Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/iV-J1EcRgEez84JP0LJkXV2w4Ao.roa
File: iV-J1EcRgEez84JP0LJkXV2w4Ao.roa (raw, json)
Hash identifier: XFd39/I/zlf2kN3QSdStvyBIY6KQQUP6w3u9Te3qEEQ=
Subject key identifier: 89:5F:89:D4:47:11:80:47:B3:F3:82:4F:D0:B2:64:5D:5D:B0:E0:0A
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 018EAED0F83B7258E8EF5F120F2A104A801D
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/iV-J1EcRgEez84JP0LJkXV2w4Ao.roa
Signing time: Fri 05 Apr 2024 15:11:54 +0000
ROA not before: Fri 05 Apr 2024 15:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 5.101.136.0/21 maxlen: 21
5.101.144.0/21 maxlen: 21
5.101.168.0/21 maxlen: 21
31.132.0.0/21 maxlen: 21
37.9.56.0/21 maxlen: 21
77.74.192.0/21 maxlen: 21
77.75.120.0/21 maxlen: 21
78.110.160.0/21 maxlen: 21
78.110.168.0/23 maxlen: 23
78.110.170.0/24 maxlen: 24
78.110.172.0/22 maxlen: 22
78.157.192.0/21 maxlen: 21
78.157.200.0/22 maxlen: 22
78.157.204.0/24 maxlen: 24
78.157.206.0/23 maxlen: 23
78.157.208.0/20 maxlen: 20
94.229.64.0/20 maxlen: 20
178.159.0.0/20 maxlen: 20
185.17.24.0/22 maxlen: 24
185.103.96.0/22 maxlen: 22
2a01:a500::/32 maxlen: 32
2a01:a500:1::/48 maxlen: 48
2a01:a500:1228::/48 maxlen: 48
2a01:a500:2566::/48 maxlen: 48
2a01:a507::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Apr 2024 05:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:d0:f8:3b:72:58:e8:ef:5f:12:0f:2a:10:4a:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Apr 5 15:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895f89d447118047b3f3824fd0b2645d5db0e00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:40:15:5a:56:c6:12:93:f7:4e:a2:2e:6b:
71:91:fd:c6:8b:b0:84:83:62:8b:20:a0:86:66:98:
2e:40:ee:68:7f:df:58:60:fa:e9:72:27:23:50:d3:
94:71:a4:f6:e1:19:c1:32:fe:6b:05:58:d2:b1:67:
88:cf:17:5e:10:10:5e:7c:8e:6a:dc:55:94:ac:ef:
17:b1:a6:6d:48:8e:eb:80:12:d9:63:0a:f3:9f:18:
16:e7:ab:5d:90:54:da:8f:dc:a7:1c:c1:c4:81:08:
54:27:d7:d3:a3:01:73:4c:1c:d9:99:ba:cf:ce:17:
07:e5:89:e2:49:b8:1d:aa:b4:2e:56:be:bb:b3:70:
21:c6:93:73:97:f8:85:01:cf:8c:8e:0f:e6:5d:a9:
93:4f:d5:01:ab:c1:69:c2:95:95:2e:86:d8:d2:26:
b6:5a:75:a2:89:d3:44:c2:1a:e8:cb:2c:4c:a5:b6:
58:e5:89:21:eb:8e:6a:c5:01:be:31:2a:34:88:5e:
0f:45:67:ec:d0:b4:54:b0:d5:19:df:8e:c7:06:7e:
50:da:59:28:65:48:1b:01:67:f7:5a:8b:ae:f7:2f:
4b:f9:db:8d:c1:09:29:16:42:eb:43:a8:f7:19:1b:
60:3c:80:00:4f:90:a7:ce:6f:56:4e:34:d7:ad:e0:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:89:D4:47:11:80:47:B3:F3:82:4F:D0:B2:64:5D:5D:B0:E0:0A
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/iV-J1EcRgEez84JP0LJkXV2w4Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.136.0-5.101.151.255
5.101.168.0/21
31.132.0.0/21
37.9.56.0/21
77.74.192.0/21
77.75.120.0/21
78.110.160.0-78.110.170.255
78.110.172.0/22
78.157.192.0-78.157.204.255
78.157.206.0-78.157.223.255
94.229.64.0/20
178.159.0.0/20
185.17.24.0/22
185.103.96.0/22
IPv6:
2a01:a500::/32
2a01:a507::/32
Signature Algorithm: sha256WithRSAEncryption
67:6d:85:b9:30:8a:e4:66:b1:fd:1e:c3:38:6a:37:5a:0c:dd:
7b:e9:77:ef:ff:b9:e1:82:7c:d5:bf:6c:bf:0f:07:42:26:0e:
dd:cb:88:69:55:3a:0f:4c:51:c4:09:61:ea:13:26:02:83:71:
5d:bc:7c:bc:2f:83:ff:41:a9:d5:bb:f9:34:82:ef:3c:ec:42:
03:a0:06:85:83:c7:a8:b8:f6:a1:84:cc:3e:d7:f7:c1:90:cd:
6f:d1:78:1b:96:ac:a6:d2:da:10:af:b1:59:a8:1f:0c:fe:f0:
9e:6a:40:4d:55:13:b5:38:f4:a8:2a:49:9c:53:47:0d:39:03:
8b:33:7c:a9:7e:16:f5:24:0c:4e:e2:7a:ab:32:a4:bd:a9:c1:
5e:e6:f4:25:e4:c8:17:6e:2c:48:f1:8d:dd:08:d8:ef:68:23:
f0:42:04:7f:b3:0f:26:7f:51:65:99:46:db:86:a0:fa:00:10:
18:03:14:73:cc:9c:87:a5:e7:0a:32:e0:77:e5:fa:9c:9e:80:
70:4d:e6:fa:0b:56:71:53:3a:bf:03:fa:c8:21:6b:ca:a8:3e:
eb:dd:9d:73:fe:d5:41:47:bb:d6:66:85:08:4c:7a:6b:a5:a7:
53:2d:50:4e:68:05:09:b8:e9:70:b9:ef:66:29:34:a5:a4:1a:
29:75:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 06:20:26 2024 by rpki-client on console-ams.rpki-client.org