Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/s_Ie4s35K9rtHbdmQBvbW-THVFI.roa
File: s_Ie4s35K9rtHbdmQBvbW-THVFI.roa (raw, json)
Hash identifier: lH7nKp8se1rf+c34w0M8Wjho4MysejMk/4QBIah4W6I=
Subject key identifier: B3:F2:1E:E2:CD:F9:2B:DA:ED:1D:B7:66:40:1B:DB:5B:E4:C7:54:52
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 018CC8DE8D5FE16AA3723B82720823B0D907
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/s_Ie4s35K9rtHbdmQBvbW-THVFI.roa
Signing time: Tue 02 Jan 2024 06:31:17 +0000
ROA not before: Tue 02 Jan 2024 06:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 5.188.12.0/24 maxlen: 24
185.79.112.0/22 maxlen: 22
5.188.13.0/24 maxlen: 24
5.188.14.0/24 maxlen: 24
5.188.15.0/24 maxlen: 24
185.8.176.0/22 maxlen: 22
185.12.12.0/22 maxlen: 24
5.188.12.0/22 maxlen: 22
194.107.76.0/22 maxlen: 24
160.20.152.0/22 maxlen: 22
178.21.16.0/21 maxlen: 24
5.255.64.0/19 maxlen: 24
91.221.69.0/24 maxlen: 24
89.47.1.0/24 maxlen: 24
46.249.32.0/19 maxlen: 24
93.158.200.0/21 maxlen: 24
93.158.208.0/20 maxlen: 24
5.178.64.0/21 maxlen: 24
185.53.160.0/22 maxlen: 22
2a03:3f40::/32 maxlen: 32
2a00:1caa::/32 maxlen: 32
2a00:1ca8:77::/48 maxlen: 48
2a00:1ca8::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Sep 2024 07:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8d:5f:e1:6a:a3:72:3b:82:72:08:23:b0:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 2 06:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f21ee2cdf92bdaed1db766401bdb5be4c75452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:65:4f:df:a3:d0:da:f2:2c:dd:f0:23:28:
e5:a1:93:00:a8:a1:be:b9:5e:c8:46:d3:6d:a7:57:
91:0a:86:d1:d2:ef:9e:fd:e3:4f:83:f9:80:f1:64:
14:e1:17:ed:3c:67:08:d4:36:9e:a8:66:c2:ac:37:
64:a4:56:0c:62:81:b7:5a:a7:09:d6:ab:3c:f3:06:
94:e0:f8:da:f1:7d:48:ae:b7:66:2a:db:df:ec:8b:
63:82:2e:fa:26:26:3d:9f:2d:40:96:0f:79:a0:2d:
d6:07:3e:1c:90:4e:c9:bf:5d:97:32:75:47:08:5e:
95:bb:0c:2e:5d:09:f7:98:ca:89:ca:cc:1a:dc:56:
5b:26:4f:d8:b6:f1:b0:9c:38:c8:e4:13:4d:27:34:
98:eb:67:f2:f9:67:f8:5b:78:de:22:d8:67:fa:f1:
98:ce:bf:ee:c4:95:98:63:2a:67:ed:11:8c:13:3e:
42:71:81:77:75:05:1e:01:4a:b4:96:43:5f:3c:1c:
6c:1d:38:4e:c9:ea:5e:97:5c:52:b6:db:18:bc:63:
df:f2:00:a4:a5:3d:e0:18:72:e0:93:d5:46:69:60:
02:91:fc:80:3d:ac:1a:60:51:79:a1:6e:d3:0f:1a:
a4:d0:3d:4f:f9:7e:ae:94:0f:d3:27:65:36:cb:a6:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:1E:E2:CD:F9:2B:DA:ED:1D:B7:66:40:1B:DB:5B:E4:C7:54:52
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/s_Ie4s35K9rtHbdmQBvbW-THVFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.64.0/21
5.188.12.0/22
5.255.64.0/19
46.249.32.0/19
89.47.1.0/24
91.221.69.0/24
93.158.200.0-93.158.223.255
160.20.152.0/22
178.21.16.0/21
185.8.176.0/22
185.12.12.0/22
185.53.160.0/22
185.79.112.0/22
194.107.76.0/22
IPv6:
2a00:1ca8::/32
2a00:1caa::/32
2a03:3f40::/32
Signature Algorithm: sha256WithRSAEncryption
55:31:0b:95:54:54:97:3d:db:ff:d5:5a:2f:6b:8e:5b:6d:bd:
32:a4:1d:ab:92:7c:d5:c8:ed:49:4f:bf:a0:80:1f:0c:93:8c:
8e:0c:0e:7f:86:86:c2:0d:0a:b7:72:e0:26:d4:0c:41:93:ec:
9c:0d:f0:37:ea:71:32:75:b6:6e:c4:2b:48:8d:bb:ce:b3:bb:
6e:5c:55:f1:8e:d9:7e:38:fa:fb:e5:77:ae:68:c5:60:11:2b:
1c:e4:24:e7:28:5c:d5:1f:3b:55:01:5c:1e:4f:5d:2a:a2:e7:
f7:4a:a2:70:39:2c:d6:9f:cc:c4:91:2f:78:1f:97:dd:fd:26:
1e:33:7f:c7:07:5d:03:0d:57:d1:e2:6b:f2:65:12:0b:9a:f1:
98:12:4b:8a:ef:2f:f3:1c:36:e5:1d:dd:dc:b9:57:d6:34:4b:
fc:fe:37:e5:9b:af:be:c3:f6:2e:35:c9:d8:57:f2:ed:a7:90:
4d:a9:0e:a4:3f:0c:38:d1:50:fd:a3:56:92:08:bf:45:f3:79:
7e:92:e2:31:2e:31:dd:dd:e3:30:9e:68:c0:8e:69:e0:79:a8:
c6:ba:c8:5f:d5:17:31:db:b0:b8:c3:09:9d:58:af:cc:7b:2e:
64:a2:d5:31:32:50:fb:27:a5:01:e9:68:ca:52:71:1a:49:9c:
ad:91:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:00 2025 by rpki-client