Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/EKlECqOldpUz28eZkXh8Ca0jfhU.roa
File: EKlECqOldpUz28eZkXh8Ca0jfhU.roa (raw, json)
Hash identifier: VkXjUR5K/K+RZqEIO8zOKoLBH20eOt916TTA/A9xAFg=
Subject key identifier: 10:A9:44:0A:A3:A5:76:95:33:DB:C7:99:91:78:7C:09:AD:23:7E:15
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01856CC13EC8303FADE007E31A912E804A1C
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/EKlECqOldpUz28eZkXh8Ca0jfhU.roa
Signing time: Sun 01 Jan 2023 09:54:41 +0000
ROA not before: Sun 01 Jan 2023 09:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41998
IP address blocks: 62.152.160.0/19 maxlen: 19
185.108.230.0/23 maxlen: 23
185.36.120.0/22 maxlen: 22
217.78.160.0/20 maxlen: 20
188.93.216.0/21 maxlen: 21
217.66.136.0/21 maxlen: 21
31.25.40.0/21 maxlen: 21
37.25.48.0/21 maxlen: 21
185.3.80.0/22 maxlen: 22
145.14.192.0/20 maxlen: 20
83.242.36.0/22 maxlen: 22
83.242.40.0/21 maxlen: 21
83.242.48.0/20 maxlen: 20
153.92.80.0/20 maxlen: 20
171.33.176.0/22 maxlen: 22
213.153.68.0/22 maxlen: 22
213.153.76.0/22 maxlen: 22
171.33.180.0/22 maxlen: 22
213.153.84.0/22 maxlen: 22
213.153.80.0/22 maxlen: 22
213.153.88.0/22 maxlen: 22
93.118.0.0/21 maxlen: 21
94.176.240.0/20 maxlen: 20
213.153.92.0/22 maxlen: 22
93.118.8.0/21 maxlen: 21
93.118.16.0/21 maxlen: 21
93.118.24.0/21 maxlen: 21
94.124.208.0/21 maxlen: 21
188.244.100.0/22 maxlen: 22
46.182.136.0/21 maxlen: 21
194.140.112.0/20 maxlen: 20
91.103.112.0/21 maxlen: 21
212.86.176.0/22 maxlen: 22
212.86.184.0/22 maxlen: 22
5.42.136.0/22 maxlen: 22
5.42.140.0/22 maxlen: 22
185.61.28.0/22 maxlen: 22
2a02:17b0::/32 maxlen: 32
2a00:79c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:3e:c8:30:3f:ad:e0:07:e3:1a:91:2e:80:4a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Jan 1 09:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a9440aa3a5769533dbc79991787c09ad237e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:8f:5e:1e:54:3b:1c:26:c5:ad:6f:5a:4d:
a6:c8:71:74:55:8a:55:59:31:94:b2:8f:60:09:cb:
64:c5:45:4a:d6:db:8b:70:10:f5:8d:81:bd:9c:24:
4b:6e:af:23:2a:86:c4:80:f6:c9:1b:8f:d4:fe:64:
e7:01:2b:75:43:11:0e:0d:01:28:68:93:ec:37:b9:
d1:1e:ab:c4:12:c0:d9:df:7c:7d:4b:46:4d:99:8e:
81:ca:29:67:04:3c:80:3e:d1:dd:2e:56:2a:1f:ee:
4b:b2:be:34:8f:51:01:72:32:0a:27:47:9e:ef:6b:
42:09:f8:97:84:3b:8f:d9:59:21:1e:e9:a4:8c:af:
3e:de:74:86:ff:9e:d3:ea:c7:99:e1:93:47:3b:a4:
03:1b:ae:8c:48:37:3a:6e:e4:3d:90:32:21:d7:ce:
c0:db:55:1c:2b:19:6d:9c:31:91:00:82:38:1a:fe:
ae:dd:f4:df:4f:29:99:2a:1d:b0:2a:e4:96:6c:f6:
06:3f:4c:a9:89:08:41:45:4b:3b:e1:a5:64:88:13:
f8:76:ab:96:f3:f6:69:af:c1:c3:89:1e:7d:c7:f3:
b0:5d:ab:e6:72:bb:c9:22:d3:aa:35:a2:87:63:dd:
2f:8a:7e:93:32:b6:cb:3f:18:5b:e3:36:58:dc:c4:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:44:0A:A3:A5:76:95:33:DB:C7:99:91:78:7C:09:AD:23:7E:15
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/EKlECqOldpUz28eZkXh8Ca0jfhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.136.0/21
31.25.40.0/21
37.25.48.0/21
46.182.136.0/21
62.152.160.0/19
83.242.36.0-83.242.63.255
91.103.112.0/21
93.118.0.0/19
94.124.208.0/21
94.176.240.0/20
145.14.192.0/20
153.92.80.0/20
171.33.176.0/21
185.3.80.0/22
185.36.120.0/22
185.61.28.0/22
185.108.230.0/23
188.93.216.0/21
188.244.100.0/22
194.140.112.0/20
212.86.176.0/22
212.86.184.0/22
213.153.68.0/22
213.153.76.0-213.153.95.255
217.66.136.0/21
217.78.160.0/20
IPv6:
2a00:79c0::/32
2a02:17b0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:e3:a7:94:55:11:1b:3a:c2:cd:9d:ab:65:e1:2d:cc:6c:2b:
35:c6:10:9f:9c:8f:c7:2f:c4:72:30:13:e1:40:d4:83:12:a2:
5c:ce:a3:2e:81:0b:3e:c1:5f:2a:41:5d:3b:bd:a6:f9:d8:9a:
4d:c0:bf:a3:c5:67:73:d6:45:b8:62:95:9a:7b:cc:43:98:8b:
7c:89:03:78:1a:6d:8e:0b:66:d8:87:89:45:e8:35:ce:b4:c9:
30:4e:c7:ed:8e:cd:fe:25:f0:56:9a:3a:cf:eb:5e:9c:9d:56:
7a:59:6f:a5:a5:0f:f9:30:c4:f8:34:3b:9d:4d:72:32:d8:b1:
a2:db:16:93:9a:c8:62:da:4d:2a:6d:43:d1:11:92:4d:14:4b:
e8:33:39:75:c4:b8:33:f4:f6:3c:8f:22:2d:96:c0:63:d8:e9:
9e:55:ba:fc:14:08:a0:e8:b4:e5:66:31:57:cd:7c:e5:1f:14:
02:62:6a:eb:47:ea:b5:3e:21:58:ee:3b:99:7e:17:02:99:51:
b2:c6:7a:18:df:09:df:b2:82:a7:62:59:15:b6:68:be:41:06:
a0:55:ba:98:65:4a:2d:df:f0:45:24:2b:c4:30:90:22:e4:79:
78:40:bc:89:77:2f:3c:3e:06:f3:b5:be:62:e3:5c:11:6f:93:
be:d5:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:14 2024 by rpki-client on console-ams.rpki-client.org