXjSRd4qakzoldQdLwdR36qtnjxYBtDPk5
uGOf3+1FGlwhSLAV5P8bnQ08aYA8TVgpg8wk4u38+6suMYCwIEz8GX7Q+qjwm1b6
0ryhseL6yvNwOiz9goNgX8LtzxGpPEedk7F9chK4pXmZ5onwD/ETccPz4CJvCOPl
edlqOCrB/aalcK3whU+Wzj5odilTx1o5nbl0Qr+eubveEhVT659KPCj7V4ZrHgKC
UkEJS+o0Pq+7SXDqnyFhbrKG2rH/QhpspQ+SkP9LxdD2ZZ4J+hX3oNYHkwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFFG/sazv0NjYlZxjl1+tlA2bo8cVMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvVWIteHJPX1EyTmlWbkdPWFg2MlVEWnVqeHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQABf0+AwQA
JYzxAwQALYDMMAwDBABPhbUDBANPhbADBABZv+EDBABbyFQDBABemgsDBAC5xpgD
BAG57zIDBAC58GcDBAC59DMDBAC5+iwDBAG5+i4DBADBu2ADBADZq5IwDQYJKoZI
hvcNAQELBQADggEBAAjh+o16NVvah1DnPH4dUhpBynAU28MhFcDaeeG0Ji96M4bv
i6jN6mN/paGJjgRDPHFDAEvcaH/wPKCDtMXJbqm//kxrbmBEq63dBMu0ivK+1W98
76PN2Dvlbigij76Ad6bXPnOQzo6zBdGxUzXRBvUGtRofimNnGpa4qDdHUiBbpN2S
XtR0DfAlDmISKRkBCOA+HkBeo9CbX/szc4epvt4PyE/a3BzrReK84/1SpET6BXCH
NAgJ+FSA3TOqUsHUDkh4DMQfc6EETXh6FOclsA9zfMvRz8xZlZvvb/50S1aQmRxs
tfphm6jddv5hwvcu1yhj5k77io5vKuHmS0+/9UU=
-----END CERTIFICATE-----
Generated at Thu Oct 17 13:39:02 2024 by rpki-client on console-ams.rpki-client.org