Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Kdbtaczz2UMieWu6A0jOwq1PoNI.roa
File: Kdbtaczz2UMieWu6A0jOwq1PoNI.roa (raw, json)
Hash identifier: ePiOPiblJm7fRyzb7GYvtDty9Hj72QUKIO8yxjnrn4M=
Subject key identifier: 29:D6:ED:69:CC:F3:D9:43:22:79:6B:BA:03:48:CE:C2:AD:4F:A0:D2
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01905ADEA3C208E41861581469027B149E45
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Kdbtaczz2UMieWu6A0jOwq1PoNI.roa
Signing time: Thu 27 Jun 2024 18:04:18 +0000
ROA not before: Thu 27 Jun 2024 18:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.187.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
5.182.198.0/24 maxlen: 24
31.132.54.0/23 maxlen: 23
63.246.129.0/24 maxlen: 24
63.246.130.0/24 maxlen: 24
63.246.131.0/24 maxlen: 24
63.246.132.0/24 maxlen: 24
63.246.133.0/24 maxlen: 24
63.246.137.0/24 maxlen: 24
63.246.144.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
63.246.151.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.158.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.204.0/24 maxlen: 24
94.154.170.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 13:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5a:de:a3:c2:08:e4:18:61:58:14:69:02:7b:14:9e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 27 18:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29d6ed69ccf3d94322796bba0348cec2ad4fa0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:be:c2:72:7e:72:c3:66:74:35:a3:62:82:
7f:70:ea:cf:5c:c7:29:e2:aa:6d:e0:07:33:aa:d7:
4a:fe:6e:7f:a6:82:f7:bb:b9:d1:2a:6a:50:16:f2:
87:25:57:17:86:62:35:df:e8:17:68:a6:67:01:82:
11:21:b0:97:c6:cc:cf:3d:15:e3:3a:60:48:d0:a3:
b2:11:d1:74:83:bd:d9:0b:6b:9f:1c:48:a9:fa:c7:
6a:16:47:81:aa:25:42:cb:55:a0:73:97:60:a5:58:
d9:84:71:83:b6:b2:fe:1c:ae:fc:b1:51:f9:21:7c:
83:92:6f:ee:a2:ae:ee:46:0b:24:8c:a9:fa:3e:48:
42:a4:ed:65:3d:f5:9c:c7:f9:94:f5:f3:d7:ab:22:
de:84:6c:14:fb:2c:1f:3b:00:6f:68:2c:65:a8:b7:
1b:17:50:db:a9:80:8f:33:ed:d2:c6:27:c1:73:62:
ef:44:5c:91:d1:16:9a:f5:6d:a5:f5:0b:67:98:3c:
05:f8:94:2a:13:8a:21:76:43:3a:42:96:96:9e:74:
1d:ed:aa:4c:21:04:61:88:d4:62:c1:75:7e:d9:21:
71:4d:86:23:ac:a9:e4:9a:de:a8:90:d4:68:e5:c3:
24:c8:32:1b:a6:2c:f2:f0:3c:78:39:e6:20:26:30:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:ED:69:CC:F3:D9:43:22:79:6B:BA:03:48:CE:C2:AD:4F:A0:D2
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Kdbtaczz2UMieWu6A0jOwq1PoNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/23
5.182.193.0-5.182.195.255
5.182.198.0/24
31.132.54.0/23
63.246.129.0-63.246.133.255
63.246.137.0/24
63.246.144.0/24
63.246.148.0/24
63.246.150.0-63.246.152.255
63.246.158.0/23
78.31.204.0/24
94.154.170.0/24
185.201.41.0/24
185.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:93:db:34:d6:db:ff:8b:04:c2:f4:b5:46:42:e6:9e:fd:7e:
1e:a8:b3:1e:67:72:0e:0e:7e:83:85:28:d7:c8:6d:08:3c:3c:
d0:26:ab:f8:05:14:97:07:5e:00:88:37:9e:44:48:a4:ea:61:
61:23:b2:aa:03:92:2d:5a:20:44:79:4f:69:da:fe:a4:42:43:
17:84:bc:8b:97:08:50:00:17:1a:b9:98:c7:cb:04:09:48:6b:
8b:b6:92:9e:cf:b5:88:12:75:ef:6f:b6:41:6e:ed:42:3a:68:
8a:c7:2a:16:d4:56:10:e1:9e:fe:3f:96:23:f5:5c:7f:ad:0d:
05:01:4e:ef:da:b7:d0:6b:73:47:11:67:29:98:55:f8:cf:a1:
51:c4:54:53:e3:c6:ff:b9:cc:20:43:3e:3b:6d:4e:21:43:94:
b6:3c:63:44:1f:35:6b:1a:b5:be:0c:03:19:52:55:75:82:a7:
4f:2e:65:1a:5d:85:9d:7f:4b:c5:42:de:56:4a:d7:54:13:ed:
33:9e:60:e9:3e:56:20:d7:05:91:53:2a:4e:28:32:47:0d:a3:
d6:e1:8f:eb:65:97:39:ee:3d:18:e3:dc:f4:e5:95:11:42:ea:
b1:80:40:b7:99:26:34:f8:58:2e:9c:e1:6c:48:b5:28:d3:42:
d3:33:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:45:56 2024 by rpki-client on console-ams.rpki-client.org