Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5qzkNHwZYNocAlQiJoMJpdPgSpI.roa
File: 5qzkNHwZYNocAlQiJoMJpdPgSpI.roa (raw, json)
Hash identifier: ir9AqEPOAGyfflPTirHVM8sdBiTJebr6aDNVXXQt15g=
Subject key identifier: E6:AC:E4:34:7C:19:60:DA:1C:02:54:22:26:83:09:A5:D3:E0:4A:92
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 018CCA2B51D19C47F0B210B73B21389EC846
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5qzkNHwZYNocAlQiJoMJpdPgSpI.roa
Signing time: Tue 02 Jan 2024 12:34:45 +0000
ROA not before: Tue 02 Jan 2024 12:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60077
IP address blocks: 193.151.157.0/24 maxlen: 32
193.151.159.0/24 maxlen: 32
78.110.112.0/22 maxlen: 32
78.110.112.0/21 maxlen: 32
85.198.8.0/22 maxlen: 32
78.110.116.0/22 maxlen: 32
85.198.8.0/21 maxlen: 32
85.198.12.0/22 maxlen: 32
85.198.16.0/22 maxlen: 32
85.198.16.0/21 maxlen: 32
85.198.20.0/22 maxlen: 32
193.151.128.0/20 maxlen: 32
193.151.128.0/19 maxlen: 32
193.151.144.0/20 maxlen: 32
Validation: Failed, certificate revoked on Sat 20 Jan 2024 10:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:51:d1:9c:47:f0:b2:10:b7:3b:21:38:9e:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 2 12:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ace4347c1960da1c025422268309a5d3e04a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:c6:f4:9f:ad:17:43:d4:8d:83:f5:da:a8:
75:04:60:07:87:36:47:4a:7c:a9:ee:4d:53:21:8a:
8c:9b:08:4a:83:42:2b:60:79:cc:1b:c7:2c:36:14:
6e:32:90:00:b9:71:16:e7:5f:5d:15:02:1f:82:b3:
f2:34:99:0f:1a:b9:4a:69:93:61:42:51:e6:69:cb:
20:c0:df:a4:54:5d:b6:94:24:e1:1e:cb:66:ee:55:
97:9e:b7:f3:0f:df:af:d8:3b:89:85:56:6f:31:8f:
d3:3b:9f:c9:0a:0b:0d:75:50:16:40:1a:e3:1e:a7:
92:65:20:b5:d9:5e:e9:98:58:06:02:2d:79:1e:c1:
7f:d1:6d:1c:25:ef:fc:e5:13:6f:6c:10:94:a4:42:
3d:8f:e2:5a:e1:03:e7:63:ef:34:96:89:54:a1:c7:
a4:4e:77:f2:d8:89:7f:f9:62:f2:1d:02:a7:ac:be:
46:e1:bc:45:bd:e4:77:17:46:50:d6:75:ed:8c:f9:
cc:ad:8c:09:13:e2:45:8b:79:fd:81:d7:2e:e7:df:
5b:30:98:2d:d4:06:42:ec:e3:26:e7:3c:b3:3a:96:
3e:64:2f:09:3f:48:12:ac:33:62:e0:ec:38:81:63:
e2:01:a3:71:e1:86:d7:9e:3f:95:8c:65:01:f2:cc:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:E4:34:7C:19:60:DA:1C:02:54:22:26:83:09:A5:D3:E0:4A:92
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/5qzkNHwZYNocAlQiJoMJpdPgSpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.112.0/21
85.198.8.0-85.198.23.255
193.151.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:a9:da:52:93:69:de:cd:57:5a:5a:e8:4e:ec:fb:c8:65:4c:
e1:d4:0a:fb:3d:88:3f:2f:fa:c8:3c:50:33:76:83:7a:c5:5e:
2a:5c:eb:79:5f:d7:f9:38:c8:fe:4b:27:4d:d1:8c:da:09:ef:
6a:fd:c0:17:d8:95:a2:95:a4:5e:cd:8b:63:db:06:d7:3a:a8:
fc:73:26:e5:f4:e9:65:54:e3:25:e3:12:34:7e:0e:98:1c:91:
9e:56:08:e9:1a:af:4c:4f:6d:40:bf:48:4e:ef:da:9e:0e:9c:
88:d1:9b:d8:93:0e:22:62:fa:6c:fe:50:59:cb:2d:85:c6:6b:
20:70:8b:4c:cc:8e:cd:10:68:e6:af:33:56:78:69:9f:38:92:
a9:31:15:59:5e:6c:09:d8:89:4c:32:33:e1:b9:b8:75:ce:7e:
e5:a5:1c:09:35:cb:ea:b3:16:7c:dd:1c:ac:e3:58:90:de:fc:
dd:61:cf:ff:38:b8:df:80:bb:62:6e:44:00:1c:34:45:ed:a5:
3b:ab:33:ad:e4:0a:94:52:38:41:86:4d:ef:a3:2f:88:f6:70:
34:65:a5:fc:16:82:d1:40:03:53:38:76:a2:20:87:a8:9a:fd:
09:e3:15:6d:4f:72:36:9b:36:3c:57:dc:5d:6a:c3:3a:d3:c9:
42:0e:c5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:06 2025 by rpki-client