Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/AyobUxPmMBfNZxAGD1p_j00KdOY.roa
File: AyobUxPmMBfNZxAGD1p_j00KdOY.roa (raw, json)
Hash identifier: Hh6hhMWuWVqGyuukWKwqHw4Z0iRC7snNNme2P3rurqw=
Subject key identifier: 03:2A:1B:53:13:E6:30:17:CD:67:10:06:0F:5A:7F:8F:4D:0A:74:E6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FCD6B281C2736E7A2AA1FBA8C4B8BF559
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/AyobUxPmMBfNZxAGD1p_j00KdOY.roa
Signing time: Fri 31 May 2024 06:51:42 +0000
ROA not before: Fri 31 May 2024 06:51:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 14:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:6b:28:1c:27:36:e7:a2:aa:1f:ba:8c:4b:8b:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 31 06:51:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=032a1b5313e63017cd6710060f5a7f8f4d0a74e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:14:b8:1d:b1:b7:99:a6:1f:95:d5:dd:7c:
9a:e5:27:8c:47:02:60:b8:4a:e8:78:e2:7b:5d:e8:
d5:f6:f2:b7:9d:b0:43:00:ca:85:f6:12:59:be:75:
c8:71:fe:0b:20:ed:cc:0d:78:84:29:53:3f:64:86:
d5:5b:09:62:23:f8:fe:dd:50:e1:54:a8:6f:26:ce:
18:58:0d:34:d0:2c:80:85:ef:21:4e:33:06:e7:ef:
57:f0:a0:d5:d6:dd:1c:17:ad:61:18:9e:62:34:bd:
e3:70:e9:80:89:43:5d:69:fe:86:68:36:ac:4e:89:
34:ec:80:22:d1:39:b4:42:01:c3:3b:63:1b:fc:e3:
ff:0c:e6:fd:b5:2a:c1:33:2e:e4:00:c4:f9:26:c0:
26:de:83:c9:e6:8e:ac:7c:68:46:37:17:d3:ac:bb:
90:6b:cd:16:c1:c9:a7:8b:4c:53:a6:4f:fb:ff:c5:
5d:1d:f6:ff:61:70:ec:03:fa:69:03:08:2e:8b:90:
7c:42:2a:6d:bb:79:22:e6:1d:7d:dd:2f:a7:fa:92:
3d:84:a5:4e:af:32:88:f3:8c:13:1f:23:84:6a:d3:
75:63:1e:a9:06:f2:d5:c5:ce:ca:2f:ea:3b:1a:7d:
90:74:c4:c6:50:e6:52:1d:1e:3a:d1:81:31:f4:2b:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2A:1B:53:13:E6:30:17:CD:67:10:06:0F:5A:7F:8F:4D:0A:74:E6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/AyobUxPmMBfNZxAGD1p_j00KdOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a0f:b700::/29
2a0f:e900::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a445::/32
Signature Algorithm: sha256WithRSAEncryption
2f:ff:78:b3:6b:f2:75:3c:f1:50:96:b8:96:58:98:f4:4a:e6:
9d:0a:86:26:ed:f1:82:87:ea:93:a4:c6:03:77:fe:f8:29:83:
85:c7:75:19:23:54:70:f9:ed:8d:5b:a6:8d:56:2b:dc:b1:ed:
37:fd:01:00:f5:25:7d:2e:6e:df:78:37:2c:45:b5:cc:7e:b6:
17:97:e4:15:c9:2e:47:cc:b1:33:37:33:38:da:86:8f:95:e5:
32:d9:8c:cf:46:59:6e:1a:c4:86:c9:ed:ee:3e:ab:6b:6d:ab:
fa:4c:2a:19:72:4a:ad:c5:2e:32:98:e4:32:e4:e8:8f:12:20:
32:1a:1d:cf:78:15:18:68:48:06:37:02:a9:b1:5c:71:5c:41:
50:61:73:4a:0c:25:c0:e8:dd:6d:d7:6c:c6:5b:39:3c:c7:d8:
d2:42:e1:53:f0:b6:cd:33:f5:9f:62:38:48:0a:66:3f:a8:8f:
86:27:43:55:6f:d8:9e:fb:66:22:99:56:6e:2c:dd:b5:70:2c:
27:83:a9:1b:36:50:51:73:f8:a9:d8:5c:8b:fa:f2:8a:bb:c1:
37:29:df:c6:a4:e9:7f:5d:21:59:a6:7c:a3:4c:63:35:a4:73:
67:a7:73:26:4c:be:81:bd:46:f2:b3:37:8d:15:90:c6:ea:94:
8b:72:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:48 2025 by rpki-client