Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/zfqufzaluqQ23DDCYLNqEFKerDw.roa
File: zfqufzaluqQ23DDCYLNqEFKerDw.roa (raw, json)
Hash identifier: Hm8+O6FKyrZ1tL5OHbjcYq3EoIzmXS6niU2LZzE8YIw=
Subject key identifier: CD:FA:AE:7F:36:A5:BA:A4:36:DC:30:C2:60:B3:6A:10:52:9E:AC:3C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0192F7752412625B85785B5C1E7B1D3DE249
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/zfqufzaluqQ23DDCYLNqEFKerDw.roa
Signing time: Mon 04 Nov 2024 13:55:02 +0000
ROA not before: Mon 04 Nov 2024 13:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Nov 2024 06:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:75:24:12:62:5b:85:78:5b:5c:1e:7b:1d:3d:e2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 4 13:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdfaae7f36a5baa436dc30c260b36a10529eac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:27:b8:1a:f4:95:86:52:66:9b:48:df:79:
a1:99:f5:c4:55:e1:35:d3:4f:c2:6e:e3:e0:46:62:
b0:61:89:c9:3c:5f:0f:09:83:a8:d1:4b:86:79:f6:
fa:37:b3:2f:c9:ed:e9:53:ce:ce:fe:89:d8:e7:00:
16:d7:bb:18:95:1f:d4:69:cc:ac:82:66:fc:52:dc:
5e:94:f9:fc:49:a5:c6:be:1e:76:35:8d:21:46:7d:
f9:fc:ad:5c:1b:68:f9:a7:34:db:0c:df:d8:3d:c7:
ae:c1:c2:ba:07:ee:17:68:f4:7f:4c:71:72:0c:dd:
27:3c:f7:73:5d:d3:a1:28:48:96:d4:c5:0d:e9:f4:
16:e7:79:3a:06:db:bc:b8:52:83:9e:c1:4f:1e:a8:
d7:0e:1b:49:a5:87:93:13:5d:5f:0e:64:32:39:c5:
c1:af:a2:2b:70:e6:dd:89:6b:0c:6b:76:81:82:1f:
22:d1:3e:60:39:bd:8c:70:a3:bc:08:3f:63:43:eb:
f3:9b:89:6a:05:3f:6b:09:cf:e6:37:a7:70:99:35:
1a:7c:c1:5d:33:b4:f7:5d:f9:53:f9:ea:02:5e:ff:
be:3d:20:b3:0c:59:be:0b:38:a9:bb:9c:2a:34:fc:
3d:48:53:36:50:08:a2:7e:75:6f:dd:ae:c8:d2:0b:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FA:AE:7F:36:A5:BA:A4:36:DC:30:C2:60:B3:6A:10:52:9E:AC:3C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/zfqufzaluqQ23DDCYLNqEFKerDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
70:69:2b:8e:61:9d:05:f9:64:48:2f:6d:5d:1c:02:f0:ab:ab:
40:89:85:97:f5:bf:83:fa:3c:ae:ed:cb:2e:39:18:df:21:1f:
4e:d0:34:ad:cc:57:9c:8d:5c:23:f7:6b:bd:05:96:4a:dd:e3:
88:05:88:0c:2c:3d:1c:03:18:05:10:b1:df:0d:7a:f2:48:48:
68:80:a3:49:f5:52:8f:91:37:57:b3:38:4d:60:45:9b:f2:ec:
b4:4d:25:ec:4e:5d:bc:48:a4:3e:bf:86:40:11:e7:e6:7b:ec:
e1:7d:6a:72:bd:58:4c:62:08:83:ed:2d:07:2d:4c:01:1e:09:
60:fd:2b:88:89:b4:2e:bd:d1:ec:4b:46:06:99:05:88:56:54:
39:6d:b5:3e:73:46:72:18:f5:d3:4c:42:b0:75:4f:41:ff:09:
64:58:d1:fa:c3:6e:e4:a6:d3:29:48:c7:c4:d4:72:5d:8a:f4:
fe:0b:d7:dc:e3:ec:2d:ad:ac:cb:b3:40:e9:ae:d9:0b:f5:0b:
25:da:74:a7:a3:e0:cc:40:77:90:d2:43:95:2d:f6:c2:01:37:
ac:96:87:9c:87:19:1b:ff:99:73:d2:77:f1:d4:a1:c5:2f:1a:
da:41:74:b6:01:74:24:dd:8b:a3:94:61:3c:e6:1e:83:15:88:
d6:c5:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:08 2025 by rpki-client