Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/U51eD_-j6QeFZNn7np-fOQu4GNs.roa
File: U51eD_-j6QeFZNn7np-fOQu4GNs.roa (raw, json)
Hash identifier: p5KE5CK6vEhvo7N+MgZgR4PYMeugZ+T5E6VZB+xRc3I=
Subject key identifier: 53:9D:5E:0F:FF:A3:E9:07:85:64:D9:FB:9E:9F:9F:39:0B:B8:18:DB
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018A03A5AF67702ADD6B4CB7E4A194BBEF25
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/U51eD_-j6QeFZNn7np-fOQu4GNs.roa
Signing time: Thu 17 Aug 2023 13:18:24 +0000
ROA not before: Thu 17 Aug 2023 13:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
2a06:c5c0:1700::/48 maxlen: 48
2a06:c5c0:1600::/48 maxlen: 48
2a06:c5c0:1500::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:a5:af:67:70:2a:dd:6b:4c:b7:e4:a1:94:bb:ef:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Aug 17 13:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=539d5e0fffa3e9078564d9fb9e9f9f390bb818db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:db:74:00:4d:f7:17:e6:9d:91:6b:56:b1:
86:40:58:fb:58:88:4f:b5:8c:18:27:cd:19:7d:c4:
ac:56:00:a4:6b:1d:32:8b:14:70:c0:43:2c:82:ae:
21:fd:30:d7:4f:13:e7:c8:71:37:41:04:a1:af:28:
1c:b7:88:3a:21:ac:58:ad:eb:18:73:40:ef:ce:85:
8c:86:03:1e:68:1e:15:2f:ce:a0:a7:7c:5f:e7:1e:
36:18:e3:c7:62:38:b6:24:2c:ac:2d:39:d1:3c:78:
0f:c1:41:61:b3:72:86:31:14:b3:40:f2:47:a6:3c:
45:23:c8:fe:91:81:3a:ac:a7:db:8c:7c:ec:1c:60:
5b:8b:40:d5:c9:61:4e:d0:17:a9:ca:57:54:6e:7a:
50:20:9e:d6:f4:3b:5d:c2:9c:3c:e4:d0:d3:94:03:
af:4a:9d:70:b1:b7:1a:f4:b2:d9:2c:34:32:f4:fd:
32:9a:da:47:f4:a5:cd:60:af:39:32:1e:8d:3c:82:
47:25:e3:1b:ce:a5:d2:a4:25:6b:e8:ec:60:be:79:
1a:33:e9:21:ed:96:3a:d3:47:e4:5a:ff:c0:7e:55:
c5:7a:e2:58:d2:7b:22:8b:a7:12:b7:16:74:ed:74:
db:69:a1:3d:75:77:1e:4e:28:f6:71:ad:8b:30:6b:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:5E:0F:FF:A3:E9:07:85:64:D9:FB:9E:9F:9F:39:0B:B8:18:DB
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/U51eD_-j6QeFZNn7np-fOQu4GNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
103.13.211.0/24
103.45.245.0-103.45.246.255
103.241.66.0/24
185.47.172.0/24
185.53.209.0/24
IPv6:
2a06:c5c0:1500::/48
2a06:c5c0:1600::/48
2a06:c5c0:1700::/48
Signature Algorithm: sha256WithRSAEncryption
19:f4:e0:26:3a:5e:83:7a:1f:59:e2:a8:b6:30:55:d3:4b:0e:
54:ac:67:83:9f:cb:3d:4d:43:04:5e:31:ed:8a:28:c3:c2:b8:
ae:dd:b3:70:7e:37:3d:e2:25:16:8e:a6:51:5d:e0:46:89:46:
0c:8e:a2:5d:86:fb:d9:55:54:64:67:3e:5d:60:6c:75:36:9a:
5e:27:31:b7:3c:9e:13:7a:f1:67:de:d8:01:eb:a0:a1:07:08:
f4:a9:7a:b1:c6:f9:3f:af:0c:98:f7:0f:78:03:a5:bb:f6:68:
d1:bc:ab:35:02:f6:86:ef:7e:1a:bd:fa:c9:6e:c1:1d:cc:0d:
22:c2:b0:20:32:e5:3f:d6:df:34:71:aa:1e:d2:41:ac:3a:74:
12:ef:af:f5:2a:a5:ba:03:69:be:f9:22:09:57:81:b4:7a:21:
cc:9c:25:95:39:b3:1a:23:d9:1c:38:60:c7:05:c1:02:4c:c9:
f9:f0:98:16:0d:d3:30:0e:cf:fa:9b:f9:56:c8:07:ae:c3:db:
c8:17:49:59:8f:42:89:1c:f0:55:d7:f1:aa:bd:ee:2c:3a:7a:
fd:18:f9:29:d6:f0:06:f4:3c:8d:4d:f3:87:d6:68:b5:10:0a:
dc:13:19:13:03:ef:42:a6:3f:83:a2:ee:e4:ef:09:13:58:06:
c8:e3:37:3b
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 8 09:23:53 2023 by rpki-client on console-fra.rpki-client.org