Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eY_Twe_qWZxSCKapbrltDu_jduY.roa
File: eY_Twe_qWZxSCKapbrltDu_jduY.roa (raw, json)
Hash identifier: tXt/fMwgN6qxXFxBaiAi0GXa9gdi4RFq9tAK9gKlcRs=
Subject key identifier: 79:8F:D3:C1:EF:EA:59:9C:52:08:A6:A9:6E:B9:6D:0E:EF:E3:76:E6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018E32E225416B2A843E2B9C0A9CCD4E1C7B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eY_Twe_qWZxSCKapbrltDu_jduY.roa
Signing time: Tue 12 Mar 2024 13:37:45 +0000
ROA not before: Tue 12 Mar 2024 13:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 10:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:e2:25:41:6b:2a:84:3e:2b:9c:0a:9c:cd:4e:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 12 13:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798fd3c1efea599c5208a6a96eb96d0eefe376e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:4d:2b:9d:be:17:aa:ba:ac:d8:2b:9e:ae:
94:d3:b1:56:29:ba:c2:65:22:40:f4:5a:d5:66:28:
ad:a8:eb:9a:2a:6b:d3:02:3b:3c:3a:7b:1e:82:38:
12:38:c2:60:02:81:f1:a2:7e:f1:d9:df:e5:08:32:
26:ff:ef:81:ef:03:5e:bd:1e:9f:ee:82:b4:b1:d6:
fb:9d:25:3c:17:91:7b:95:3c:78:c1:e8:31:29:25:
85:d3:97:e5:60:aa:89:f2:ca:fc:4c:43:92:ef:8e:
50:e0:70:c7:c1:ac:a0:ae:63:f7:11:0c:6d:93:38:
58:a9:58:22:69:3c:d5:4c:1e:10:b7:8d:dc:9f:39:
98:81:32:2e:c9:48:37:7c:78:e2:a3:c9:eb:80:d3:
6e:fd:01:f7:f6:b8:a3:84:7e:28:c3:ac:bf:e5:81:
68:a6:45:d2:e1:22:0c:af:fc:f1:5c:11:52:ce:01:
49:be:16:e8:eb:e4:a1:98:57:d7:27:0d:17:fb:94:
07:d8:ff:9c:f8:ef:44:61:ff:f6:b8:ee:de:c6:51:
2c:55:53:2f:ac:fc:26:9d:8c:fa:bd:5d:9a:b3:8f:
12:17:69:b4:ed:36:9e:2c:d9:87:3f:28:34:24:fb:
53:88:ef:a1:b4:c7:6d:26:6a:26:e9:c9:e8:d4:30:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:D3:C1:EF:EA:59:9C:52:08:A6:A9:6E:B9:6D:0E:EF:E3:76:E6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/eY_Twe_qWZxSCKapbrltDu_jduY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.168.0/24
77.242.152.0/24
77.242.154.0/24
83.137.157.0-83.137.158.255
88.209.206.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7e:e9:07:7f:96:2b:13:8d:78:26:96:ca:b1:0e:fe:0d:3c:
4f:c0:79:8a:fb:9b:4e:ea:5f:06:2f:57:8b:ec:ce:05:92:8a:
9b:3c:f9:ca:74:c7:dd:a5:b8:36:9d:be:a7:98:05:29:a3:fb:
4b:b9:b2:99:b3:11:13:09:80:59:77:5b:3c:0e:56:f1:5d:7f:
53:d5:cd:b3:4c:00:b6:be:83:ab:3f:07:47:19:72:e9:de:3b:
c6:1c:30:77:de:24:9b:3f:a7:1d:6b:97:0e:6a:0b:53:02:05:
92:9a:5d:18:9f:48:0b:b6:95:fe:a7:85:de:82:95:f5:15:41:
62:85:20:8c:06:b7:84:5e:2f:b9:2b:b3:df:24:7b:f5:cd:b1:
4d:da:2f:f2:c6:a0:40:c1:e9:a7:a1:a4:56:02:ea:4a:b1:54:
88:eb:9b:37:ce:fb:07:5f:30:a4:2c:1f:e9:be:05:44:70:af:
2f:c8:ee:96:de:f5:0f:4f:a0:03:b0:cb:47:cd:ef:a5:66:57:
9a:51:5b:9b:0f:34:f0:72:f3:ad:fb:2c:77:d7:89:f5:e2:96:
ae:17:1d:91:d3:ab:88:a8:9a:83:60:32:dd:e1:32:79:9b:3e:
cd:03:0f:93:35:5c:3f:94:ba:d8:f9:24:bf:f4:56:3c:87:3d:
82:25:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 15:50:53 2024 by rpki-client on console-ams.rpki-client.org