Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/g5jyxYTPHBdlzqb3OlPGJRCyZFM.roa
File: g5jyxYTPHBdlzqb3OlPGJRCyZFM.roa (raw, json)
Hash identifier: rYyyA1bqQoxO9BIzOZwAcWlhbTGuB9LlZp8/MyAGniw=
Subject key identifier: 83:98:F2:C5:84:CF:1C:17:65:CE:A6:F7:3A:53:C6:25:10:B2:64:53
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 01916EBD1C8191BE35DDC3CF926A4CA24BA5
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/g5jyxYTPHBdlzqb3OlPGJRCyZFM.roa
Signing time: Tue 20 Aug 2024 07:42:52 +0000
ROA not before: Tue 20 Aug 2024 07:42:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 37.46.16.0/21 maxlen: 21
46.183.104.0/23 maxlen: 23
78.137.128.0/18 maxlen: 18
78.143.128.0/18 maxlen: 18
80.93.16.0/20 maxlen: 20
83.147.128.0/18 maxlen: 18
84.203.0.0/16 maxlen: 16
89.16.64.0/19 maxlen: 19
89.184.32.0/22 maxlen: 22
89.184.40.0/21 maxlen: 21
89.184.48.0/21 maxlen: 21
89.184.56.0/23 maxlen: 23
89.234.64.0/18 maxlen: 18
91.142.96.0/20 maxlen: 20
92.51.192.0/19 maxlen: 19
92.51.208.0/20 maxlen: 20
92.51.232.0/21 maxlen: 21
92.51.240.0/20 maxlen: 20
93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
109.106.96.0/20 maxlen: 20
109.106.112.0/21 maxlen: 21
109.106.124.0/22 maxlen: 22
176.52.216.0/22 maxlen: 22
176.52.220.0/23 maxlen: 23
185.47.144.0/22 maxlen: 22
185.53.32.0/24 maxlen: 24
185.53.35.0/24 maxlen: 24
185.182.72.0/22 maxlen: 22
185.205.228.0/22 maxlen: 22
185.233.176.0/22 maxlen: 22
185.242.236.0/23 maxlen: 23
212.126.32.0/19 maxlen: 19
212.126.60.0/22 maxlen: 22
217.78.0.0/20 maxlen: 20
2001:1bb8::/32 maxlen: 32
2a00:15b8::/32 maxlen: 32
2a00:15b8:400::/40 maxlen: 40
2a01:258::/32 maxlen: 32
2a01:8aa0::/32 maxlen: 32
2a02:220::/32 maxlen: 32
2a0a:e780::/29 maxlen: 30
2a0b:bc0::/29 maxlen: 30
Validation: Failed, certificate revoked on Tue 24 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:bd:1c:81:91:be:35:dd:c3:cf:92:6a:4c:a2:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Aug 20 07:42:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8398f2c584cf1c1765cea6f73a53c62510b26453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:28:21:99:31:9e:16:e2:85:ca:15:77:a7:
22:12:c7:d7:57:cf:70:94:bb:6c:87:27:34:ef:b3:
70:8f:b2:95:d0:1f:2a:16:19:36:fd:e9:21:64:57:
db:6d:4b:3a:49:08:e7:df:9d:68:25:65:2c:3e:21:
ef:76:c8:48:c1:e8:59:df:5f:2f:b2:8e:ea:ef:76:
d6:91:b6:d0:5c:f3:79:b7:d7:c9:88:1d:70:ce:9c:
3c:1f:80:6a:ca:0f:84:57:80:da:5c:af:83:38:ac:
67:78:4c:34:02:b3:e5:84:31:a2:20:f1:11:1e:8a:
ce:2d:57:c8:3b:13:25:87:62:62:72:0a:81:39:32:
42:a7:68:b8:a7:54:de:b6:ad:f2:1b:86:a5:6a:57:
4c:f3:70:22:24:a5:eb:89:f4:4f:43:61:37:e3:51:
cd:69:c0:7c:df:f3:d5:cd:89:01:13:4b:55:ff:a7:
f2:7c:fa:45:5b:27:2d:40:2c:cf:92:a4:61:85:06:
7b:7d:b8:93:ad:43:83:0f:62:05:a2:3a:5f:72:1d:
ae:3d:4f:73:40:90:48:fa:59:73:9a:77:d7:7b:a8:
e7:ee:75:cf:b6:f8:71:88:ff:4a:40:c9:11:37:df:
ae:bd:3e:f7:7c:32:47:4f:c9:25:5a:6f:68:8f:b1:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:F2:C5:84:CF:1C:17:65:CE:A6:F7:3A:53:C6:25:10:B2:64:53
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/g5jyxYTPHBdlzqb3OlPGJRCyZFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
46.183.104.0/23
78.137.128.0/18
78.143.128.0/18
80.93.16.0/20
83.147.128.0/18
84.203.0.0/16
89.16.64.0/19
89.184.32.0/22
89.184.40.0-89.184.57.255
89.234.64.0/18
91.142.96.0/20
92.51.192.0/19
92.51.232.0-92.51.255.255
93.92.8.0/21
94.247.48.0/21
109.106.96.0-109.106.119.255
109.106.124.0/22
176.52.216.0-176.52.221.255
185.47.144.0/22
185.53.32.0/24
185.53.35.0/24
185.182.72.0/22
185.205.228.0/22
185.233.176.0/22
185.242.236.0/23
212.126.32.0/19
217.78.0.0/20
IPv6:
2001:1bb8::/32
2a00:15b8::/32
2a01:258::/32
2a01:8aa0::/32
2a02:220::/32
2a0a:e780::/29
2a0b:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:74:f7:93:6b:13:e7:cb:e8:19:6b:95:9f:37:ec:46:24:cb:
81:b0:40:84:60:69:d2:88:ce:11:37:ba:ba:82:41:d3:97:a2:
97:06:37:44:a1:2d:ec:9b:75:61:31:b3:ec:f1:4f:fe:a1:7b:
46:25:18:44:26:f4:02:ca:50:32:36:6e:0f:82:ab:04:3d:57:
4f:6e:45:4e:4e:72:ee:f4:d7:39:77:60:e6:47:9f:53:e1:67:
8d:b6:9a:41:23:05:b8:e1:35:b2:42:ac:04:a5:98:d1:54:87:
7a:1b:4f:a4:34:39:b5:2b:31:e2:a6:3c:eb:97:90:97:5c:27:
66:08:78:1f:03:78:93:32:e2:ba:d2:19:0e:ae:3d:5e:d7:82:
cd:fa:0a:be:b0:23:43:28:4b:de:4d:68:9b:0d:97:eb:e8:b1:
52:f6:6e:70:f4:f4:3a:9a:88:d9:df:b9:e6:5f:7c:39:10:75:
22:30:2e:a5:71:9c:bd:96:5d:ee:92:55:25:57:cc:66:2b:d1:
08:c4:bb:51:37:cc:83:2e:e2:18:0b:89:1d:1b:33:e9:af:b5:
42:19:5e:ec:8c:34:a5:ec:71:ce:5a:bf:fd:a9:c0:33:f2:af:
00:df:2a:e6:8e:ee:52:ab:72:f9:f5:de:64:8d:dc:f9:39:a6:
8d:5c:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:35 2024 by rpki-client on console-fra.rpki-client.org