Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Gf0TQgUkVBsblclejtGfTqPYI8w.roa
File: Gf0TQgUkVBsblclejtGfTqPYI8w.roa (raw, json)
Hash identifier: IHaY5ljv2HliZt4uP2Py0ZdfeFcnAmZ7CMudSZALQoE=
Subject key identifier: 19:FD:13:42:05:24:54:1B:1B:95:C9:5E:8E:D1:9F:4E:A3:D8:23:CC
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018EA77102506182F47061867F1C05195632
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Gf0TQgUkVBsblclejtGfTqPYI8w.roa
Signing time: Thu 04 Apr 2024 04:49:44 +0000
ROA not before: Thu 04 Apr 2024 04:49:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64200
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
31.132.53.0/24 maxlen: 24
45.67.147.0/24 maxlen: 24
63.246.129.0/24 maxlen: 24
63.246.136.0/24 maxlen: 24
63.246.139.0/24 maxlen: 24
63.246.142.0/24 maxlen: 24
63.246.145.0/24 maxlen: 24
63.246.146.0/23 maxlen: 23
63.246.148.0/24 maxlen: 24
63.246.149.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.158.0/23 maxlen: 23
63.246.159.0/24 maxlen: 24
185.171.124.0/24 maxlen: 24
185.171.125.0/24 maxlen: 24
185.171.127.0/24 maxlen: 24
185.198.88.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
185.205.206.0/24 maxlen: 24
192.145.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 18:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:71:02:50:61:82:f4:70:61:86:7f:1c:05:19:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Apr 4 04:49:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19fd13420524541b1b95c95e8ed19f4ea3d823cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:e7:13:3b:5c:9e:05:14:12:d1:28:64:63:
7d:f9:99:9c:db:9c:8a:02:5a:d3:88:c5:18:36:46:
c1:7e:8a:e9:ff:ad:5f:de:1b:a4:c4:2b:ea:d7:2e:
5e:01:7b:70:64:71:06:3e:c5:96:da:35:f6:35:7f:
14:cb:77:e9:ab:19:53:2c:ef:3c:63:71:dc:83:6b:
ed:24:08:b6:36:22:d6:b4:4e:c4:21:b9:c3:ac:a6:
13:e0:33:67:ef:ad:04:e0:8a:0d:6a:a0:7a:6d:24:
a9:3c:d3:16:fe:ea:80:3b:2d:79:84:0d:88:77:38:
d6:79:54:9c:d5:93:49:ac:eb:16:e0:99:c9:3f:d0:
e9:d4:c2:b8:8a:86:56:29:42:82:ae:c1:2b:00:76:
75:b5:3d:d2:3b:0b:5c:22:02:76:01:4c:2d:35:4e:
78:2f:f4:2a:af:b5:28:b5:0e:19:a6:78:24:44:0d:
51:75:ad:b6:b8:4f:a1:df:ac:68:e9:69:0c:0e:d4:
0a:c9:30:13:ee:7e:34:64:f8:75:02:cf:47:5a:4a:
e2:8e:65:b6:15:33:30:cd:a3:80:33:90:b1:e8:c6:
4c:07:52:33:22:3a:78:c4:e4:bc:16:79:b7:8b:fb:
05:85:58:e4:ce:61:aa:45:3b:7b:0b:44:e6:c1:03:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FD:13:42:05:24:54:1B:1B:95:C9:5E:8E:D1:9F:4E:A3:D8:23:CC
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Gf0TQgUkVBsblclejtGfTqPYI8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/24
5.182.193.0-5.182.195.255
31.132.53.0/24
45.67.147.0/24
63.246.129.0/24
63.246.136.0/24
63.246.139.0/24
63.246.142.0/24
63.246.145.0-63.246.149.255
63.246.152.0/24
63.246.158.0/23
185.171.124.0/23
185.171.127.0/24
185.198.88.0/24
185.201.41.0/24
185.201.43.0/24
185.205.206.0/24
192.145.68.0/24
Signature Algorithm: sha256WithRSAEncryption
83:79:70:05:09:ea:7b:cf:22:73:66:45:ca:bd:29:3b:21:02:
81:77:71:c9:65:c7:44:7a:84:73:ac:52:1c:43:6a:0d:ce:d8:
b4:fe:80:f4:55:63:dd:77:a0:37:04:a1:42:59:e7:e3:a2:3a:
98:eb:32:ff:12:bc:7c:fc:83:52:cc:d2:46:d2:92:18:c7:de:
12:b4:c2:25:c6:67:30:0a:c1:3d:cd:c4:73:ee:0e:17:73:8d:
0d:58:1d:4a:07:1c:91:95:f3:78:22:a0:fb:f1:93:54:2f:21:
6b:49:d1:e8:10:f2:f9:15:e4:05:73:60:12:94:07:9e:9c:10:
7b:74:80:2a:11:01:69:15:af:49:4d:6d:5d:3e:bd:5c:6c:d3:
6c:d5:a2:07:51:40:de:6a:a6:11:ee:b9:79:63:cc:cc:d5:6d:
bc:1d:b7:ab:1c:64:3d:9d:9e:79:02:4d:a8:8a:6f:c1:0b:14:
fe:5b:0c:9c:23:ad:ae:d3:5e:c6:b4:3d:28:e3:ed:97:40:71:
49:73:3a:18:9f:89:ad:71:4b:d1:2e:ee:b9:4e:04:aa:39:15:
a8:2d:dc:18:9b:9c:3a:26:47:13:55:2e:55:6e:f8:85:c0:8f:
ab:6e:16:9d:80:96:bf:60:d0:b0:05:14:d9:0c:1f:f6:96:40:
92:ea:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:31:57 2024 by rpki-client on console-fra.rpki-client.org