Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/UiLGSPboUEbIxnndWUyep4iHM2I.roa
File: UiLGSPboUEbIxnndWUyep4iHM2I.roa (raw, json)
Hash identifier: bx1+PrGEXi4GfNentNv08H8jHVz73uxslTGmDK3ePxQ=
Subject key identifier: 52:22:C6:48:F6:E8:50:46:C8:C6:79:DD:59:4C:9E:A7:88:87:33:62
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0192E23D757C91F7281D0D34BA9C4FA4B399
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/UiLGSPboUEbIxnndWUyep4iHM2I.roa
Signing time: Thu 31 Oct 2024 11:02:11 +0000
ROA not before: Thu 31 Oct 2024 11:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210329
IP address blocks: 45.91.170.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
81.28.4.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
103.13.208.0/24 maxlen: 24
103.13.209.0/24 maxlen: 24
103.240.145.0/24 maxlen: 24
103.241.64.0/24 maxlen: 24
103.241.65.0/24 maxlen: 24
185.53.211.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
185.181.9.0/24 maxlen: 24
185.181.11.0/24 maxlen: 24
185.227.109.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.247.116.0/24 maxlen: 24
185.247.119.0/24 maxlen: 24
194.37.82.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
195.238.123.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
2a06:c5c0:600::/48 maxlen: 48
2a07:3b80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:3d:75:7c:91:f7:28:1d:0d:34:ba:9c:4f:a4:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 31 11:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5222c648f6e85046c8c679dd594c9ea788873362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:26:15:be:ff:10:15:6d:43:06:f9:81:05:
95:37:ff:1b:15:ee:02:da:96:5a:3c:81:c1:0b:ab:
d5:8d:1b:f7:63:90:0d:3b:50:4d:b5:b1:7e:74:d1:
08:6a:09:0c:be:29:73:a2:f3:5f:ef:dd:4c:63:65:
b0:75:52:c1:4b:8d:19:45:ea:dc:11:6f:c7:ce:61:
bc:11:b0:ce:43:cf:b5:23:30:78:c5:aa:e3:a9:8d:
40:3b:87:03:ca:23:7b:93:d8:bc:05:f5:6e:50:2a:
80:5c:da:17:21:b7:5b:4f:62:84:4f:1c:1f:e3:0f:
7d:a8:6d:7b:0c:fa:07:2c:77:22:eb:df:db:5e:2d:
92:21:da:b1:99:1f:6a:31:c1:2f:cc:5f:c9:5c:46:
fa:93:30:0b:2f:ed:74:bf:91:f5:b2:e7:5e:40:5c:
ca:3a:a6:54:96:38:eb:b4:8c:2b:e4:ea:46:54:24:
d1:16:c3:ec:83:26:ab:ca:7b:3e:04:bc:45:0d:63:
b6:3b:3a:2b:5e:f4:50:70:5b:55:20:df:83:4f:da:
16:eb:ea:ab:fe:97:93:8b:f3:8a:b3:d0:58:1e:49:
c6:b2:19:51:15:38:3f:1e:ab:03:15:6c:f2:45:87:
ef:fc:09:ae:60:45:f5:d3:78:f6:4f:9f:4b:8c:f2:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:C6:48:F6:E8:50:46:C8:C6:79:DD:59:4C:9E:A7:88:87:33:62
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/UiLGSPboUEbIxnndWUyep4iHM2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
103.13.208.0/23
103.240.145.0/24
103.241.64.0/23
185.53.211.0/24
185.127.16.0/22
185.181.9.0/24
185.181.11.0/24
185.227.109.0/24
185.237.12.0/23
185.237.98.0/23
185.247.116.0/24
185.247.119.0/24
194.37.82.0/24
194.146.24.0/23
195.238.123.0/24
212.86.104.0/23
IPv6:
2a06:c5c0:600::/48
2a07:3b80:2::/48
Signature Algorithm: sha256WithRSAEncryption
08:62:0a:f6:f8:10:5b:18:e1:b2:82:be:d7:95:b3:78:56:ea:
0a:b9:60:de:3d:0a:c8:eb:6e:5a:bd:50:f8:38:90:cb:b9:76:
29:96:98:c8:89:a3:fd:fa:d0:7e:7b:2b:71:98:2d:ff:e6:5b:
81:a5:1a:92:53:4f:00:7b:90:b9:22:51:d4:ba:60:8e:5a:ef:
84:75:9c:64:69:34:78:34:f0:ae:46:f7:4f:b9:e5:9f:ea:2f:
5d:23:94:0c:33:a6:c8:8f:3b:7f:9f:14:22:ee:e0:ba:d0:28:
7e:28:b3:b1:9b:cd:39:09:e4:2f:12:45:f7:df:2e:ba:11:36:
fd:4d:e5:74:8a:27:9e:2a:59:3a:e6:54:22:ad:e5:60:9c:a4:
55:ff:e1:80:7f:7f:84:07:7a:d5:b5:66:7d:c7:7f:c9:6d:73:
34:02:90:be:ca:d1:5d:1a:eb:1f:09:01:59:1f:6a:67:68:57:
35:3b:80:04:e8:87:9a:11:fc:fe:65:21:09:60:12:4a:91:f7:
5a:74:8e:8a:37:e4:0f:e5:20:42:b9:4d:a2:e1:7c:b0:3b:ad:
5c:a6:c8:15:84:c9:49:4e:d6:e8:09:22:5f:34:d8:71:3d:77:
71:7d:da:69:a1:3c:bc:ec:72:41:7a:90:21:df:4b:8b:38:d0:
bb:df:b2:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:22 2025 by rpki-client