Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5jEqHR6sYupPbk945h8G28GLb48.roa
File: 5jEqHR6sYupPbk945h8G28GLb48.roa (raw, json)
Hash identifier: TEYXawz8RlJlFev9brFrONyP6ZJuzA1o55SoJRKZm4A=
Subject key identifier: E6:31:2A:1D:1E:AC:62:EA:4F:6E:4F:78:E6:1F:06:DB:C1:8B:6F:8F
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0188B40234E10CB709BBFF71BDBDA0D2F8CD
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5jEqHR6sYupPbk945h8G28GLb48.roa
Signing time: Tue 13 Jun 2023 09:07:03 +0000
ROA not before: Tue 13 Jun 2023 09:07:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 10:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:02:34:e1:0c:b7:09:bb:ff:71:bd:bd:a0:d2:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jun 13 09:07:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6312a1d1eac62ea4f6e4f78e61f06dbc18b6f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:4f:a4:60:33:b8:6b:7e:ac:36:0c:4a:fa:
46:d6:5e:cb:a0:2e:b5:df:6b:4e:b1:a0:eb:07:95:
ae:d4:b4:13:01:12:61:f9:80:94:f7:71:a2:76:ac:
f0:97:43:d9:08:fc:8f:29:35:f7:b0:7d:09:30:75:
a0:01:f6:b5:30:6a:ee:dd:93:f6:08:82:0c:dd:a5:
d5:b1:3b:5a:86:58:00:9f:94:ab:cc:9f:58:5b:a3:
a2:d4:bf:de:82:fa:32:7d:6a:5e:a6:8c:27:13:ce:
7c:7f:0e:b9:0e:7a:4b:2b:56:65:01:c2:a0:fd:24:
e5:99:d0:44:ed:0d:24:a8:6b:da:eb:7c:75:59:f7:
0c:65:c1:ab:c5:f6:88:82:d3:cc:f7:2e:ca:cf:df:
19:cc:e8:a6:bb:d1:6b:f3:e7:7b:6f:6d:f4:a7:f0:
72:92:c5:dc:1b:8e:0c:7b:d8:6b:f2:1b:e8:34:e7:
33:23:34:f7:b9:22:5d:33:d8:4f:84:c1:82:ae:d1:
fd:51:3b:20:53:21:a0:f7:d2:fb:2e:f2:b2:7d:ee:
f7:a3:5f:d7:1e:f9:a4:d4:49:14:86:1e:18:b1:29:
35:f6:5a:f1:9b:66:63:06:f1:e4:78:05:2b:4d:d5:
21:59:77:b1:9e:56:45:f7:b2:da:c0:af:af:0e:b0:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:2A:1D:1E:AC:62:EA:4F:6E:4F:78:E6:1F:06:DB:C1:8B:6F:8F
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5jEqHR6sYupPbk945h8G28GLb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
103.13.211.0/24
103.45.245.0-103.45.246.255
185.47.172.0/24
185.53.209.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5b:b1:e5:ca:91:6c:c7:16:af:5d:04:b9:ea:40:6d:7b:09:
e9:39:71:f0:f4:91:62:65:31:a7:a3:52:a0:5e:7e:bc:f9:fa:
a3:6c:1c:c9:28:65:08:7d:a1:77:14:d6:6c:a6:0e:2a:8b:67:
4c:61:fa:ab:37:5f:84:42:38:57:7f:d6:6f:7d:cd:6e:9e:c7:
24:4b:4a:ce:c9:7d:4e:c6:54:1b:82:af:b0:fd:c2:4e:0d:dd:
43:20:aa:5e:da:8c:51:7f:a4:bd:08:38:31:ed:ee:d8:4a:97:
7d:8e:81:f1:29:a9:fd:a0:fe:ee:4c:fb:3b:dc:33:b3:d5:83:
21:77:fb:42:c4:b0:80:7b:0b:d8:8c:9a:5d:4c:48:c1:dc:61:
ed:18:7f:84:b0:93:0e:b6:d0:cf:7f:a2:7f:a6:8d:95:5c:14:
7a:73:67:18:01:95:c5:28:10:6c:19:99:d7:7f:7b:ff:49:13:
9d:79:5e:06:2e:8d:1c:99:14:77:d9:b9:45:5c:d5:23:fe:7c:
34:2b:3a:45:05:9b:b4:a1:cc:45:22:fd:5b:30:08:ef:66:1d:
1a:2f:a2:b9:e8:35:68:61:b2:12:83:f9:15:4d:d2:16:f0:31:
1e:2e:b0:27:0f:57:39:b7:58:c6:50:4c:26:15:c8:ef:eb:64:
b3:5c:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:35 2024 by rpki-client on console-ams.rpki-client.org