Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/dNWso6yvNLD7Ct0qGUEhqr8hFao.roa
File: dNWso6yvNLD7Ct0qGUEhqr8hFao.roa (raw, json)
Hash identifier: MHNB3HKao06ydSLisX1ivJdRxcTITy163/rsorJvUZc=
Subject key identifier: 74:D5:AC:A3:AC:AF:34:B0:FB:0A:DD:2A:19:41:21:AA:BF:21:15:AA
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018D87AD91081418177E67F6A9A083C93483
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/dNWso6yvNLD7Ct0qGUEhqr8hFao.roa
Signing time: Thu 08 Feb 2024 07:45:15 +0000
ROA not before: Thu 08 Feb 2024 07:45:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211183
IP address blocks: 5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 04:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:ad:91:08:14:18:17:7e:67:f6:a9:a0:83:c9:34:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Feb 8 07:45:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74d5aca3acaf34b0fb0add2a194121aabf2115aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:b1:21:a7:5c:bc:99:1b:3d:27:1c:2f:6e:
c9:64:9a:33:c1:c1:97:77:91:9f:9d:74:94:e1:34:
78:f8:0c:5d:bb:c1:3b:fd:b4:18:60:e6:06:22:ea:
86:d4:ee:71:2e:70:f8:3f:66:01:b1:fe:39:b5:93:
4f:e6:78:58:9e:62:6f:d2:06:5d:8d:09:03:dd:fb:
7e:57:96:02:6a:1e:02:86:65:89:d7:37:56:83:0c:
4b:01:f6:21:c3:65:3b:14:12:aa:2a:3c:1a:58:c5:
c3:95:37:a1:c0:0e:42:6f:2e:39:61:c9:44:cb:77:
8c:fc:64:c5:41:f7:ea:8a:94:d2:f7:fc:7a:98:b4:
12:84:28:6c:67:cc:29:27:a3:9e:05:85:c7:27:db:
39:c2:eb:bb:6e:09:2e:06:43:46:76:36:a2:1a:83:
2d:17:e5:2d:70:81:08:d8:47:93:7c:d9:14:b6:45:
50:f7:4d:62:34:b1:b4:ba:ee:d6:8f:7c:b3:07:d2:
37:1d:6d:e6:2b:68:c5:cf:66:0d:71:a6:8f:0d:e8:
b6:81:24:5f:a6:06:20:5f:a2:d3:b2:a4:ab:0d:37:
32:c3:af:f4:c8:d1:9a:8c:2a:0b:7a:8e:fb:84:9f:
29:c0:24:0d:59:33:9d:94:9e:00:04:65:a8:2a:6f:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:AC:A3:AC:AF:34:B0:FB:0A:DD:2A:19:41:21:AA:BF:21:15:AA
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/dNWso6yvNLD7Ct0qGUEhqr8hFao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.62.0/24
37.140.241.0/24
79.133.181.0-79.133.183.255
91.200.84.0/24
94.154.11.0/24
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
Signature Algorithm: sha256WithRSAEncryption
78:24:0b:57:6b:1d:7b:37:6b:ec:7a:65:be:30:61:c3:5a:35:
15:d4:ce:92:d2:e9:87:ed:c7:fa:35:19:9a:82:86:f0:e7:d2:
ed:75:44:10:f7:d8:b3:84:63:8e:f5:8e:39:e5:f5:f3:36:19:
83:8a:68:7c:72:76:3c:c6:31:ba:56:c4:57:33:08:23:22:1f:
d6:f7:a6:aa:3b:b7:dd:19:4d:27:ec:02:95:90:0e:cb:98:df:
04:2e:e5:fd:46:85:e7:84:56:61:ef:56:7b:6a:62:3c:96:97:
92:27:47:ab:9f:95:e7:bb:80:77:b7:b1:86:38:c5:31:aa:52:
a8:74:cc:ce:bd:4e:a2:c6:51:2d:f0:b3:8f:05:49:4f:ea:61:
fc:cb:09:a9:52:b6:3a:c0:00:7c:de:91:73:e0:37:b5:5e:16:
61:f1:2d:f9:f0:5d:10:62:e1:ac:9b:cc:36:33:55:7c:d1:8a:
46:2b:7a:e3:c4:74:90:74:e4:7d:63:58:69:1e:b9:ff:84:8a:
15:ef:ee:88:77:8e:8a:39:89:e6:45:fd:cb:5a:48:2f:bb:2c:
b9:02:4c:09:28:7a:72:2e:60:91:f5:ae:87:ea:20:6c:f1:d7:
c9:1f:d8:0e:ff:d8:a5:71:33:99:03:93:ce:e8:48:b2:5b:d6:
ae:60:c1:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org