Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/5mUo-dxetOy6d1z2YI-ny0tmfSc.roa
File: 5mUo-dxetOy6d1z2YI-ny0tmfSc.roa (raw, json)
Hash identifier: ruG6d2K0FYQLml3CJAMHIQf/wGA3DhkEtW8oRg17pUc=
Subject key identifier: E6:65:28:F9:DC:5E:B4:EC:BA:77:5C:F6:60:8F:A7:CB:4B:66:7D:27
Certificate issuer: /CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Certificate serial: 018CC870B1E05B2CE460DF6FEC692D9C326F
Authority key identifier: 76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/5mUo-dxetOy6d1z2YI-ny0tmfSc.roa
Signing time: Tue 02 Jan 2024 04:31:17 +0000
ROA not before: Tue 02 Jan 2024 04:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 188.211.169.0/24 maxlen: 24
77.81.143.0/24 maxlen: 24
176.223.119.0/24 maxlen: 24
194.76.247.0/24 maxlen: 24
195.200.94.0/23 maxlen: 24
31.14.183.0/24 maxlen: 24
78.40.111.0/24 maxlen: 24
91.233.180.0/23 maxlen: 24
89.47.183.0/24 maxlen: 24
86.106.76.0/24 maxlen: 24
86.106.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 10:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b1:e0:5b:2c:e4:60:df:6f:ec:69:2d:9c:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7645692d4bd30cf9e989d55bac8d08e7714493ab
Validity
Not Before: Jan 2 04:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e66528f9dc5eb4ecba775cf6608fa7cb4b667d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:c9:46:1e:9e:51:b4:f0:68:48:1a:1b:9c:
76:8f:78:05:c8:cb:e1:ba:5c:89:2e:5c:cf:e4:ea:
60:ba:f9:c5:22:ed:c2:82:b3:08:01:8d:54:96:84:
51:95:63:6a:8f:c8:96:41:02:86:88:e2:b4:19:a5:
9c:3d:6c:9e:47:1f:1d:d5:57:7c:6f:21:9a:9e:20:
d8:21:85:67:eb:5f:4d:3d:a2:b9:83:76:16:33:74:
e6:35:32:d3:68:68:6e:18:c4:36:00:37:39:44:d6:
0e:9b:da:92:d9:28:01:3b:58:6b:76:4f:29:7d:0d:
a8:31:f0:ce:99:81:29:95:c9:9c:55:56:5c:d7:42:
6a:ce:c5:f5:b8:e2:73:2c:b4:87:51:e4:d1:eb:42:
81:3f:55:b4:44:58:b0:12:45:1e:a3:12:3f:60:35:
b4:36:3d:a4:34:10:5b:90:bd:c7:6d:71:8a:26:c5:
b6:90:3d:34:ae:c4:8e:72:ec:a0:c8:e3:71:b4:4c:
c2:c0:4f:ef:b8:c7:97:c8:76:2d:21:17:b8:29:66:
b3:c8:cd:02:f8:76:0e:61:b2:65:a4:0a:6f:99:34:
ae:e2:10:0f:e2:6c:a6:cd:9e:98:fd:30:d9:1d:1e:
e0:7f:6b:5e:c2:99:34:10:63:8c:cc:4e:a8:12:35:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:28:F9:DC:5E:B4:EC:BA:77:5C:F6:60:8F:A7:CB:4B:66:7D:27
X509v3 Authority Key Identifier:
keyid:76:45:69:2D:4B:D3:0C:F9:E9:89:D5:5B:AC:8D:08:E7:71:44:93:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkVpLUvTDPnpidVbrI0I53FEk6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/5mUo-dxetOy6d1z2YI-ny0tmfSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d07f01-77c0-4a40-9563-d6bb580af785/1/dkVpLUvTDPnpidVbrI0I53FEk6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
77.81.143.0/24
78.40.111.0/24
86.106.75.0-86.106.76.255
89.47.183.0/24
91.233.180.0/23
176.223.119.0/24
188.211.169.0/24
194.76.247.0/24
195.200.94.0/23
Signature Algorithm: sha256WithRSAEncryption
33:2c:94:4b:b6:d8:be:82:3f:04:22:6d:62:c5:17:04:4f:fe:
be:c1:55:19:0f:dc:16:d0:34:5b:b8:90:7b:b8:2e:07:5f:3b:
b5:4f:d7:2b:00:bb:0f:81:b4:a8:5c:9d:c3:24:b1:09:61:b5:
cb:90:f6:41:64:82:ce:a8:70:55:78:e7:37:33:71:7c:de:ee:
27:e2:78:99:1e:f6:78:a1:f6:38:53:ba:43:31:63:16:88:95:
ed:d5:7e:22:1d:b6:22:42:72:a7:e7:31:4c:b5:07:d2:e1:91:
ea:10:3f:06:16:ab:a6:2b:49:59:5d:1f:df:03:66:a7:ce:55:
32:b1:35:18:46:76:c4:68:3a:a0:c3:3e:5a:2f:be:83:51:9a:
db:91:bb:99:d8:9f:9e:64:cf:90:73:ec:fc:ec:04:27:20:55:
ab:e6:3b:dc:75:c8:cf:11:11:51:eb:44:d1:41:9a:f2:59:a8:
52:99:0e:b4:5b:60:b3:6f:5f:9c:37:a2:f2:61:dc:50:88:1a:
2f:d7:03:84:3e:23:f6:35:8a:e1:1c:07:88:ce:23:1d:c0:20:
60:b1:2a:a4:a6:16:41:1b:49:65:8b:c2:9f:ed:44:2d:72:41:
4d:25:8c:2e:e9:12:4e:43:06:31:eb:58:80:f3:b1:20:63:d7:
a9:c5:f0:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:39 2024 by rpki-client on console-ams.rpki-client.org