Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b2r8NwKgAbb_nuDqc5TZ7Nd3pdg.roa
File: b2r8NwKgAbb_nuDqc5TZ7Nd3pdg.roa (raw, json)
Hash identifier: OUAYCZcFAAyc0kmAIMxGNDGZrfcTMD5QLtOO3ndPXeI=
Subject key identifier: 6F:6A:FC:37:02:A0:01:B6:FF:9E:E0:EA:73:94:D9:EC:D7:77:A5:D8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F873D2E1E39AA2DE68301A7359DBE44A9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b2r8NwKgAbb_nuDqc5TZ7Nd3pdg.roa
Signing time: Fri 17 May 2024 15:48:04 +0000
ROA not before: Fri 17 May 2024 15:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.32.0/22 maxlen: 24
5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
5.253.44.0/24 maxlen: 24
5.253.45.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
45.9.4.0/24 maxlen: 24
45.9.6.0/24 maxlen: 24
45.9.7.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 18:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:3d:2e:1e:39:aa:2d:e6:83:01:a7:35:9d:be:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 17 15:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f6afc3702a001b6ff9ee0ea7394d9ecd777a5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:7c:4f:63:ae:bf:d5:19:fe:86:5f:39:20:
20:be:6c:39:3f:6e:e4:b4:8d:9c:cd:8a:ea:1b:20:
73:f4:0d:e0:22:f6:78:dc:c8:27:34:5a:a7:13:39:
c5:9d:a5:be:67:63:53:83:d2:f2:33:13:05:83:f1:
05:bb:49:3d:4c:0c:d7:83:fe:fb:16:d2:02:bd:56:
c7:36:b1:aa:67:77:27:eb:ee:5b:97:a0:79:9d:6a:
f7:f9:20:db:f0:6d:4f:a5:74:87:d8:12:d2:28:d4:
c8:c7:19:d2:82:26:bd:2a:28:8f:a0:aa:49:b8:3b:
c7:80:64:4d:aa:75:e3:53:67:a2:1a:e0:9b:35:df:
3e:4d:50:7f:b1:7f:0c:ce:4c:60:d5:ce:90:6b:e2:
4b:82:b8:4a:37:b5:93:ec:2a:7c:ef:ff:f8:8b:f5:
1e:9d:f6:bf:06:69:5e:0c:95:99:d2:84:46:a1:19:
41:20:3d:7c:44:52:56:c2:08:86:97:6d:a0:a3:4b:
38:7f:52:90:c3:37:9f:ff:e4:fc:34:cf:35:ac:b9:
96:17:ef:14:d0:41:29:d6:2c:f7:b9:08:14:89:4c:
27:b2:b7:49:aa:e9:c7:f9:bc:75:08:d9:e1:3e:db:
16:0b:2e:3f:dd:74:92:c4:27:99:23:1f:60:ac:7a:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:FC:37:02:A0:01:B6:FF:9E:E0:EA:73:94:D9:EC:D7:77:A5:D8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b2r8NwKgAbb_nuDqc5TZ7Nd3pdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.50.0/23
5.180.80.0/24
5.253.39.0/24
5.253.44.0/23
5.253.47.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.203.0/24
45.8.252.0/24
45.8.255.0-45.9.1.255
45.9.4.0/24
45.9.6.0/23
45.66.152.0/24
45.66.154.0/23
85.208.105.0/24
85.208.107.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0/24
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:ea:28:a7:61:91:e8:03:9f:63:4c:5b:39:b8:20:79:09:06:
72:4b:20:b2:5f:3b:30:9c:2f:de:41:a2:c1:0f:21:d0:09:a4:
9b:a7:48:e7:a6:ba:53:03:6d:ae:ec:cb:60:44:38:62:4f:c5:
47:96:a5:39:8d:78:9b:a5:9d:a4:c0:fc:42:ac:97:ab:24:73:
b2:2a:9b:a2:f9:cc:4a:d5:47:0c:d9:9f:35:c9:67:a3:2b:be:
0f:ad:d0:bf:b8:d7:2f:93:e1:f9:92:00:75:38:fb:0f:17:d1:
dd:9e:44:9d:3e:65:05:6e:af:31:3c:ef:ec:f1:49:96:62:d5:
59:5c:25:62:bf:7e:cd:2f:7e:fa:1e:a9:60:0f:fb:57:7e:86:
ef:53:ac:79:24:65:77:71:bf:62:83:df:6e:37:e0:9d:e2:e6:
df:86:b5:34:f6:67:47:be:4c:76:c1:dc:d6:d7:ec:92:3e:ae:
81:6a:c4:86:81:ca:f6:e0:de:7c:8d:e3:e0:2f:b8:2c:47:f6:
c4:41:b7:d1:08:b6:27:52:a1:9a:c8:55:8d:50:9c:be:ae:07:
ba:4b:f0:09:c2:ce:a5:4e:9b:59:9e:f4:85:1a:58:a3:93:d0:
d0:48:e5:87:b4:7c:3d:1f:09:66:80:cf:3a:8d:66:59:d7:ce:
de:a3:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:20 2024 by rpki-client on console-ams.rpki-client.org