Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OD5uxr7A8Pi7AOLWIwtVCImTTDY.roa
File: OD5uxr7A8Pi7AOLWIwtVCImTTDY.roa (raw, json)
Hash identifier: 8Ad7qyU3jwO4HEa2zGg2IwPHSZOicQ2vJyLyPUHf1uQ=
Subject key identifier: 38:3E:6E:C6:BE:C0:F0:F8:BB:00:E2:D6:23:0B:55:08:89:93:4C:36
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018D6637E7A763215E026D2E44D4A3CDE8FF
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OD5uxr7A8Pi7AOLWIwtVCImTTDY.roa
Signing time: Thu 01 Feb 2024 19:49:16 +0000
ROA not before: Thu 01 Feb 2024 19:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198193
IP address blocks: 5.61.208.0/23 maxlen: 23
5.181.96.0/23 maxlen: 23
5.187.35.0/24 maxlen: 24
5.187.36.0/23 maxlen: 23
31.214.155.0/24 maxlen: 24
37.252.98.0/24 maxlen: 24
37.252.100.0/24 maxlen: 24
37.252.101.0/24 maxlen: 24
46.251.250.0/24 maxlen: 24
46.253.139.0/24 maxlen: 24
84.247.19.0/24 maxlen: 24
85.204.168.0/23 maxlen: 23
85.204.170.0/23 maxlen: 23
89.32.64.0/24 maxlen: 24
89.32.65.0/24 maxlen: 24
89.32.66.0/24 maxlen: 24
89.32.67.0/24 maxlen: 24
89.44.35.0/24 maxlen: 24
89.44.36.0/22 maxlen: 22
95.156.203.0/24 maxlen: 24
158.255.239.0/24 maxlen: 24
162.33.200.0/22 maxlen: 22
162.33.204.0/22 maxlen: 22
185.66.172.0/24 maxlen: 24
185.66.174.0/24 maxlen: 24
185.75.22.0/23 maxlen: 23
185.86.208.0/23 maxlen: 23
185.88.200.0/23 maxlen: 23
185.88.202.0/23 maxlen: 23
185.193.241.0/24 maxlen: 24
185.206.121.0/24 maxlen: 24
185.212.114.0/24 maxlen: 24
185.225.8.0/24 maxlen: 24
217.61.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:37:e7:a7:63:21:5e:02:6d:2e:44:d4:a3:cd:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Feb 1 19:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=383e6ec6bec0f0f8bb00e2d6230b550889934c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:03:de:ef:52:19:fc:3f:5c:10:18:fa:36:
c1:2f:a7:82:6e:d1:40:86:53:80:ed:99:42:e3:9d:
00:de:6c:43:c3:24:78:96:1f:6b:a8:ca:32:e5:71:
e9:db:2f:3a:ab:f2:68:58:06:85:98:2f:1b:9a:e8:
be:1e:e9:f6:ca:25:9d:e7:2d:bc:44:ed:0d:1d:59:
f2:33:5b:41:3e:9d:a8:31:d9:df:25:0b:b2:2f:86:
0c:d4:a5:05:08:08:9b:38:38:51:9c:33:df:f6:da:
d3:82:ee:4d:07:1d:7d:4f:d2:c2:a3:5a:89:3b:0a:
01:0f:39:8a:e3:24:1c:e2:e2:b2:75:d7:92:8f:46:
de:45:6c:b1:ac:55:8f:ca:fa:9b:68:1e:4a:f7:ca:
cf:39:1a:e2:c6:ec:7d:3e:26:f5:99:ff:32:88:38:
7e:6b:14:a2:6a:ce:08:56:8d:0e:07:1f:03:11:6c:
8e:0c:d7:7a:0c:e5:5f:9f:ee:1b:6b:9e:47:70:42:
fa:c0:e0:04:f8:67:fa:ca:88:8a:ce:d8:65:87:39:
4e:19:c9:b2:b8:26:5e:2d:9f:65:a4:98:d7:7e:9a:
b1:b5:0b:44:36:b9:dc:94:25:35:be:8e:c8:8f:a2:
0e:d3:dd:cb:da:25:89:27:c1:2b:c6:cc:03:9f:82:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3E:6E:C6:BE:C0:F0:F8:BB:00:E2:D6:23:0B:55:08:89:93:4C:36
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/OD5uxr7A8Pi7AOLWIwtVCImTTDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.208.0/23
5.181.96.0/23
5.187.35.0-5.187.37.255
31.214.155.0/24
37.252.98.0/24
37.252.100.0/23
46.251.250.0/24
46.253.139.0/24
84.247.19.0/24
85.204.168.0/22
89.32.64.0/22
89.44.35.0-89.44.39.255
95.156.203.0/24
158.255.239.0/24
162.33.200.0/21
185.66.172.0/24
185.66.174.0/24
185.75.22.0/23
185.86.208.0/23
185.88.200.0/22
185.193.241.0/24
185.206.121.0/24
185.212.114.0/24
185.225.8.0/24
217.61.240.0/24
Signature Algorithm: sha256WithRSAEncryption
23:36:24:89:39:9c:6d:62:3d:4f:05:91:40:23:3c:34:ab:bd:
3d:c1:9b:2a:4f:b2:0c:92:50:03:63:23:5b:52:68:d3:73:7d:
5b:ed:51:c8:86:14:de:54:2a:18:96:f5:9b:a6:b0:52:31:54:
1c:ad:d5:60:c9:6f:d7:bf:25:2b:82:8f:45:b6:47:59:99:31:
8f:72:a4:e7:3f:36:e8:af:85:58:b1:2f:dd:c5:6d:ac:1d:0f:
fd:78:9d:59:12:96:f3:c5:49:84:bf:e1:df:eb:a4:18:dd:b8:
c3:d6:43:d6:eb:67:55:29:b1:2a:3e:e1:57:12:87:88:72:64:
3e:8a:60:d2:55:c7:44:3c:9a:2d:89:d2:15:9e:96:73:aa:0a:
53:2a:ce:87:0c:68:e9:23:2b:32:97:21:c0:d4:2e:d9:ae:05:
07:8c:4c:88:c2:6f:87:5e:76:d3:54:f6:d7:2f:95:f6:b8:bb:
79:b6:62:51:1b:cc:0a:a3:4e:fa:01:99:40:a8:69:2f:78:e9:
05:4b:2e:70:ed:71:f0:90:26:57:2c:d2:f0:78:e7:1a:d1:3a:
c0:b8:41:4d:a2:51:06:92:6d:12:d7:e5:d2:16:f2:e8:ca:07:
6e:7e:aa:51:be:70:81:bd:4e:43:be:39:46:e9:5e:50:32:8a:
c0:0a:94:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org