Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KtUFfQCxZ7p8V--K8dkt4-NCWNc.roa
File: KtUFfQCxZ7p8V--K8dkt4-NCWNc.roa (raw, json)
Hash identifier: ZCCCFJL2yrezPDaU8gNFH+1RuNw4sKG2yJGo7rjfbkQ=
Subject key identifier: 2A:D5:05:7D:00:B1:67:BA:7C:57:EF:8A:F1:D9:2D:E3:E3:42:58:D7
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FE98AA1A7D236AC1652F353F25D273753
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KtUFfQCxZ7p8V--K8dkt4-NCWNc.roa
Signing time: Wed 05 Jun 2024 17:55:27 +0000
ROA not before: Wed 05 Jun 2024 17:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 07 Jun 2024 21:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:8a:a1:a7:d2:36:ac:16:52:f3:53:f2:5d:27:37:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 5 17:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad5057d00b167ba7c57ef8af1d92de3e34258d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:70:e5:36:de:0c:55:46:e7:2a:c8:53:81:
ed:17:38:90:74:83:24:4b:cf:ca:f6:ee:7d:1e:dc:
ef:34:d5:54:36:5c:d1:07:7d:2b:73:a7:75:7e:2f:
1e:d6:b4:0d:fd:ef:b8:4f:70:fa:34:f5:d1:9f:b1:
c7:93:8e:ed:a7:c6:b4:cc:f0:c3:c6:af:0d:16:fe:
28:9a:c0:14:97:5a:60:9a:26:36:6e:1c:ee:83:35:
26:db:4d:59:74:b9:2c:cd:0b:36:53:45:55:9e:4f:
4f:f0:76:02:ab:52:59:f1:89:f1:fe:a3:41:ac:e7:
0f:78:bc:16:ef:84:88:9a:27:58:0d:44:c5:45:ca:
12:2a:64:e6:95:5e:21:fb:c3:a2:d8:d0:ef:61:78:
9f:ef:8d:d9:bf:a5:26:58:40:f2:18:d6:a6:2b:3e:
65:91:db:5a:1f:45:bf:5e:9d:aa:7d:94:69:b7:44:
b7:8f:3b:01:e5:2a:74:76:3c:18:7c:41:2d:50:5f:
aa:42:9e:aa:76:a9:2d:8f:bc:21:37:61:09:af:d8:
5b:f6:5d:1b:73:b2:b8:10:95:a3:77:23:dd:b5:1c:
6d:16:4a:bd:94:86:9d:ca:95:75:01:e5:a9:7b:65:
47:15:99:c4:f0:29:dc:ba:a7:39:02:41:b8:df:22:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:05:7D:00:B1:67:BA:7C:57:EF:8A:F1:D9:2D:E3:E3:42:58:D7
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KtUFfQCxZ7p8V--K8dkt4-NCWNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
Signature Algorithm: sha256WithRSAEncryption
49:76:b4:63:aa:3b:7b:c8:f9:3c:bc:72:cf:40:da:08:86:9b:
f0:23:09:ee:be:42:46:8c:43:07:64:af:fe:85:af:ef:15:e9:
d4:c5:5d:2b:00:6e:23:94:f2:ca:e2:11:b3:2a:fd:1a:27:35:
78:ee:59:d3:66:da:b6:26:79:fd:e7:8a:df:c1:6b:cf:aa:62:
3e:f7:c7:b8:d2:be:0f:b9:01:c4:b5:92:71:4d:d0:64:45:a2:
82:e0:a5:f8:ee:7e:be:39:6a:50:1b:ac:5e:ba:75:ff:91:25:
38:e0:dd:64:e4:c3:5f:68:fd:a9:8d:99:81:33:c8:60:8b:f6:
2e:63:df:29:2a:0e:32:84:8a:ad:86:9d:2b:15:35:56:71:b2:
6e:0b:bc:ea:92:fb:46:ee:86:30:3d:c2:2a:28:b1:64:d2:bb:
24:44:a5:34:26:7d:0c:cd:66:18:8e:6d:42:84:29:70:72:70:
9e:a0:45:db:bd:c5:6b:96:9f:f3:64:26:50:e9:c0:7a:d0:b0:
35:0a:45:54:8e:00:d0:99:7a:32:07:e2:d1:ec:d7:37:87:59:
32:7f:51:fe:ee:89:02:b6:eb:63:20:7a:b2:b2:74:66:36:df:
23:ae:43:40:69:ef:e1:3d:2c:78:dc:25:a4:c6:19:30:96:18:
ef:7b:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:01 2025 by rpki-client