Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/0ytkugkkExfLTjiAWMcX6pT6Y6E.roa
File: 0ytkugkkExfLTjiAWMcX6pT6Y6E.roa (raw, json)
Hash identifier: Itl5LyOgYkDInkNJVZ57CQ63CjHSKURi7JgiGtX4pwQ=
Subject key identifier: D3:2B:64:BA:09:24:13:17:CB:4E:38:80:58:C7:17:EA:94:FA:63:A1
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 018CC64B85AA9FE50AF3DBE92C34944DA68E
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/0ytkugkkExfLTjiAWMcX6pT6Y6E.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43872
IP address blocks: 185.253.176.0/22 maxlen: 22
185.187.61.0/24 maxlen: 24
185.183.20.0/22 maxlen: 22
193.247.165.0/24 maxlen: 24
193.247.94.0/24 maxlen: 24
193.247.103.0/24 maxlen: 24
193.247.101.0/24 maxlen: 24
193.105.189.0/24 maxlen: 24
5.253.252.0/22 maxlen: 22
92.118.111.0/24 maxlen: 24
176.101.169.0/24 maxlen: 24
2a10:c9c0::/29 maxlen: 29
2a10:cac0::/29 maxlen: 29
2a0b:180::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 07 Feb 2024 08:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:85:aa:9f:e5:0a:f3:db:e9:2c:34:94:4d:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d32b64ba09241317cb4e388058c717ea94fa63a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:d9:50:e4:d1:e9:88:6c:77:99:62:a9:ee:
e5:e1:0b:57:cf:b0:da:cd:f6:e5:3d:7e:37:03:98:
87:36:0b:cd:82:79:89:26:d6:13:cf:90:05:97:51:
25:0c:64:d1:ae:09:7e:f8:fd:8b:da:e9:70:a8:d8:
04:d7:3e:3e:fb:2a:a3:fc:c0:0e:63:84:d5:0c:39:
e3:c3:86:ab:07:0d:c3:4e:cb:d0:cf:37:7b:a7:84:
b5:49:98:7d:53:fe:5b:b9:e0:0a:f7:d0:98:91:c8:
a4:7a:62:55:34:a7:7b:32:3b:1b:fb:61:0f:24:36:
77:c1:4d:aa:36:12:90:e5:1c:fc:c2:92:17:92:4b:
1e:14:ed:1c:5b:55:5d:93:88:f5:de:93:31:c5:78:
e3:af:88:23:59:ea:c1:9d:f7:cf:72:15:95:64:40:
89:d9:9e:89:b9:07:a0:65:49:2f:ce:9f:69:58:9c:
a2:ed:c3:91:5c:51:b0:68:9d:77:74:74:d1:6c:a6:
7e:ec:9c:47:51:c0:5f:4c:b9:67:b9:05:f2:db:be:
85:ff:1e:1a:9a:6b:10:9e:89:95:2e:c0:a4:e2:24:
a8:c4:40:18:30:95:71:10:34:22:5b:91:b5:64:ec:
9e:46:7b:83:81:9f:f2:47:84:40:aa:b3:09:9b:61:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2B:64:BA:09:24:13:17:CB:4E:38:80:58:C7:17:EA:94:FA:63:A1
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/0ytkugkkExfLTjiAWMcX6pT6Y6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.252.0/22
92.118.111.0/24
176.101.169.0/24
185.183.20.0/22
185.187.61.0/24
185.253.176.0/22
193.105.189.0/24
193.247.94.0/24
193.247.101.0/24
193.247.103.0/24
193.247.165.0/24
IPv6:
2a0b:180::/29
2a10:c9c0::/29
2a10:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
17:01:b6:f2:2a:d5:4d:45:99:2f:4a:bc:c4:dc:52:ba:2a:23:
e9:75:cc:bd:df:e1:93:f0:7a:bd:66:ff:15:f1:33:6b:39:21:
af:bf:ba:ad:37:89:8b:3d:31:c9:3c:69:3c:c5:16:1c:94:8e:
59:f1:26:09:9b:7e:25:15:d2:a6:6e:c2:25:fc:98:6a:a0:46:
78:b1:33:ba:ca:d3:0e:7b:0b:88:02:be:e7:4c:10:84:54:ff:
65:39:de:54:a9:a0:8e:2e:2c:08:2a:12:d8:bc:0e:f0:40:e9:
2d:57:53:2e:68:53:93:9c:3f:08:41:b3:18:8e:97:b9:30:0c:
3e:b9:44:cc:12:27:5e:74:79:86:00:4b:d1:d8:1b:7d:88:7c:
6e:74:13:d8:f5:87:96:17:df:53:08:8d:10:8c:4b:9a:8f:08:
46:ce:9f:19:6a:e1:fb:f3:5c:ea:95:dc:ac:54:1a:da:5b:40:
17:55:b1:8f:a1:a0:32:44:2d:63:5b:58:83:44:dc:39:c0:d7:
b3:b9:fd:50:1d:4e:1e:b6:2b:24:19:42:9c:e4:39:49:f4:aa:
4e:f3:2b:b4:87:71:38:0a:fd:28:8c:4b:18:b0:f6:b2:9c:53:
d7:ba:70:6c:6e:89:0a:09:45:09:91:8d:35:f2:05:de:c4:b4:
44:9c:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:07 2024 by rpki-client on console-ams.rpki-client.org