Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5wPLC1_dH06psuaHjcXbNvIG0dg.roa
File: 5wPLC1_dH06psuaHjcXbNvIG0dg.roa (raw, json)
Hash identifier: sMhVDb58JzJUJjxpA8tie2rJCsuPtGVFTeS3cz9Ftyg=
Subject key identifier: E7:03:CB:0B:5F:DD:1F:4E:A9:B2:E6:87:8D:C5:DB:36:F2:06:D1:D8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018A92A7449E60A4F9AD38A8931E63DD595D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5wPLC1_dH06psuaHjcXbNvIG0dg.roa
Signing time: Thu 14 Sep 2023 07:45:50 +0000
ROA not before: Thu 14 Sep 2023 07:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Sep 2023 07:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:a7:44:9e:60:a4:f9:ad:38:a8:93:1e:63:dd:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 14 07:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e703cb0b5fdd1f4ea9b2e6878dc5db36f206d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:ca:1d:14:e5:f4:da:0a:f2:23:f1:28:29:
d3:e2:8f:8e:e3:d7:10:7b:a7:7c:c4:31:0e:ca:35:
25:60:45:ea:cf:9d:e0:9a:89:81:b2:24:48:94:78:
bf:d7:30:d0:f9:df:40:eb:8f:36:a9:71:52:54:50:
d2:2a:d1:b1:bd:7b:1f:65:87:de:dc:1e:04:60:ce:
9b:d7:e2:79:58:8c:68:99:da:21:df:2f:70:71:f7:
8d:32:f2:4d:00:f7:b6:bf:ba:80:a7:48:78:b4:2f:
82:c4:d0:57:6e:f8:89:98:11:5f:bf:fa:51:6d:54:
18:f2:4b:1c:f0:3a:55:35:05:b2:47:e4:fe:e7:2f:
7e:64:90:1a:72:39:70:29:ff:14:82:96:69:b3:9f:
0d:fa:02:2b:7b:81:bb:08:67:9e:80:a9:1b:ec:b6:
1f:76:10:a7:e4:e4:2a:41:c9:a3:2b:15:a9:45:c4:
2f:07:e7:77:1b:c7:1b:e1:4f:92:d5:5e:d6:a5:cc:
81:f9:31:a8:72:d2:e8:27:32:1e:e7:f3:fa:a8:ed:
3e:3c:47:bc:a6:10:34:db:b8:b7:cf:a3:a7:ee:ca:
96:49:5c:7e:ba:43:45:f3:e2:f0:5a:d6:f3:9c:67:
b4:cd:0c:2e:b8:eb:73:db:bc:8e:21:70:24:48:39:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:CB:0B:5F:DD:1F:4E:A9:B2:E6:87:8D:C5:DB:36:F2:06:D1:D8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/5wPLC1_dH06psuaHjcXbNvIG0dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
0c:2b:8b:fa:23:9e:32:3e:13:23:bc:04:91:29:2d:e2:39:a2:
e7:aa:b8:cc:34:f7:9a:bf:20:cc:c3:49:71:f9:83:8d:46:fd:
4b:a9:b6:29:cd:13:bc:d4:5b:6c:c8:b9:43:72:3b:9b:1a:dc:
0d:0a:d4:e1:8c:49:4c:e9:f7:7e:8d:12:73:dd:1b:6f:0a:22:
ac:f1:5d:f7:eb:95:97:2e:8e:80:6b:c9:db:e2:f4:c7:60:4f:
ac:5f:63:67:1f:d3:a2:7f:80:c1:16:9e:98:c7:39:7c:06:a5:
08:25:4f:7d:8c:a9:f5:f4:ce:f7:f6:09:cb:95:78:5d:9e:60:
5e:d5:99:4b:38:56:10:ad:60:4b:05:23:ae:92:49:ea:0f:7c:
b8:57:dd:c0:9e:5d:bf:17:18:6a:31:dc:c2:8b:70:e7:f8:2f:
a8:45:9b:81:2b:27:4d:d6:c5:93:d3:5f:15:2a:8e:ba:62:ac:
e2:7e:05:06:74:c9:7b:cd:a3:6c:e9:14:f3:4e:8a:e7:eb:39:
5a:0e:7c:d5:62:01:9d:97:17:fd:26:c3:4a:95:f0:4a:10:83:
76:4c:c0:24:60:05:cf:c2:aa:cd:8d:53:41:a8:31:34:b6:34:
53:fa:88:cf:48:a0:c3:d6:1f:a0:43:ac:eb:12:f3:a3:fb:74:
6d:41:1a:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org