Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/e-ZQSgoPnVCUcHO8LZZj3SZenSM.roa
File: e-ZQSgoPnVCUcHO8LZZj3SZenSM.roa (raw, json)
Hash identifier: VOcd2YnjGdnZjSaUc6wtjbO2MbbTIIuvZBkcwiLgYUo=
Subject key identifier: 7B:E6:50:4A:0A:0F:9D:50:94:70:73:BC:2D:96:63:DD:26:5E:9D:23
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 018FED78CB5AD605004D24C91E49C48A674C
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/e-ZQSgoPnVCUcHO8LZZj3SZenSM.roa
Signing time: Thu 06 Jun 2024 12:14:27 +0000
ROA not before: Thu 06 Jun 2024 12:14:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13037
IP address blocks: 51.148.0.0/16 maxlen: 16
51.155.0.0/16 maxlen: 16
51.170.0.0/16 maxlen: 16
62.3.64.0/18 maxlen: 18
77.104.128.0/18 maxlen: 18
82.68.0.0/14 maxlen: 14
82.68.0.0/15 maxlen: 15
82.70.0.0/16 maxlen: 16
82.71.0.0/16 maxlen: 16
82.71.240.0/20 maxlen: 20
88.97.0.0/18 maxlen: 18
88.97.64.0/19 maxlen: 19
88.97.96.0/20 maxlen: 20
88.97.160.0/23 maxlen: 23
88.97.162.0/23 maxlen: 23
88.97.164.0/23 maxlen: 23
88.97.166.0/23 maxlen: 23
88.97.168.0/24 maxlen: 24
88.97.169.0/24 maxlen: 24
88.97.170.0/24 maxlen: 24
88.97.171.0/24 maxlen: 24
88.97.172.0/24 maxlen: 24
88.97.173.0/24 maxlen: 24
88.97.174.0/24 maxlen: 24
88.97.175.0/24 maxlen: 24
88.97.176.0/20 maxlen: 20
88.98.0.0/20 maxlen: 20
88.98.16.0/23 maxlen: 23
88.98.18.0/24 maxlen: 24
88.98.21.0/24 maxlen: 24
88.98.22.0/23 maxlen: 23
88.98.24.0/21 maxlen: 21
88.98.32.0/19 maxlen: 19
88.98.64.0/19 maxlen: 19
88.98.128.0/19 maxlen: 19
88.98.160.0/21 maxlen: 21
88.98.170.0/23 maxlen: 23
88.98.172.0/22 maxlen: 22
88.98.176.0/20 maxlen: 20
146.66.64.0/18 maxlen: 18
212.23.0.0/19 maxlen: 19
217.155.0.0/16 maxlen: 16
2a02:8010::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 09 Jun 2024 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:78:cb:5a:d6:05:00:4d:24:c9:1e:49:c4:8a:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jun 6 12:14:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be6504a0a0f9d50947073bc2d9663dd265e9d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:45:54:78:0a:15:ca:19:98:0e:86:3d:62:
45:06:0b:59:12:09:05:18:b7:4b:97:f7:e1:6c:54:
f5:0a:4a:1c:c0:be:25:35:ac:2a:b8:8c:df:86:4b:
7c:4f:c7:ae:74:be:54:67:9e:8b:da:a4:ac:a6:67:
22:8a:03:57:4d:51:0a:d9:05:f0:e4:11:cd:98:9b:
ed:94:7a:cc:da:10:af:cc:be:bf:80:ee:1e:0c:a2:
a9:07:be:d7:a5:f6:db:5b:e9:3a:b1:c5:35:1c:f2:
64:68:b0:3c:64:5a:9b:06:89:cf:28:05:f0:3a:05:
0a:6e:98:03:98:13:e6:db:57:0d:ce:77:60:20:60:
e1:9d:65:33:84:8c:a3:0f:1b:47:37:f1:fc:e8:2b:
ac:ea:86:53:80:1e:b9:42:b2:64:59:8a:94:39:33:
7c:84:e0:6b:10:29:fd:62:dc:a9:7e:06:e0:2b:c8:
2e:f7:1e:30:11:7f:f0:a8:d9:a1:36:25:48:97:84:
45:53:af:2e:00:48:82:84:2c:84:84:af:d0:ae:93:
b1:f0:0a:9f:00:31:3e:e6:89:77:30:d9:f2:3a:39:
53:3b:b9:77:87:ac:34:e0:a4:80:83:97:72:01:23:
26:3e:a9:16:e7:76:0a:2f:64:3f:de:84:e4:77:e6:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E6:50:4A:0A:0F:9D:50:94:70:73:BC:2D:96:63:DD:26:5E:9D:23
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/e-ZQSgoPnVCUcHO8LZZj3SZenSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
51.170.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/14
88.97.0.0-88.97.111.255
88.97.160.0/19
88.98.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
Signature Algorithm: sha256WithRSAEncryption
2c:38:70:af:5e:88:ed:5c:d4:7b:b8:d9:55:91:b3:d2:c1:a3:
e2:3c:5f:10:ae:ea:43:a6:72:5c:2d:52:fd:28:11:28:2a:a4:
7e:05:1c:bb:6f:21:b5:44:73:00:62:91:09:1c:cb:2a:c5:42:
69:e0:1e:29:4c:41:f5:d6:67:1a:7a:90:07:62:8b:b4:a7:97:
e8:0f:31:26:f6:54:70:16:ab:5b:14:da:22:23:85:af:aa:b9:
3d:2e:ca:60:27:1a:ac:18:1d:1e:52:e0:03:6a:5e:42:cf:37:
27:c4:d6:9f:94:07:b3:7f:07:1b:31:f5:ac:fe:bc:aa:b3:10:
52:c6:a7:7e:02:90:b8:79:a0:a9:be:eb:99:88:e2:0f:d3:df:
f3:f6:fd:5a:8b:d2:23:c9:aa:56:cb:15:25:4c:9f:c4:fa:bf:
90:87:16:b0:76:1a:da:68:8c:e7:20:91:47:dc:31:1d:fd:37:
c9:bb:cf:f2:07:ab:17:32:e9:90:0f:bf:98:93:0d:46:d0:61:
f3:74:d5:3d:0a:cf:1d:7c:dd:3b:bc:22:7a:26:a0:a9:0b:82:
1b:5d:fd:87:93:c2:d3:8f:50:5c:26:a1:10:0f:2d:0c:f6:59:
91:07:95:8a:91:e6:73:9d:c4:7e:12:d7:eb:77:2a:47:e5:12:
16:73:40:c0
-----BEGIN CERTIFICATE-----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Generated at Mon Jun 10 02:15:00 2024 by rpki-client on console-fra.rpki-client.org