Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/Owidvv3qRyrVqJ5-NvrwYS08Oy8.roa
File: Owidvv3qRyrVqJ5-NvrwYS08Oy8.roa (raw, json)
Hash identifier: ftsWOVKoIdrub8Z4+bN5B2sW0k4Bu4DwwT7V2+M20fg=
Subject key identifier: 3B:08:9D:BE:FD:EA:47:2A:D5:A8:9E:7E:36:FA:F0:61:2D:3C:3B:2F
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 01920E6A6D81B8E904A0CA938127040CE35E
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/Owidvv3qRyrVqJ5-NvrwYS08Oy8.roa
Signing time: Fri 20 Sep 2024 07:51:48 +0000
ROA not before: Fri 20 Sep 2024 07:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 5.178.64.0/21 maxlen: 24
5.188.12.0/22 maxlen: 22
5.188.12.0/24 maxlen: 24
5.188.13.0/24 maxlen: 24
5.188.14.0/24 maxlen: 24
5.188.15.0/24 maxlen: 24
5.255.64.0/19 maxlen: 24
46.249.32.0/19 maxlen: 24
89.47.1.0/24 maxlen: 24
91.221.69.0/24 maxlen: 24
93.158.200.0/21 maxlen: 24
93.158.208.0/20 maxlen: 24
160.20.152.0/22 maxlen: 22
178.21.16.0/21 maxlen: 24
185.8.176.0/22 maxlen: 22
185.12.12.0/22 maxlen: 24
185.53.160.0/22 maxlen: 22
185.79.112.0/22 maxlen: 24
194.107.76.0/22 maxlen: 24
2a00:1ca8::/32 maxlen: 32
2a00:1ca8:77::/48 maxlen: 48
2a00:1caa::/32 maxlen: 32
2a03:3f40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:6a:6d:81:b8:e9:04:a0:ca:93:81:27:04:0c:e3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Sep 20 07:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b089dbefdea472ad5a89e7e36faf0612d3c3b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:49:6c:08:c1:28:a8:7d:d9:d7:06:c4:be:
6d:d7:e3:69:cc:71:85:31:b7:aa:68:ea:37:47:5f:
4b:41:5c:9f:b0:65:e5:3b:98:f9:75:bf:8c:90:03:
c0:37:77:2f:6e:65:45:9b:d9:bf:52:51:6e:f7:76:
9c:15:52:55:dd:ad:6e:c6:91:6d:18:04:df:89:50:
6d:89:97:f4:0d:79:b9:32:1d:8a:82:59:7d:3a:13:
6c:47:71:26:d7:f7:60:da:59:ff:cb:4c:22:fa:63:
86:d7:82:a6:22:db:96:1c:8f:3c:90:c0:f0:45:48:
ce:c0:6f:ef:91:a6:1e:d6:4c:46:38:25:2b:ef:6a:
dd:01:df:9e:6f:27:54:43:b9:db:81:d0:8d:d5:6e:
a3:1f:f7:28:61:a9:d3:e1:72:2e:60:dd:09:55:41:
41:92:a3:2c:38:ed:81:13:57:37:13:ba:b1:a2:1d:
f6:2c:fb:38:18:ab:83:eb:6a:82:e8:75:22:ce:63:
34:1b:ec:ec:55:27:8e:14:4a:fe:0d:8a:37:5c:f6:
42:9a:fa:ba:20:29:20:67:9e:e1:2a:b0:27:3a:67:
e5:a4:87:48:06:19:79:55:70:0c:54:0f:05:6a:5e:
d9:73:65:1c:26:c4:75:ab:e6:c2:f1:8a:8c:25:a2:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:9D:BE:FD:EA:47:2A:D5:A8:9E:7E:36:FA:F0:61:2D:3C:3B:2F
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/Owidvv3qRyrVqJ5-NvrwYS08Oy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.64.0/21
5.188.12.0/22
5.255.64.0/19
46.249.32.0/19
89.47.1.0/24
91.221.69.0/24
93.158.200.0-93.158.223.255
160.20.152.0/22
178.21.16.0/21
185.8.176.0/22
185.12.12.0/22
185.53.160.0/22
185.79.112.0/22
194.107.76.0/22
IPv6:
2a00:1ca8::/32
2a00:1caa::/32
2a03:3f40::/32
Signature Algorithm: sha256WithRSAEncryption
36:01:d5:6b:01:93:0d:5c:e2:13:c2:01:c5:d8:c8:67:9c:e3:
7f:d7:91:f9:21:b5:e2:7b:d5:15:de:31:79:d7:92:2d:50:62:
ac:83:e4:a5:11:80:0b:b7:39:39:17:c4:a8:54:d2:21:cc:bf:
de:b1:3e:ed:57:f6:fd:de:38:a8:f5:11:1e:4b:34:62:28:60:
9b:e7:b6:36:d2:a6:f0:4e:fc:7a:86:3d:23:b0:40:90:f4:64:
10:b3:3d:31:a3:21:53:8c:a7:bb:04:fc:81:2e:19:bc:ed:13:
47:23:f2:ad:8d:68:c5:ed:55:fd:81:21:29:b6:fd:2a:2e:d5:
ba:dc:7a:da:d4:90:c8:f6:1f:43:a5:08:77:c9:8c:db:18:a8:
0b:7c:63:6b:a8:68:27:14:31:dc:06:11:0a:76:85:85:2b:0d:
c7:36:af:c6:b7:51:a7:ba:de:3d:17:93:b3:3d:3d:c3:bb:50:
87:94:af:7e:ef:9a:cf:69:f0:18:53:b4:cf:66:60:46:20:e7:
b9:b8:f5:d1:3f:d3:87:a4:e4:72:5b:e9:bd:70:ac:1a:38:a5:
ee:f6:d0:fd:75:16:8a:97:c1:d5:42:65:d7:1d:90:d5:09:3d:
ba:00:9d:e7:ac:ac:85:0b:d7:62:a8:9e:59:fb:c4:1d:43:84:
d5:cd:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:47:53 2025 by rpki-client