Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/w_gjhTAp8SUOjJ81xyGIryPKU9k.roa
File: w_gjhTAp8SUOjJ81xyGIryPKU9k.roa (raw, json)
Hash identifier: D7iplLxOQEpmo6RbzirgMXAqeniHStiq+n4OdSvp5yk=
Subject key identifier: C3:F8:23:85:30:29:F1:25:0E:8C:9F:35:C7:21:88:AF:23:CA:53:D9
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018E0E8E771D1D575324240D0CA1D3CD9237
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/w_gjhTAp8SUOjJ81xyGIryPKU9k.roa
Signing time: Tue 05 Mar 2024 12:20:01 +0000
ROA not before: Tue 05 Mar 2024 12:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.112.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 09:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:8e:77:1d:1d:57:53:24:24:0d:0c:a1:d3:cd:92:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 5 12:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3f823853029f1250e8c9f35c72188af23ca53d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:ce:a3:09:43:04:1d:ca:da:0e:ae:d2:ba:
db:88:e1:3f:39:65:f3:34:87:e7:bd:fe:92:db:3b:
48:26:55:f2:1e:3e:00:fd:92:bd:58:bb:cc:33:b5:
20:3f:11:bf:da:55:69:0b:f5:d6:73:09:51:bd:e5:
2b:09:ab:96:66:ce:01:db:6c:f3:b8:62:c1:19:4a:
3f:1a:08:c6:a2:7f:35:81:06:69:86:45:d0:dc:4e:
78:6c:f0:47:7d:f9:b0:51:22:2c:ac:1c:9c:05:05:
a3:3c:2b:7f:4e:9f:ec:a3:97:64:60:49:43:6f:cd:
63:2a:ee:27:f8:95:0e:93:cd:08:f0:24:64:98:31:
cb:9e:50:f2:dd:e5:88:b5:97:40:68:ea:71:ad:3e:
47:56:02:79:45:18:e6:9e:fc:a3:7d:a9:f5:1d:d2:
d8:5d:1c:5f:52:9c:87:cd:c2:ca:f5:41:ed:c2:2c:
47:61:da:1c:6a:a4:eb:45:33:16:17:1d:cc:5a:2c:
db:aa:76:60:e6:47:6a:11:56:2d:f5:7d:b9:0e:16:
0a:0b:de:90:69:78:18:7d:37:d6:2a:b4:e9:ff:07:
30:44:a3:2e:36:83:5c:1b:02:0f:99:2b:56:59:cd:
d7:12:3b:6e:93:79:d9:7b:48:e0:1f:5a:f5:3b:b9:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:23:85:30:29:F1:25:0E:8C:9F:35:C7:21:88:AF:23:CA:53:D9
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/w_gjhTAp8SUOjJ81xyGIryPKU9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
45.9.168.0/24
83.137.157.0/24
88.209.206.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8e:ef:fa:b8:be:fa:b6:85:72:b5:bf:57:1c:8e:2d:b4:c4:
dd:41:2a:15:60:87:a2:ed:f8:1b:1b:6e:42:2d:45:3e:a5:5b:
e0:a4:cd:0c:06:f2:60:c3:b3:8d:32:93:b9:71:ea:e7:30:f7:
77:01:e4:46:82:4d:8a:d3:e2:51:92:df:b6:ff:17:a5:cb:32:
20:53:8b:b0:d1:65:27:41:97:7b:8c:86:cd:35:de:bc:be:8d:
8d:a4:fd:23:f5:b7:b1:f6:38:e0:52:c8:af:80:c5:4e:34:86:
ed:98:9b:5c:b6:10:2d:0d:da:4e:14:70:34:6e:7b:fa:9e:ff:
4d:87:66:1d:9f:36:a6:4b:9c:8e:a6:e5:90:69:53:f0:65:a6:
ca:a0:e1:c0:9e:56:ac:4e:32:ff:0a:87:92:0f:83:55:3e:44:
ae:38:e5:59:8c:d6:18:f7:c1:18:ed:17:e0:92:de:d7:e3:1b:
60:39:6d:f6:9c:11:d3:49:3e:91:99:88:ea:b7:de:e8:82:5f:
29:93:d9:d1:cd:3b:da:f4:3e:44:90:12:37:06:0e:dc:20:11:
ee:5a:73:1c:aa:95:42:62:fe:6e:0c:07:7c:8c:8f:c1:38:3d:
57:72:f0:68:df:91:bc:da:3e:75:41:59:aa:5e:bd:42:b9:bf:
40:be:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org