Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/lELwclhoqft6IGi9ZiKhbGpmaPY.roa
File: lELwclhoqft6IGi9ZiKhbGpmaPY.roa (raw, json)
Hash identifier: tZee78lJZQ/Te43i9vEQF2EfkWgwNF9UPx/qdP9DJ+c=
Subject key identifier: 94:42:F0:72:58:68:A9:FB:7A:20:68:BD:66:22:A1:6C:6A:66:68:F6
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018EC735728E1FD9FBA027D75BA14AE7D61B
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/lELwclhoqft6IGi9ZiKhbGpmaPY.roa
Signing time: Wed 10 Apr 2024 08:52:32 +0000
ROA not before: Wed 10 Apr 2024 08:52:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.241.67.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
185.139.228.0/24 maxlen: 24
185.144.156.0/22 maxlen: 22
193.168.172.0/24 maxlen: 24
2a06:c5c0:1500::/48 maxlen: 48
2a06:c5c0:1600::/48 maxlen: 48
2a06:c5c0:1700::/48 maxlen: 48
2a07:3b80::/48 maxlen: 48
2a07:3b80:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Apr 2024 12:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:35:72:8e:1f:d9:fb:a0:27:d7:5b:a1:4a:e7:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Apr 10 08:52:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9442f0725868a9fb7a2068bd6622a16c6a6668f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:e8:87:81:a9:02:bd:f1:1a:31:d2:a5:00:
8a:50:7e:d1:f5:b2:91:09:45:6f:8b:e7:e1:b3:f2:
06:e8:65:90:7f:44:30:ea:08:46:35:17:de:65:a6:
59:0b:22:c6:04:03:e0:d3:c5:71:f1:63:02:62:6b:
de:5f:31:8c:67:7d:f9:6d:0e:9f:6e:dc:c1:e3:40:
dd:42:8b:0e:bd:88:2e:e4:63:54:2f:7f:2d:57:53:
55:87:2b:61:a0:58:9d:17:df:57:45:61:a2:4b:89:
46:ce:90:13:52:5e:8e:0c:1d:09:c9:b0:29:7e:99:
17:62:58:ed:be:09:6e:ae:65:6c:d6:9c:ba:0d:b1:
ac:4f:73:37:70:4f:68:6b:2b:28:c4:4e:4e:60:d1:
95:0b:ad:97:b8:e4:ef:4d:20:f1:df:3a:55:e2:c6:
66:dc:f1:9b:56:b4:eb:de:ea:92:c1:00:ad:e7:98:
03:2d:25:a4:97:fb:50:af:e1:3b:86:8a:e0:f4:6d:
14:3e:6e:7f:d4:a2:f5:00:62:3f:f6:ce:66:db:79:
11:33:83:6f:3a:1b:af:ee:53:0c:3a:86:80:f0:f9:
5d:10:f8:8c:2a:c0:c1:27:9b:8c:6d:48:fe:1e:af:
78:33:15:cb:76:95:9b:60:8d:77:9b:d9:94:80:25:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:F0:72:58:68:A9:FB:7A:20:68:BD:66:22:A1:6C:6A:66:68:F6
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/lELwclhoqft6IGi9ZiKhbGpmaPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
103.13.211.0/24
103.45.245.0-103.45.246.255
103.241.66.0/23
185.47.172.0/24
185.53.209.0/24
185.139.228.0/24
185.144.156.0/22
193.168.172.0/24
IPv6:
2a06:c5c0:1500::/48
2a06:c5c0:1600::/48
2a06:c5c0:1700::/48
2a07:3b80::/48
2a07:3b80:8::/48
Signature Algorithm: sha256WithRSAEncryption
48:32:b9:90:88:9a:77:a6:0b:6a:01:86:85:c3:f6:c3:5d:ee:
24:7c:b5:d0:a2:ed:c1:b1:43:b0:5f:f6:00:a0:90:b6:80:ca:
7e:7e:e5:56:6d:e1:f7:1b:6c:fa:da:ec:88:75:bc:67:bb:2c:
84:5e:99:ab:a4:52:7a:97:c8:dd:38:fe:45:af:9b:db:3a:30:
91:0d:cf:0c:ca:b8:0a:a9:c8:b2:2c:73:d7:0c:34:b2:3d:a9:
6a:dc:11:fb:d8:7e:97:72:40:b9:70:49:31:73:fe:38:a2:f6:
c8:04:54:8b:a2:7e:55:55:3b:38:ba:d1:78:c1:72:4f:ca:85:
3a:7b:5b:60:08:8c:4c:b3:bb:26:7e:28:85:c7:bb:4b:c3:6e:
38:4b:5f:2d:0f:09:33:fc:56:20:03:3c:21:09:1a:2d:dd:ff:
75:51:5c:5f:c5:13:b8:cb:6f:da:52:6b:06:b6:1d:22:cd:81:
51:bb:74:59:9b:ab:42:b3:08:80:67:45:b7:f4:ec:c1:0b:e9:
07:83:8c:bf:80:00:81:f5:70:69:fa:1a:64:19:94:53:48:9d:
12:04:b3:21:37:e1:76:d5:08:84:4b:02:ef:a4:48:77:66:f7:
53:a8:1a:63:31:c0:8b:44:c1:df:78:a1:99:ac:ed:6a:3a:ae:
4a:80:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:20 2024 by rpki-client on console-ams.rpki-client.org