Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sdvn6x03NDqgypKG480zGkqzFEY.roa
File: sdvn6x03NDqgypKG480zGkqzFEY.roa (raw, json)
Hash identifier: wSD1bR456D3vyR9Wr52+4UQYLKFG2HdNzUclZRriLGc=
Subject key identifier: B1:DB:E7:EB:1D:37:34:3A:A0:CA:92:86:E3:CD:33:1A:4A:B3:14:46
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018F56E062C032C09CEF3EA4FE0AD11F969D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sdvn6x03NDqgypKG480zGkqzFEY.roa
Signing time: Wed 08 May 2024 06:24:56 +0000
ROA not before: Wed 08 May 2024 06:24:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.115.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/24 maxlen: 24
77.242.153.0/24 maxlen: 24
77.242.154.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
88.209.205.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 14:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:56:e0:62:c0:32:c0:9c:ef:3e:a4:fe:0a:d1:1f:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 8 06:24:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1dbe7eb1d37343aa0ca9286e3cd331a4ab31446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:05:39:3b:08:f7:d0:7b:31:d6:4d:fc:d4:
d8:dc:c9:44:11:b6:f4:88:e3:9f:9f:64:00:21:5b:
86:91:a2:19:bf:ad:f3:52:e6:96:df:9e:30:be:30:
ad:7c:89:46:ae:31:79:79:d2:9d:a2:68:15:b6:ac:
3e:a2:fb:34:c9:fb:38:26:98:c0:e8:55:97:e5:af:
18:81:ea:e9:a5:7c:2e:db:2c:61:2b:1b:bc:ac:07:
fc:14:6c:e6:d8:e0:c9:45:94:4e:63:20:cf:9c:2d:
0c:4e:cb:8c:64:b9:92:fc:ce:23:4f:3f:27:55:d3:
38:4d:e2:3e:d2:fd:73:99:20:d9:19:3c:85:66:3a:
d7:ab:f4:f2:69:01:af:53:26:3f:e4:05:6e:70:77:
ae:08:d7:68:27:15:59:d9:e1:77:b8:fa:08:a7:5b:
86:69:4f:55:36:89:24:42:b8:93:9e:12:7a:e1:b5:
b3:e7:5d:a2:e9:b0:e5:ef:dd:b7:3f:e7:22:e5:58:
17:96:16:e8:c4:30:79:a7:a0:ca:fe:13:9e:61:e9:
2a:56:e9:c6:3c:55:3c:9d:5c:6b:40:d7:91:95:0e:
85:ca:83:17:a4:6a:c1:50:f7:21:85:c9:43:a0:39:
3c:05:c7:91:c6:d8:fe:ee:f1:16:50:fe:2c:77:bc:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:E7:EB:1D:37:34:3A:A0:CA:92:86:E3:CD:33:1A:4A:B3:14:46
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/sdvn6x03NDqgypKG480zGkqzFEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
45.9.168.0/24
77.242.152.0-77.242.154.255
83.137.157.0-83.137.158.255
88.209.205.0-88.209.206.255
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:39:42:3c:e0:dc:25:86:56:d1:2e:0c:14:93:cf:76:10:da:
a2:5b:7e:9e:d5:27:fd:6f:4b:3e:4b:e5:f2:8a:3d:a6:d1:65:
36:ac:54:44:3a:d0:18:3e:c2:9a:fe:0b:07:c0:5e:47:c6:ff:
79:d1:9b:03:e3:1a:fb:ec:96:2b:9b:2e:0d:1a:4d:6b:35:74:
e7:26:f0:af:e8:4d:d8:0c:e9:23:ec:b9:c4:d8:ae:35:d5:4d:
9c:67:05:39:9d:45:50:5e:78:97:06:e0:c4:90:60:86:60:bc:
e2:2a:cd:2f:5f:41:76:db:82:17:7c:18:b8:3a:fd:04:85:0e:
ba:26:77:e3:e3:4d:a0:9a:42:d0:bd:d5:f0:ae:24:db:45:ac:
73:89:37:a9:06:f4:25:33:30:79:3b:31:bd:03:2a:5d:bc:a0:
12:5a:c0:17:cc:70:7d:ca:34:22:9d:d8:f0:07:22:0b:97:3e:
a6:34:66:90:fa:84:f7:64:7e:cc:21:91:09:cf:2e:3c:03:27:
66:ba:c1:58:e6:c8:46:0d:1e:11:40:4e:13:cb:3d:fe:eb:de:
ae:29:9e:bf:f0:c6:ff:f5:78:89:77:37:8b:b2:64:69:5f:47:
28:ca:cf:53:9a:2e:a9:99:90:3d:40:20:63:ca:39:39:aa:de:
8c:45:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 18:05:43 2024 by rpki-client on console-ams.rpki-client.org