Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fovhEDeiNEIARMzn9JWh9B4AUPk.roa
File: fovhEDeiNEIARMzn9JWh9B4AUPk.roa (raw, json)
Hash identifier: UHKaP3jHgqvyY5hilfsCRM/wJJSoyuY/BpObAcL35N4=
Subject key identifier: 7E:8B:E1:10:37:A2:34:42:00:44:CC:E7:F4:95:A1:F4:1E:00:50:F9
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01905EF8BF48EC0B090355B0FBA06F94D8C7
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fovhEDeiNEIARMzn9JWh9B4AUPk.roa
Signing time: Fri 28 Jun 2024 13:11:18 +0000
ROA not before: Fri 28 Jun 2024 13:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.187.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
5.182.198.0/24 maxlen: 24
31.132.54.0/23 maxlen: 23
63.246.129.0/24 maxlen: 24
63.246.130.0/24 maxlen: 24
63.246.131.0/24 maxlen: 24
63.246.132.0/24 maxlen: 24
63.246.133.0/24 maxlen: 24
63.246.137.0/24 maxlen: 24
63.246.144.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
63.246.151.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.158.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.204.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
94.154.170.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 23:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:f8:bf:48:ec:0b:09:03:55:b0:fb:a0:6f:94:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 28 13:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8be11037a234420044cce7f495a1f41e0050f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:b2:ec:fc:f9:0e:4a:bb:bd:b8:06:85:a5:
5b:93:ab:57:24:eb:00:02:7f:46:20:3b:63:6e:ed:
c6:b8:a7:1c:24:67:e3:14:76:0f:0b:c0:3c:c3:39:
ad:40:1c:64:76:7e:18:fe:fe:98:f8:2e:61:8d:78:
a9:75:36:dc:25:a5:75:9e:5d:08:54:a7:61:77:f5:
5a:b6:b1:8d:d1:7e:d8:cd:fd:af:85:29:e2:07:a6:
56:33:9b:55:97:24:00:31:84:b0:4e:d5:5c:93:7a:
c8:91:e1:dd:6e:1d:fe:17:a5:c5:bf:9e:03:2d:9c:
11:4a:c7:1e:84:ab:62:29:3d:9c:99:32:da:8e:54:
89:d3:36:f1:14:4c:82:9a:33:78:e9:5f:87:29:8a:
be:72:54:57:c2:f0:c2:df:f4:92:cd:67:02:58:00:
85:86:c5:76:68:93:12:ac:f0:70:1b:61:36:cc:91:
08:8e:d5:97:5c:a8:64:e1:4b:ca:da:21:b6:d1:94:
73:81:6c:d3:40:3c:e9:d7:f4:13:d6:50:1e:0c:7a:
01:9d:d8:57:16:56:0f:65:c2:19:80:5c:31:dd:d7:
79:3f:e1:d9:31:d0:44:c6:6b:6c:88:c3:d4:e8:1f:
46:6e:33:cc:49:07:4c:af:1f:8f:b0:a6:d7:e5:bf:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:E1:10:37:A2:34:42:00:44:CC:E7:F4:95:A1:F4:1E:00:50:F9
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fovhEDeiNEIARMzn9JWh9B4AUPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/23
5.182.193.0-5.182.195.255
5.182.198.0/24
31.132.54.0/23
63.246.129.0-63.246.133.255
63.246.137.0/24
63.246.144.0/24
63.246.148.0/24
63.246.150.0-63.246.152.255
63.246.158.0/23
78.31.204.0/24
78.31.206.0/24
94.154.170.0/24
149.126.13.0/24
162.218.89.0/24
185.201.41.0/24
185.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:30:e5:12:e4:94:7c:ce:8e:37:7c:6d:0d:2b:10:b2:f7:9e:
90:c8:c9:b9:1a:8b:dd:2c:10:b8:b4:a0:10:b8:d7:23:17:36:
f8:10:b0:1b:57:a1:8e:fe:ab:6b:cd:01:fc:6a:67:28:f8:d5:
c6:6c:65:f9:9e:b5:2b:7b:37:3f:eb:9b:ff:c8:0c:a0:a9:bc:
61:e2:34:4c:dc:c9:6c:ca:6e:19:a6:6b:01:6d:f4:a8:23:39:
ca:d5:ca:22:4d:67:a7:22:e8:ea:10:3d:60:53:23:3a:26:00:
cb:cd:8d:23:a7:18:fa:fc:da:8e:90:9a:b8:98:2f:ac:a6:18:
2d:4f:51:fb:8f:a9:2e:28:1a:7e:29:5f:cb:45:bb:38:1a:09:
c2:c3:1a:b3:2e:6b:b4:a3:ea:6b:1f:29:4f:c8:e6:9c:d1:4f:
51:7d:fd:e3:67:13:28:79:18:27:b0:4a:85:28:8f:6d:f0:9d:
60:c5:d6:c3:2b:41:2d:a3:cb:6d:aa:15:18:ea:ec:46:42:3d:
fb:ae:5d:4b:17:d6:9a:57:dd:3b:3a:19:de:d2:ea:2a:c2:a1:
2f:0f:6a:af:e8:8e:5a:b4:d9:d2:38:f9:23:21:41:82:d7:4d:
84:35:4a:c3:38:96:64:94:eb:52:fb:03:ab:a5:a9:2e:fa:6b:
bc:fa:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:12:40 2024 by rpki-client on console-fra.rpki-client.org