Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gKmsIyfUiSdrMWBsx4k84knA2rk.roa
File: gKmsIyfUiSdrMWBsx4k84knA2rk.roa (raw, json)
Hash identifier: aoeNFpZWAUXVTmPetFtWHJhlZ3Q51m9IFvDVlOCgXzI=
Subject key identifier: 80:A9:AC:23:27:D4:89:27:6B:31:60:6C:C7:89:3C:E2:49:C0:DA:B9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0190030E1BBAC099AC75978A6D47A401B9FD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gKmsIyfUiSdrMWBsx4k84knA2rk.roa
Signing time: Mon 10 Jun 2024 16:49:34 +0000
ROA not before: Mon 10 Jun 2024 16:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 5.253.44.0/24 maxlen: 24
5.253.47.0/24 maxlen: 24
45.8.188.0/24 maxlen: 24
45.8.189.0/24 maxlen: 24
45.8.206.0/24 maxlen: 24
45.9.4.0/24 maxlen: 24
45.9.7.0/24 maxlen: 24
45.66.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:0e:1b:ba:c0:99:ac:75:97:8a:6d:47:a4:01:b9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 10 16:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a9ac2327d489276b31606cc7893ce249c0dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:bf:f2:ce:f9:e3:11:cf:af:3b:63:ab:8c:
47:f2:96:e6:0d:bc:91:b8:6f:54:35:11:9e:18:08:
ab:67:e8:54:ff:e3:f4:b8:0d:98:f4:e6:52:ae:5e:
29:33:a1:b5:1c:d6:f1:10:60:42:c1:73:f3:86:39:
7a:48:11:27:c7:cd:d9:52:63:65:bc:60:09:85:8c:
f9:ba:f5:43:ee:88:6d:dd:08:59:be:25:56:d9:94:
c6:d8:72:6b:06:1a:d7:5f:7c:1b:bd:01:dd:b5:38:
cf:1e:72:a2:1c:60:47:1a:60:48:08:f2:83:6b:42:
c9:a2:96:e9:ab:95:56:02:89:ad:e7:e4:21:0f:8d:
92:63:56:e7:07:b3:aa:a1:da:8e:d2:c6:1f:46:a5:
d5:ab:01:09:c4:6c:82:10:48:6e:2b:96:fb:a4:39:
5b:9f:91:70:96:8e:ee:fd:b5:3b:74:74:31:40:00:
9f:2e:9b:3d:a3:02:22:81:af:74:06:6a:f3:04:fc:
3a:84:72:a7:16:b2:f1:88:92:33:e1:30:2e:4d:62:
bd:62:74:d0:67:37:0e:b4:43:7a:e0:81:75:d0:ad:
5c:2a:8e:52:e1:6e:4c:79:8d:9b:9d:60:9a:19:7d:
54:79:ec:fe:41:f6:5e:98:e6:4b:ae:1a:79:fc:ed:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:AC:23:27:D4:89:27:6B:31:60:6C:C7:89:3C:E2:49:C0:DA:B9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gKmsIyfUiSdrMWBsx4k84knA2rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.44.0/24
5.253.47.0/24
45.8.188.0/23
45.8.206.0/24
45.9.4.0/24
45.9.7.0/24
45.66.155.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c2:b2:37:d0:c0:51:27:1e:29:0d:16:c4:9d:5d:18:59:db:
8f:1e:03:6e:e4:ee:09:a5:90:24:59:7c:5e:20:3a:a7:25:5b:
cc:b0:93:8b:f4:ef:75:42:a4:c8:af:31:4f:3e:b0:a6:2a:92:
41:7d:fa:b8:09:61:cf:5e:96:75:06:a9:07:29:8f:ee:a4:82:
c8:6d:24:3a:1d:a5:b3:f7:dc:28:a0:37:11:dd:d7:11:ff:26:
75:77:5f:9b:64:d5:ec:e7:07:e7:9d:6b:11:16:7a:26:ce:bd:
5f:78:ce:97:f0:a5:f3:9a:bc:19:78:cf:37:af:3e:e9:c8:ac:
ac:ca:3e:05:2d:c4:da:b8:cc:39:2d:c8:cf:13:e6:f5:a8:9b:
02:c5:4b:e1:b7:c7:d9:5c:bb:a4:50:55:d3:12:62:02:27:46:
ae:df:10:15:16:5d:82:b4:5a:44:c8:ba:cd:21:b0:fc:4d:c0:
26:3b:91:51:ef:31:cf:ad:8a:5b:63:03:11:6a:30:45:e8:3c:
f3:03:d5:e9:3a:7b:4b:aa:ba:72:ba:ee:bc:56:05:b3:51:5f:
af:7f:88:06:34:1b:ef:51:dc:91:53:44:62:58:3e:33:65:c9:
d8:6f:7d:1e:de:98:46:50:9d:02:a3:6b:73:73:95:23:78:38:
32:3f:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:31 2025 by rpki-client