Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/5KCHCJMN6ec31mCEVcqdcdVGjGg.roa
File: 5KCHCJMN6ec31mCEVcqdcdVGjGg.roa (raw, json)
Hash identifier: ogzWgqy5X5glQhoqoTUnzn+ralMnVty1Az37eAphIcU=
Subject key identifier: E4:A0:87:08:93:0D:E9:E7:37:D6:60:84:55:CA:9D:71:D5:46:8C:68
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0186BAF2D1F7940389BFEFC2E4385C5E0A34
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/5KCHCJMN6ec31mCEVcqdcdVGjGg.roa
Signing time: Tue 07 Mar 2023 07:22:00 +0000
ROA not before: Tue 07 Mar 2023 07:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5606
IP address blocks: 176.223.114.0/24 maxlen: 24
93.174.162.0/24 maxlen: 24
92.114.3.0/24 maxlen: 24
92.114.2.0/24 maxlen: 24
93.174.160.0/24 maxlen: 24
84.247.23.0/24 maxlen: 24
93.174.167.0/24 maxlen: 24
188.240.0.0/24 maxlen: 24
185.248.139.0/24 maxlen: 24
45.67.39.0/24 maxlen: 24
193.200.63.0/24 maxlen: 24
193.200.62.0/24 maxlen: 24
45.82.28.0/23 maxlen: 23
193.16.144.0/24 maxlen: 24
45.67.36.0/24 maxlen: 24
45.67.38.0/24 maxlen: 24
45.14.238.0/24 maxlen: 24
89.39.7.0/24 maxlen: 24
89.39.6.0/24 maxlen: 24
185.220.184.0/24 maxlen: 24
185.220.186.0/24 maxlen: 24
185.220.185.0/24 maxlen: 24
89.34.101.0/24 maxlen: 24
89.42.133.0/24 maxlen: 24
188.241.73.0/24 maxlen: 24
188.241.72.0/24 maxlen: 24
188.241.74.0/23 maxlen: 23
31.14.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 19:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:f2:d1:f7:94:03:89:bf:ef:c2:e4:38:5c:5e:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Mar 7 07:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4a08708930de9e737d6608455ca9d71d5468c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:d2:d8:86:b4:6b:c6:c0:68:f9:8d:66:83:
1c:f6:59:da:3c:fa:d7:c7:3e:a9:2b:af:10:1f:bb:
26:ea:d1:7a:24:ff:91:68:df:4f:71:56:0b:2f:8e:
f3:7d:9c:88:4e:9f:e8:1c:18:45:55:f4:ab:fb:d1:
86:82:3d:f5:05:94:9f:b5:54:eb:89:d5:8e:d5:22:
05:38:87:49:ba:ef:da:86:bf:1d:b6:9d:eb:82:25:
60:11:b1:f9:09:76:33:4b:29:83:62:44:c0:3b:e5:
f1:3c:91:91:fe:cc:a9:a3:41:05:b9:67:49:29:3f:
2d:e2:b0:4b:2d:06:81:9c:34:fd:43:4c:17:16:4d:
09:98:10:2c:b3:72:3a:12:3d:ec:84:2c:b3:f7:97:
ba:04:1d:5f:00:88:41:f4:a6:83:6d:6a:e5:d6:cb:
1e:d8:0d:67:39:a9:0e:29:a0:58:75:e0:5f:a1:b5:
2a:73:59:f3:96:5a:f8:62:3b:cb:fb:8a:9e:54:e8:
9c:ad:e9:d3:97:fa:fe:2d:fa:08:0d:3a:87:5f:45:
a9:9d:65:45:10:bb:d5:cb:68:2b:e6:77:17:c8:fb:
91:f8:b8:29:78:fa:7b:1a:32:ae:2a:4a:51:07:ca:
66:74:14:17:f3:65:38:50:38:f6:45:ec:71:f2:df:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A0:87:08:93:0D:E9:E7:37:D6:60:84:55:CA:9D:71:D5:46:8C:68
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/5KCHCJMN6ec31mCEVcqdcdVGjGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.21.0/24
45.14.238.0/24
45.67.36.0/24
45.67.38.0/23
45.82.28.0/23
84.247.23.0/24
89.34.101.0/24
89.39.6.0/23
89.42.133.0/24
92.114.2.0/23
93.174.160.0/24
93.174.162.0/24
93.174.167.0/24
176.223.114.0/24
185.220.184.0-185.220.186.255
185.248.139.0/24
188.240.0.0/24
188.241.72.0/22
193.16.144.0/24
193.200.62.0/23
Signature Algorithm: sha256WithRSAEncryption
da:96:ec:62:04:a3:a4:c0:b6:3e:de:75:1b:aa:99:a3:a4:d1:
80:08:af:3e:19:7d:98:31:88:86:a2:bb:03:50:80:3e:8d:f2:
28:3b:a9:eb:f0:aa:18:d4:26:37:48:5c:e4:dc:83:63:6f:f5:
35:6c:20:40:33:91:b6:c3:16:4b:4c:fe:d6:11:ac:2d:bd:5b:
13:f7:92:96:67:09:03:9a:e9:69:4c:da:1e:d6:71:05:bf:17:
d3:1e:53:d4:8f:68:b7:4a:df:6b:e4:be:af:48:74:51:05:87:
be:32:eb:32:27:b6:d9:9b:72:ca:34:e4:d1:1b:5a:d2:36:6b:
3e:3b:36:d2:98:6b:47:44:3f:29:6b:68:77:f3:29:33:10:91:
61:c9:cb:40:f8:0a:65:d9:16:34:d1:d9:e4:fb:d0:d2:6a:86:
f3:15:15:c0:62:6e:71:62:cc:2b:63:29:f1:3e:2c:dc:6e:03:
af:6d:9a:7e:28:f8:f1:c9:d2:9c:e5:ac:e1:32:4a:f9:c1:32:
ca:fe:18:89:69:34:a6:a5:2c:9e:0e:c6:04:3e:54:fc:42:43:
c2:a4:4c:ac:ac:6f:aa:dc:9b:d7:68:e3:07:4a:c0:d7:aa:e7:
b8:ed:45:76:2f:b6:46:a1:e8:2b:08:49:01:7f:7d:98:81:9c:
aa:0d:3b:d2
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYa68tH3lAOJv+/C5DhcXgo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjMwMzA3MDcyMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGEwODcwODkzMGRlOWU3MzdkNjYwODQ1NWNhOWQ3MWQ1NDY4YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7LS2Ia0a8bAaPmNZoMc9lnaPPrX
xz6pK68QH7sm6tF6JP+RaN9PcVYLL47zfZyITp/oHBhFVfSr+9GGgj31BZSftVTr
idWO1SIFOIdJuu/ahr8dtp3rgiVgEbH5CXYzSymDYkTAO+XxPJGR/sypo0EFuWdJ
KT8t4rBLLQaBnDT9Q0wXFk0JmBAss3I6Ej3shCyz95e6BB1fAIhB9KaDbWrl1sse
2A1nOakOKaBYdeBfobUqc1nzllr4YjvL+4qeVOicrenTl/r+LfoIDTqHX0WpnWVF
ELvVy2gr5ncXyPuR+LgpePp7GjKuKkpRB8pmdBQX82U4UDj2Rexx8t+ouwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFOSghwiTDennN9ZghFXKnXHVRoxoMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvNUtDSENKTU42ZWMzMW1DRVZjcWRjZFZHakdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAf
DhUDBAAtDu4DBAAtQyQDBAEtQyYDBAEtUhwDBABU9xcDBABZImUDBAFZJwYDBABZ
KoUDBAFccgIDBABdrqADBABdrqIDBABdrqcDBACw33IwDAMEA7ncuAMEALncugME
ALn4iwMEALzwAAMEArzxSAMEAMEQkAMEAcHIPjANBgkqhkiG9w0BAQsFAAOCAQEA
2pbsYgSjpMC2Pt51G6qZo6TRgAivPhl9mDGIhqK7A1CAPo3yKDup6/CqGNQmN0hc
5NyDY2/1NWwgQDORtsMWS0z+1hGsLb1bE/eSlmcJA5rpaUzaHtZxBb8X0x5T1I9o
t0rfa+S+r0h0UQWHvjLrMie22ZtyyjTk0Rta0jZrPjs20phrR0Q/KWtod/MpMxCR
YcnLQPgKZdkWNNHZ5PvQ0mqG8xUVwGJucWLMK2Mp8T4s3G4Dr22afij48cnSnOWs
4TJK+cEyyv4YiWk0pqUsng7GBD5U/EJDwqRMrKxvqtyb12jjB0rA16rnuO1Fdi+2
RqHoKwhJAX99mIGcqg070g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org