Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/6dL88ET_mV5Rcqgf3h0z9fBQdX4.roa
File: 6dL88ET_mV5Rcqgf3h0z9fBQdX4.roa (raw, json)
Hash identifier: 0bXguxenIzdJzuV/57jJJBm0aQZ+76UuWMC3LNA4MR4=
Subject key identifier: E9:D2:FC:F0:44:FF:99:5E:51:72:A8:1F:DE:1D:33:F5:F0:50:75:7E
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018EC73A065B2AA493911B4846D762CD0304
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/6dL88ET_mV5Rcqgf3h0z9fBQdX4.roa
Signing time: Wed 10 Apr 2024 08:57:32 +0000
ROA not before: Wed 10 Apr 2024 08:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204548
IP address blocks: 45.83.41.0/24 maxlen: 24
63.250.59.0/24 maxlen: 24
63.250.60.0/24 maxlen: 24
81.28.6.0/24 maxlen: 24
83.229.84.0/24 maxlen: 24
83.229.85.0/24 maxlen: 24
83.229.86.0/24 maxlen: 24
83.229.87.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
185.47.174.0/24 maxlen: 24
185.53.210.0/24 maxlen: 24
185.139.230.0/24 maxlen: 24
185.181.10.0/24 maxlen: 24
185.227.108.0/24 maxlen: 24
185.227.111.0/24 maxlen: 24
185.237.14.0/24 maxlen: 24
185.237.15.0/24 maxlen: 24
185.237.96.0/24 maxlen: 24
185.237.97.0/24 maxlen: 24
185.247.118.0/24 maxlen: 24
194.36.88.0/24 maxlen: 24
194.37.80.0/24 maxlen: 24
195.238.122.0/24 maxlen: 24
2a06:c5c0:1100::/48 maxlen: 48
2a07:3b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Apr 2024 06:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:3a:06:5b:2a:a4:93:91:1b:48:46:d7:62:cd:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Apr 10 08:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9d2fcf044ff995e5172a81fde1d33f5f050757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:de:da:3a:25:3b:b5:d0:e9:81:a0:b3:64:
da:7c:8f:4d:7d:a1:9a:8c:b0:37:c6:ef:ac:8c:87:
db:7c:48:32:19:fe:7f:1d:ec:6f:4f:7d:4b:1d:2a:
fe:0a:ca:4a:dd:2d:76:f7:2f:f0:c3:f2:a3:e1:99:
70:87:38:7e:fd:91:42:d7:8a:1b:18:17:21:a1:f5:
fe:0c:e3:09:d3:13:96:bc:f7:06:3c:69:16:9e:1b:
07:48:b0:06:1f:99:09:f5:3b:53:3e:61:7c:13:bc:
3a:16:9b:b1:d4:ec:d4:9b:15:e4:0f:5e:b6:23:14:
94:25:c2:d6:e0:a8:ab:96:79:ae:4a:20:8e:3c:dc:
36:c2:0e:90:c7:9f:06:c0:fb:e0:97:99:e2:8e:a7:
f9:aa:85:ae:a2:af:b1:3c:5c:b0:ae:8b:97:53:f1:
c0:df:fa:5c:63:14:a1:3e:5c:63:10:3c:1a:af:a1:
90:4b:ec:51:75:0f:a7:8e:94:27:5c:cb:dd:3f:e7:
cf:91:5a:a4:2e:2e:5f:c6:31:12:3a:7f:d3:c9:bb:
b1:a5:31:05:87:73:c0:ba:01:7b:79:b5:a0:49:b2:
f5:2d:b9:3b:4d:ec:f4:ec:0a:0c:68:e2:ca:25:13:
b6:4e:77:b4:f9:70:56:8a:56:15:91:0b:09:09:28:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D2:FC:F0:44:FF:99:5E:51:72:A8:1F:DE:1D:33:F5:F0:50:75:7E
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/6dL88ET_mV5Rcqgf3h0z9fBQdX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.41.0/24
63.250.59.0-63.250.60.255
81.28.6.0/24
83.229.84.0/22
91.202.170.0/24
103.13.211.0/24
185.47.174.0/24
185.53.210.0/24
185.139.230.0/24
185.181.10.0/24
185.227.108.0/24
185.227.111.0/24
185.237.14.0/23
185.237.96.0/23
185.247.118.0/24
194.36.88.0/24
194.37.80.0/24
195.238.122.0/24
IPv6:
2a06:c5c0:1100::/48
2a07:3b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
66:c7:eb:fe:3a:87:e8:b5:ad:d6:1e:97:98:6a:e3:a2:f9:37:
27:b0:4f:4f:e9:54:1e:6f:f4:34:fe:f9:8a:c2:74:e3:21:0f:
83:57:a9:3a:b2:ee:e1:86:1e:cd:83:1f:8f:70:9e:9a:b3:0c:
3c:1c:ec:f3:f3:dc:d5:e6:0a:ae:62:72:81:58:99:6a:1f:82:
26:42:e5:a8:12:47:d3:7a:7f:8a:6f:40:a8:3a:61:f1:e6:a3:
8e:1a:ca:d0:be:5e:e3:97:30:a2:d8:61:1b:08:83:73:6a:7e:
75:74:7c:4e:f4:26:c7:3d:40:b7:4f:2c:a0:b5:27:cc:1f:7c:
7e:1e:3e:46:d4:69:18:d6:b1:52:24:11:e7:ce:3e:55:c7:97:
59:b5:c3:e9:eb:10:f2:5f:28:0c:18:ed:58:4e:7f:94:3d:27:
95:e9:64:9c:1f:5f:13:10:5c:36:b0:3a:21:eb:08:70:7b:04:
80:b6:73:fc:4e:ca:e9:c7:04:c7:d4:4b:da:75:82:bc:8a:ea:
e7:eb:e4:07:a8:44:02:02:80:26:cd:a4:e0:b9:dc:17:e2:1f:
9a:59:0e:8c:16:cd:3f:07:47:77:89:cc:8c:c9:e2:3c:50:1b:
9e:0a:04:0a:55:f9:18:25:99:51:12:04:58:4b:a6:d8:fb:d9:
d1:0e:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 07:21:07 2024 by rpki-client on console-fra.rpki-client.org