Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/4hjbmxZtfUTFsVEMzCT5JsZhFRY.roa
File: 4hjbmxZtfUTFsVEMzCT5JsZhFRY.roa (raw, json)
Hash identifier: JDaff6JhMekhgsky1E0uUKnhVQcdQ/eM3ZQ304c+8kM=
Subject key identifier: E2:18:DB:9B:16:6D:7D:44:C5:B1:51:0C:CC:24:F9:26:C6:61:15:16
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0188F2B29C9B99915769B19018FDDB0B394E
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/4hjbmxZtfUTFsVEMzCT5JsZhFRY.roa
Signing time: Sun 25 Jun 2023 13:16:11 +0000
ROA not before: Sun 25 Jun 2023 13:16:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210329
IP address blocks: 81.28.4.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
195.238.123.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
103.13.209.0/24 maxlen: 24
103.13.208.0/24 maxlen: 24
103.241.64.0/24 maxlen: 24
45.91.170.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
103.241.65.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
2a06:c5c0:600::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Aug 2023 10:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f2:b2:9c:9b:99:91:57:69:b1:90:18:fd:db:0b:39:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jun 25 13:16:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e218db9b166d7d44c5b1510ccc24f926c6611516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:b1:f7:05:81:4b:31:33:ea:26:e9:bb:8a:
cc:9e:26:77:3d:75:35:43:0d:de:be:64:4a:23:fa:
ae:04:6e:43:43:38:7d:01:29:85:8e:ca:4b:00:7b:
a2:f9:d3:51:87:26:8c:79:43:e5:de:10:76:a1:7c:
60:61:17:5c:03:7f:18:f0:2e:17:9c:49:24:ff:cc:
59:14:46:7c:b8:33:24:76:23:08:31:33:c7:5d:36:
7c:0c:e3:f8:66:56:3a:3e:e4:42:bf:97:e3:25:f3:
58:1f:6b:af:87:1f:e7:6e:f6:b0:af:a1:f8:5f:8b:
6a:7c:3f:00:07:d7:ad:0b:61:47:ea:09:fa:99:e3:
99:c1:1a:83:31:9b:fd:fa:b4:5c:c4:21:31:0d:5c:
94:97:d8:7e:ee:4e:41:76:d0:78:a4:3b:0d:bc:fe:
81:e2:9d:ec:a1:e2:6d:9b:42:b3:7b:df:be:b7:14:
ac:7b:13:65:f2:fd:2b:b8:77:47:ff:e7:ee:da:67:
42:18:13:ba:79:bd:4f:1f:3a:b2:8a:68:75:c0:0b:
95:6c:e8:86:9c:bb:c4:87:7e:a1:51:0a:66:c6:75:
54:a0:d2:94:ef:fa:49:95:92:39:06:a7:37:8a:18:
12:5c:f9:b0:a7:87:3d:2f:ff:f3:66:d2:a7:d8:cf:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:18:DB:9B:16:6D:7D:44:C5:B1:51:0C:CC:24:F9:26:C6:61:15:16
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/4hjbmxZtfUTFsVEMzCT5JsZhFRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
103.13.208.0/23
103.241.64.0/23
185.127.16.0/22
185.237.12.0/23
185.237.98.0/23
194.146.24.0/23
195.238.123.0/24
212.86.104.0/23
IPv6:
2a06:c5c0:600::/48
Signature Algorithm: sha256WithRSAEncryption
78:a5:ca:98:a0:8e:fe:c0:b1:78:5d:11:1b:aa:ab:68:12:95:
0c:bf:5c:f1:f3:f7:94:21:06:c3:ae:ea:aa:28:44:d4:c5:d2:
a2:72:ea:71:95:1c:5d:c8:42:1c:3a:b0:85:45:ca:17:c5:df:
42:7a:8f:b3:c8:5e:1d:1b:20:c0:19:ee:01:aa:59:e1:fa:37:
98:ab:3a:25:e9:a0:6a:fb:44:7d:f2:49:5d:4b:0c:bf:1e:bb:
ef:e0:69:74:6d:72:08:82:ec:02:13:b4:c8:a3:4c:ff:8f:ba:
44:91:8d:de:17:b0:de:22:2d:1b:d3:41:38:9d:f7:a3:90:cb:
3b:09:39:b0:8f:a7:ad:19:5c:e8:df:de:89:6f:e6:4f:21:9a:
fb:4c:f0:30:6e:ee:68:4a:4a:2c:a7:14:cc:f0:68:f3:0b:61:
6e:45:25:38:86:bc:ce:0d:0c:19:c7:11:20:39:98:b5:ab:70:
4b:34:31:1e:23:75:2e:91:81:53:8c:a8:7e:b3:72:ca:05:02:
5d:9b:7b:49:82:77:a9:f9:9d:ba:ed:50:4b:16:40:a0:03:56:
03:77:50:a1:0a:a0:34:7f:6d:94:e0:1c:16:db:9f:59:87:6f:
ac:90:4a:4e:33:f8:c0:00:b8:41:db:8f:83:47:ea:42:5b:ef:
e0:fc:a4:51
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAYjyspybmZFXabGQGP3bCzlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjMwNjI1MTMxNjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjE4ZGI5YjE2NmQ3ZDQ0YzViMTUxMGNjYzI0ZjkyNmM2NjExNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDWx9wWBSzEz6ibpu4rMniZ3PXU1
Qw3evmRKI/quBG5DQzh9ASmFjspLAHui+dNRhyaMeUPl3hB2oXxgYRdcA38Y8C4X
nEkk/8xZFEZ8uDMkdiMIMTPHXTZ8DOP4ZlY6PuRCv5fjJfNYH2uvhx/nbvawr6H4
X4tqfD8AB9etC2FH6gn6meOZwRqDMZv9+rRcxCExDVyUl9h+7k5BdtB4pDsNvP6B
4p3soeJtm0Kze9++txSsexNl8v0ruHdH/+fu2mdCGBO6eb1PHzqyimh1wAuVbOiG
nLvEh36hUQpmxnVUoNKU7/pJlZI5Bqc3ihgSXPmwp4c9L//zZtKn2M/yHwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFOIY25sWbX1ExbFRDMwk+SbGYRUWMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvNGhqYm14WnRmVVRGc1ZFTXpDVDVKc1poRlJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBaBAIAATBUAwQALVuqAwQA
P/o6AwQBURwEAwQBU+VEAwQAU+VLAwQAW9/sAwQBZw3QAwQBZ/FAAwQCuX8QAwQB
ue0MAwQBue1iAwQBwpIYAwQAw+57AwQB1FZoMA8EAgACMAkDBwAqBsXABgAwDQYJ
KoZIhvcNAQELBQADggEBAHilypigjv7AsXhdERuqq2gSlQy/XPHz95QhBsOu6qoo
RNTF0qJy6nGVHF3IQhw6sIVFyhfF30J6j7PIXh0bIMAZ7gGqWeH6N5irOiXpoGr7
RH3ySV1LDL8eu+/gaXRtcgiC7AITtMijTP+PukSRjd4XsN4iLRvTQTid96OQyzsJ
ObCPp60ZXOjf3olv5k8hmvtM8DBu7mhKSiynFMzwaPMLYW5FJTiGvM4NDBnHESA5
mLWrcEs0MR4jdS6RgVOMqH6zcsoFAl2be0mCd6n5nbrtUEsWQKADVgN3UKEKoDR/
bZTgHBbbn1mHb6yQSk4z+MAAuEHbj4NH6kJb7+D8pFE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:35 2024 by rpki-client on console-ams.rpki-client.org