Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/urq-KEr6I0hzHV9f50IlId6SdAA.roa
File: urq-KEr6I0hzHV9f50IlId6SdAA.roa (raw, json)
Hash identifier: pd6rnN4uUEA17IaME8KE67qIPGfwpMzvlHuOWWT0ZUE=
Subject key identifier: BA:BA:BE:28:4A:FA:23:48:73:1D:5F:5F:E7:42:25:21:DE:92:74:00
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DEFD7B7DCBE8679FDA58307679C71DCFE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/urq-KEr6I0hzHV9f50IlId6SdAA.roa
Signing time: Wed 28 Feb 2024 13:11:48 +0000
ROA not before: Wed 28 Feb 2024 13:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.112.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.238.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:d7:b7:dc:be:86:79:fd:a5:83:07:67:9c:71:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 28 13:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bababe284afa2348731d5f5fe7422521de927400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:92:cc:05:58:49:b7:e6:ec:e0:5c:9d:f2:
75:ef:da:97:77:ff:7f:af:f7:3d:b1:c9:85:af:48:
20:0f:47:ce:18:eb:9f:8a:94:2f:3a:99:56:3a:69:
fe:20:79:62:70:40:a6:74:ca:0e:43:94:fd:c9:fc:
db:51:51:87:d9:1c:6e:6b:50:f0:31:86:f8:26:60:
fb:20:34:65:34:82:1f:07:4c:c7:37:4f:f9:ed:25:
9f:32:01:b9:ac:95:74:92:63:d6:6f:32:6e:a0:93:
10:5e:74:94:ac:99:f4:2e:3c:10:c2:df:c1:6e:bd:
29:6a:a9:c7:38:64:41:42:43:ee:89:1c:7e:53:32:
77:43:9d:7b:cb:c0:83:46:05:de:8b:fa:fa:b1:99:
33:c0:dc:0d:49:18:23:4a:15:11:dc:75:cb:0f:74:
81:59:91:26:53:49:ef:de:90:24:7d:2b:85:29:72:
35:dd:99:f8:89:0e:45:ae:6d:ef:42:ec:a3:e1:fa:
e3:0c:49:fc:c5:42:2e:51:c2:80:f2:01:b3:d3:3d:
7d:49:11:2b:96:19:99:01:cc:95:46:72:7f:15:17:
2a:1f:4c:3a:1f:91:b6:dd:1a:39:88:7c:19:6c:8c:
20:4c:8d:3a:ca:b8:b2:f9:10:28:fb:78:a1:78:e7:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BA:BE:28:4A:FA:23:48:73:1D:5F:5F:E7:42:25:21:DE:92:74:00
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/urq-KEr6I0hzHV9f50IlId6SdAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
45.9.168.0/24
83.137.153.0/24
83.137.156.0/23
88.209.206.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:22:c5:4c:21:6c:26:45:9c:58:90:c8:c8:a2:01:a9:78:1d:
60:1c:a3:1b:20:60:98:e3:ff:be:b2:14:2d:e0:af:35:d8:61:
2c:f0:24:4c:45:50:a2:49:3c:c4:74:f4:a9:2e:73:de:ec:e6:
82:d1:42:81:33:e9:f6:f1:87:35:63:cb:c4:df:14:06:c9:f8:
19:8e:fe:21:07:85:7c:fa:50:00:b7:38:ca:e8:a9:e4:3c:87:
0f:36:6f:0c:a9:bf:a0:f5:0c:8d:48:08:48:bd:10:62:d2:24:
94:8a:1e:0f:d2:89:ea:a0:d4:7b:1c:8e:a9:94:20:f2:4a:7b:
52:b5:b2:ae:f7:fc:09:b1:65:a8:5a:32:76:ff:d9:2e:0f:6d:
15:9f:82:82:d9:8e:c2:cc:4e:11:e1:70:b9:0d:0a:d2:50:68:
c8:49:e9:90:e7:fc:1d:3e:6c:68:f4:1a:d6:c8:cf:1d:e4:6e:
54:45:fb:db:70:8b:82:44:59:df:23:f5:47:a9:5c:53:79:37:
5f:39:e2:c0:0a:d6:93:52:7d:d3:03:a8:ce:ac:aa:a7:58:f5:
9c:55:06:c9:27:78:69:69:22:e3:d4:4e:bb:4f:7c:db:43:d8:
78:28:53:03:4d:b8:36:8f:52:9e:76:a7:2f:74:e6:7f:05:99:
99:bd:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 18:45:20 2024 by rpki-client on console-ams.rpki-client.org