Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/pdTS5hvdH6D6VeTDvO1DwJlRvXc.roa
File: pdTS5hvdH6D6VeTDvO1DwJlRvXc.roa (raw, json)
Hash identifier: /7Ro3ZEH4GAkwb61BZkhPJ1hdhD3/yhdCPbKeb/dXOM=
Subject key identifier: A5:D4:D2:E6:1B:DD:1F:A0:FA:55:E4:C3:BC:ED:43:C0:99:51:BD:77
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018E79B455B9EB56678D5A09DDD1C6E842EA
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/pdTS5hvdH6D6VeTDvO1DwJlRvXc.roa
Signing time: Tue 26 Mar 2024 07:40:45 +0000
ROA not before: Tue 26 Mar 2024 07:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.241.67.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
185.139.228.0/24 maxlen: 24
185.144.156.0/22 maxlen: 22
193.168.172.0/24 maxlen: 24
2a06:c5c0:1500::/48 maxlen: 48
2a06:c5c0:1600::/48 maxlen: 48
2a06:c5c0:1700::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Mar 2024 08:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:b4:55:b9:eb:56:67:8d:5a:09:dd:d1:c6:e8:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Mar 26 07:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5d4d2e61bdd1fa0fa55e4c3bced43c09951bd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:c9:03:cd:07:39:0e:25:9a:32:e8:fa:a4:
eb:b0:49:68:7f:46:31:29:58:fe:54:c2:81:92:51:
b5:77:b7:1c:c0:d5:0b:26:17:c5:71:9f:2d:df:cc:
b1:eb:a2:9d:50:e8:17:98:ed:10:14:fa:f2:89:dd:
81:b0:b7:c2:20:7a:5c:9c:e2:24:62:8e:20:89:93:
fa:c1:f7:72:76:f3:30:e7:63:69:3e:1d:a7:a7:bb:
0c:bb:4d:ee:a9:1b:81:b7:d4:c6:aa:4d:50:a6:8e:
7d:06:e5:05:b8:7a:a4:59:a0:78:f7:7d:c8:1f:07:
14:1c:50:a8:a2:3a:64:87:02:e1:8f:86:6c:72:7f:
01:74:6a:b9:68:ca:e9:79:6c:30:f2:57:52:5c:56:
a9:ec:b0:47:bf:68:33:55:03:f9:2d:fe:80:8a:9b:
cc:5b:06:03:7e:ad:40:dc:f7:ef:27:f0:dc:f1:df:
29:16:f9:3d:8b:04:9e:f3:59:30:04:9b:74:bd:de:
91:e9:c0:3e:81:e6:7a:d3:d7:df:8e:cf:6a:03:54:
86:c5:56:59:97:1c:05:c6:49:51:72:9a:ac:f9:6f:
55:e8:be:fb:93:1c:6a:2d:b6:e4:90:80:2d:d0:aa:
b1:fb:03:ae:3d:8c:aa:39:c2:a0:97:a5:09:c2:77:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:D2:E6:1B:DD:1F:A0:FA:55:E4:C3:BC:ED:43:C0:99:51:BD:77
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/pdTS5hvdH6D6VeTDvO1DwJlRvXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
103.13.211.0/24
103.45.245.0-103.45.246.255
103.241.66.0/23
185.47.172.0/24
185.53.209.0/24
185.139.228.0/24
185.144.156.0/22
193.168.172.0/24
IPv6:
2a06:c5c0:1500::/48
2a06:c5c0:1600::/48
2a06:c5c0:1700::/48
Signature Algorithm: sha256WithRSAEncryption
e6:9f:22:d6:2c:bb:0a:51:33:d6:0c:f9:16:9d:be:eb:fd:43:
69:d9:6c:11:39:8a:7d:bf:ee:89:a6:17:71:39:2f:0a:11:28:
43:1b:55:ed:8a:e8:0d:88:70:a7:f1:6f:98:67:2d:0c:81:df:
e4:b1:f0:4e:d7:c5:59:e1:e6:75:2e:16:fb:5a:f4:fc:7c:91:
a9:95:cf:2f:be:06:d2:4f:5f:23:12:92:a4:c8:75:71:73:d9:
f1:5a:18:97:18:18:04:72:82:85:03:a2:1f:60:af:a5:22:eb:
53:8b:b8:c7:60:3b:28:98:66:a0:da:ba:57:c0:f7:94:36:dd:
82:5b:6b:ba:d9:de:b1:6d:33:f5:55:a9:50:3d:57:47:c6:76:
30:97:bd:df:21:84:09:7a:06:f8:90:93:53:ea:50:22:ad:ed:
32:6b:25:0d:a8:c3:06:ce:23:3c:6d:4d:29:e3:b0:d1:7f:40:
ea:87:bb:b2:e9:83:cc:cb:9e:88:2a:f6:12:42:9c:6c:bf:3b:
cf:41:d5:c1:08:91:65:5c:aa:10:b0:e8:fc:8d:d5:45:b0:0a:
60:63:70:b8:90:c8:f4:54:31:77:90:fa:a4:59:79:96:35:09:
0a:5a:81:be:8c:a2:c4:f0:29:2f:4e:a0:b9:08:28:b6:a1:c6:
ab:76:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 12:46:39 2024 by rpki-client on console-ams.rpki-client.org