Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/SW70AJhyYZ4HMRZiS-38SWxvJZ4.roa
File: SW70AJhyYZ4HMRZiS-38SWxvJZ4.roa (raw, json)
Hash identifier: TAmZpVvP947eVegWESOC6KMhgwKNu4kbDc83BTlUWv8=
Subject key identifier: 49:6E:F4:00:98:72:61:9E:07:31:16:62:4B:ED:FC:49:6C:6F:25:9E
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 018A8356192996AF78866FFAF90D6AF017CE
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/SW70AJhyYZ4HMRZiS-38SWxvJZ4.roa
Signing time: Mon 11 Sep 2023 08:22:52 +0000
ROA not before: Mon 11 Sep 2023 08:22:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42705
IP address blocks: 80.251.10.0/24 maxlen: 24
80.251.11.0/24 maxlen: 24
5.11.16.0/24 maxlen: 24
5.11.17.0/24 maxlen: 24
5.11.16.0/22 maxlen: 22
5.11.18.0/24 maxlen: 24
5.11.24.0/23 maxlen: 23
5.11.24.0/21 maxlen: 21
5.11.21.0/24 maxlen: 24
5.11.22.0/24 maxlen: 24
5.11.24.0/24 maxlen: 24
5.11.26.0/23 maxlen: 23
5.11.25.0/24 maxlen: 24
5.11.26.0/24 maxlen: 24
5.11.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 11:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:56:19:29:96:af:78:86:6f:fa:f9:0d:6a:f0:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Sep 11 08:22:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=496ef4009872619e073116624bedfc496c6f259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:d6:17:4d:05:b0:aa:92:7c:a4:bd:07:e3:
e9:e4:27:68:a0:d9:54:98:47:e7:72:8e:c6:80:e7:
ff:b9:90:fb:6b:19:fb:2c:2e:6b:62:8c:11:29:51:
d3:5a:46:89:38:36:44:fd:99:b9:86:19:e5:da:4b:
bb:82:a9:8d:8d:14:d2:73:bf:36:2f:ad:3e:49:55:
c5:88:6e:78:d7:4f:7f:5a:fa:f9:0e:c3:8d:a0:91:
37:c7:44:ae:d6:e3:ca:c0:aa:2d:fa:1b:f7:0a:3c:
e0:15:4e:33:91:76:e3:81:15:8d:b4:40:4f:76:b5:
cb:67:02:f4:f4:a1:fb:d4:3c:83:7b:9d:68:5f:0c:
a9:ad:16:fa:5f:9e:94:34:9c:1f:16:91:4e:c4:70:
a2:bb:19:45:02:23:02:ff:01:2f:69:f3:b5:c5:dd:
19:af:8b:d7:57:fe:ca:2f:54:9a:47:55:a9:58:36:
37:c9:4a:cc:5b:bf:18:61:96:63:ef:a6:c8:04:bf:
09:28:7d:f1:8c:01:81:8e:ae:9a:31:d9:30:80:6b:
82:7c:8c:35:c4:6e:a3:e3:1d:fe:50:88:5b:be:b2:
8f:3b:b2:d8:ff:ca:fb:23:32:b3:9b:70:a3:a1:d4:
0b:d1:34:5e:c7:6a:9b:74:45:93:b2:da:36:78:8b:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:F4:00:98:72:61:9E:07:31:16:62:4B:ED:FC:49:6C:6F:25:9E
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/SW70AJhyYZ4HMRZiS-38SWxvJZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.16.0/22
5.11.21.0-5.11.22.255
5.11.24.0/21
80.251.10.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:64:50:41:5c:fb:87:fb:c4:45:45:c1:c9:b2:f9:58:a0:49:
dc:5f:a1:b4:b2:dc:34:df:31:6c:bf:9c:1c:09:74:e4:94:ee:
8b:d3:36:3b:d8:17:5d:69:8d:2e:ae:c6:23:58:5d:8a:bf:b4:
e5:dc:23:22:03:53:87:42:4b:70:d5:0f:f6:86:02:b3:f1:60:
c6:33:c3:cf:b8:6d:fa:73:d5:67:2e:b6:23:5b:13:2d:e4:f1:
c2:19:47:52:d8:67:3f:2d:a8:ec:bc:34:30:7f:1e:17:88:b5:
92:d9:da:3b:ba:16:ec:62:8b:c1:4b:23:2f:5f:1b:03:5b:49:
17:0f:fd:68:57:2a:3b:7f:89:0c:94:be:4a:7a:a2:6f:87:94:
76:ca:a3:45:5a:59:b2:ba:a5:fa:79:0a:8b:ab:d7:e8:42:0b:
eb:15:b9:1d:58:56:5e:95:f8:3b:74:12:c4:25:69:39:72:1a:
6c:ae:ba:2d:dc:af:0f:ca:8e:15:d3:0a:c1:92:ee:16:88:9c:
94:61:a2:82:6f:29:d3:ed:09:09:f6:42:78:bd:11:ab:c4:81:
2d:e8:77:c0:13:f0:f2:2e:7b:b7:2a:0e:73:0c:33:43:0d:1e:
57:68:ad:c2:70:60:d8:b3:d8:66:d9:a7:16:31:ac:bd:c8:c0:
9c:e9:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org