Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/5dDtV5Z1xck1r02hJF-IDC36MJo.roa
File: 5dDtV5Z1xck1r02hJF-IDC36MJo.roa (raw, json)
Hash identifier: /4qMeZhgcDAP2u4dniwcgZQquvrfcwzYZuy9/hE0nf8=
Subject key identifier: E5:D0:ED:57:96:75:C5:C9:35:AF:4D:A1:24:5F:88:0C:2D:FA:30:9A
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019395FE967165C90349E2538C98334AA5D0
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/5dDtV5Z1xck1r02hJF-IDC36MJo.roa
Signing time: Thu 05 Dec 2024 08:45:10 +0000
ROA not before: Thu 05 Dec 2024 08:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20880
IP address blocks: 5.28.64.0/18 maxlen: 18
5.28.64.0/19 maxlen: 19
5.28.96.0/19 maxlen: 19
62.117.0.0/19 maxlen: 20
62.117.0.0/20 maxlen: 24
62.117.0.128/26 maxlen: 26
62.117.0.192/28 maxlen: 28
62.117.16.0/20 maxlen: 20
82.119.0.0/19 maxlen: 19
82.119.0.0/20 maxlen: 20
82.119.16.0/20 maxlen: 20
86.56.0.0/17 maxlen: 17
86.56.0.0/18 maxlen: 18
86.56.64.0/18 maxlen: 18
89.16.128.0/19 maxlen: 19
89.16.128.0/20 maxlen: 20
89.16.144.0/20 maxlen: 20
158.181.64.0/19 maxlen: 19
158.181.64.0/20 maxlen: 20
158.181.68.0/22 maxlen: 22
158.181.72.0/22 maxlen: 22
158.181.76.0/22 maxlen: 22
158.181.80.0/20 maxlen: 20
158.181.80.0/22 maxlen: 22
185.9.224.0/22 maxlen: 22
2a02:2450::/29 maxlen: 29
2a02:2450::/32 maxlen: 32
2a02:2454::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 05 Dec 2024 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:fe:96:71:65:c9:03:49:e2:53:8c:98:33:4a:a5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Dec 5 08:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d0ed579675c5c935af4da1245f880c2dfa309a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:d2:d0:b1:41:db:80:2f:99:8b:16:b7:11:
26:ac:18:76:37:de:86:27:e0:c9:9f:ba:44:6b:a2:
69:f7:e6:62:06:2f:18:5d:10:70:b5:a6:31:3b:f3:
14:33:4f:a8:b5:bf:c3:71:35:af:73:65:93:87:0c:
1b:7d:42:5a:fb:9e:a6:9b:c5:b6:e4:a2:ee:68:2e:
8c:db:0a:99:9f:1a:76:cc:b0:8e:ef:91:59:45:bd:
d0:e4:d0:45:51:20:bf:04:82:bd:09:fd:53:8d:64:
d7:24:80:5b:bc:0c:f5:1c:90:23:a3:b7:3f:31:76:
ed:9b:de:16:d2:a3:71:9b:7e:4c:e0:3b:5a:c9:7e:
2e:3c:44:af:7d:7c:0e:c4:f3:d9:f5:b5:81:25:fc:
25:a2:6c:f0:96:a7:b9:7e:ea:db:0c:0b:54:e7:0a:
df:fa:72:3a:48:06:a3:58:73:ff:39:d1:c9:07:81:
ed:fe:fa:e9:07:5e:e0:fc:19:5a:d7:dd:fc:88:b1:
21:bb:06:be:42:98:b6:81:74:6f:fe:59:89:4d:d1:
f5:57:d9:f7:06:94:ac:7a:40:6b:5e:ec:42:48:57:
d6:3a:9b:f3:37:fa:6a:f0:fd:a4:6e:8e:32:d3:bd:
e8:d7:f7:b5:a5:40:a3:d0:c3:7f:15:f8:11:0c:5f:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:ED:57:96:75:C5:C9:35:AF:4D:A1:24:5F:88:0C:2D:FA:30:9A
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/5dDtV5Z1xck1r02hJF-IDC36MJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
62.117.0.0/19
82.119.0.0/19
86.56.0.0/17
89.16.128.0/19
158.181.64.0/19
185.9.224.0/22
IPv6:
2a02:2450::/29
Signature Algorithm: sha256WithRSAEncryption
07:82:ec:7b:5f:53:23:ba:ae:92:f0:c1:06:35:98:76:64:d5:
1f:72:30:12:59:79:a6:1e:5b:2f:d4:31:9e:cc:83:25:d5:f2:
84:f2:c3:71:ca:9b:e8:60:05:e8:76:12:da:db:4e:35:0d:a0:
1d:38:41:8c:4a:66:b2:b2:bb:8c:7c:e9:50:ea:f3:f0:ab:a3:
c3:cc:63:87:bb:e4:ef:a7:5e:59:4f:dd:ed:7b:25:f2:b8:63:
fb:08:9e:7c:97:a2:35:ac:73:92:c0:f2:1b:76:2f:4f:5f:7b:
32:13:d8:13:12:18:6e:82:e9:bf:e1:a8:60:9a:e8:9d:b1:d3:
9b:64:2a:c1:a3:c1:48:c7:86:7b:5d:c3:12:b8:d5:70:aa:d0:
1a:7f:53:67:b8:dd:2c:b9:03:1a:62:95:13:dc:66:59:5d:93:
7e:f1:8b:48:cf:7c:79:e6:b5:c7:a3:85:76:a6:c3:a8:74:2b:
c5:d9:87:67:a3:56:9f:c9:a4:8b:aa:5b:c6:b7:f3:82:43:83:
b9:3b:88:4d:38:11:7d:c1:13:1b:34:36:8a:03:4e:54:72:eb:
b7:dd:c0:5e:20:1f:2a:1d:c1:e3:84:92:66:a3:c8:ae:eb:39:
f1:ad:f2:5f:b8:7e:f0:40:68:f4:93:9a:2d:92:cb:75:87:fa:
be:84:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:55 2025 by rpki-client