Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/03kJkO3OMGe4I4E2SLpyIVburDI.roa
File: 03kJkO3OMGe4I4E2SLpyIVburDI.roa (raw, json)
Hash identifier: nf92q+wDoGvdNDeZuDWu+LGRvtUiDmTAOTG0ppKRu7o=
Subject key identifier: D3:79:09:90:ED:CE:30:67:B8:23:81:36:48:BA:72:21:56:EE:AC:32
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018DEA681DACF81A9780F4D84DD6269C5F96
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/03kJkO3OMGe4I4E2SLpyIVburDI.roa
Signing time: Tue 27 Feb 2024 11:51:48 +0000
ROA not before: Tue 27 Feb 2024 11:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18978
IP address blocks: 5.180.22.0/23 maxlen: 23
5.180.24.0/22 maxlen: 22
5.180.28.0/22 maxlen: 24
5.180.40.0/22 maxlen: 24
5.180.44.0/22 maxlen: 24
5.180.52.0/22 maxlen: 24
5.180.144.0/22 maxlen: 24
5.253.28.0/22 maxlen: 24
5.253.40.0/22 maxlen: 24
45.66.156.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.128.60.0/22 maxlen: 24
45.136.112.0/22 maxlen: 24
45.136.116.0/22 maxlen: 24
45.136.128.0/22 maxlen: 24
45.136.148.0/22 maxlen: 24
45.149.112.0/22 maxlen: 24
85.208.108.0/22 maxlen: 24
85.208.116.0/22 maxlen: 24
85.209.152.0/22 maxlen: 24
85.209.192.0/22 maxlen: 24
88.218.92.0/22 maxlen: 24
141.98.188.0/22 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.188.0/23 maxlen: 24
194.59.220.0/23 maxlen: 24
194.59.244.0/23 maxlen: 24
194.76.146.0/23 maxlen: 24
194.124.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 11:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:68:1d:ac:f8:1a:97:80:f4:d8:4d:d6:26:9c:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 27 11:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3790990edce3067b823813648ba722156eeac32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:94:b7:d8:23:21:1f:bc:06:a6:c0:87:9d:
7d:9e:14:42:12:cf:df:ca:36:dd:c7:26:3a:34:ad:
e6:33:54:27:5d:3c:21:76:ee:f2:26:47:18:09:c7:
31:a0:ff:d3:43:66:0f:19:7d:5d:54:30:e8:42:e2:
5d:dd:fc:92:03:cc:0a:59:2d:08:e8:9a:cc:43:d5:
27:8c:ea:4b:cb:2f:2a:fd:77:6a:95:8e:ec:b9:06:
fa:ee:55:02:ed:6a:74:b5:2f:6a:ae:0a:51:9e:29:
21:c1:fd:75:b8:f6:f6:ce:32:6e:fb:3e:44:12:b1:
92:0b:4d:7f:7b:5e:20:13:28:ed:64:55:07:2c:0a:
0d:cc:38:8c:0d:db:b4:8b:1a:6d:e1:b9:b2:ee:1d:
35:75:82:4c:27:78:2e:0b:a9:de:49:bc:41:5b:32:
34:fd:d9:e8:5f:a9:4e:0e:7c:33:d5:eb:cc:47:5d:
8f:43:b6:26:46:5f:d6:f1:01:3a:bb:80:d2:da:be:
ba:71:ca:ed:a7:48:30:70:04:a9:b5:41:af:6d:a1:
52:26:92:88:67:2d:69:d4:eb:69:91:21:66:9d:5a:
b4:77:f4:30:c6:4d:86:7e:e2:27:76:d9:13:a5:ed:
c7:51:5b:0d:f1:c4:02:48:f5:0b:6a:8c:9e:55:4f:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:09:90:ED:CE:30:67:B8:23:81:36:48:BA:72:21:56:EE:AC:32
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/03kJkO3OMGe4I4E2SLpyIVburDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.22.0-5.180.31.255
5.180.40.0/21
5.180.52.0/22
5.180.144.0/22
5.253.28.0/22
5.253.40.0/22
45.66.156.0/22
45.66.164.0/22
45.128.60.0/22
45.136.112.0/21
45.136.128.0/22
45.136.148.0/22
45.149.112.0/22
85.208.108.0/22
85.208.116.0/22
85.209.152.0/22
85.209.192.0/22
88.218.92.0/22
141.98.188.0/22
194.36.36.0/22
194.55.188.0/23
194.59.220.0/23
194.59.244.0/23
194.76.146.0/23
194.124.244.0/23
Signature Algorithm: sha256WithRSAEncryption
24:67:72:2c:79:7f:22:97:4e:fe:24:42:68:6b:fa:10:c9:b2:
ad:b1:65:59:67:85:fb:ce:b0:38:e8:90:20:e6:ca:cb:ce:72:
6c:0f:03:f3:69:d5:64:14:1a:8b:0a:e1:6b:4f:c9:6a:89:2e:
a0:36:21:d1:f0:fb:99:51:73:f7:f3:4d:2c:1c:59:c0:9a:00:
dc:45:ca:42:75:9b:be:a0:4a:40:33:c6:df:e4:2b:df:05:a6:
da:61:2a:c2:af:1a:56:61:f1:5e:3c:85:da:64:8f:b3:49:98:
86:40:50:2b:00:77:a4:e4:4c:fc:21:a6:53:aa:d4:d9:fa:a7:
4e:85:af:55:b0:73:ae:a5:a7:66:5d:69:0c:e8:5d:39:06:3c:
e6:bf:b4:e0:83:6b:90:d1:78:dd:e1:4b:20:10:43:08:18:b6:
73:e2:3a:27:10:e4:e4:2c:34:71:7e:7f:cc:4d:08:d0:a8:5c:
74:3c:e6:ce:17:fa:e2:cc:3a:2f:70:5c:e6:95:6d:c2:1f:74:
5f:24:cc:71:38:c9:eb:35:80:bd:c2:a9:d8:59:59:f1:88:dc:
6f:c1:0a:a4:ce:c6:b2:cb:7f:15:e7:97:0c:76:e9:99:72:f8:
1e:66:3d:e6:fc:b3:f2:5e:0c:a0:da:37:e9:90:ff:4c:5d:bc:
ce:4c:89:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 4 14:46:21 2024 by rpki-client on console-fra.rpki-client.org