Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/qJBLAFt1Uzz-9By7b7LJjKbKb1Y.roa
File: qJBLAFt1Uzz-9By7b7LJjKbKb1Y.roa (raw, json)
Hash identifier: FSfhva0oXqIedB9T/dVCo8npPXtBep2kOqpPELCg+xM=
Subject key identifier: A8:90:4B:00:5B:75:53:3C:FE:F4:1C:BB:6F:B2:C9:8C:A6:CA:6F:56
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018DE9B8563366C73B6FDAECC1768C1B6D5D
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/qJBLAFt1Uzz-9By7b7LJjKbKb1Y.roa
Signing time: Tue 27 Feb 2024 08:39:48 +0000
ROA not before: Tue 27 Feb 2024 08:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44709
IP address blocks: 5.100.248.0/23 maxlen: 23
5.100.248.0/24 maxlen: 24
5.100.249.0/24 maxlen: 24
5.100.250.0/23 maxlen: 23
5.100.250.0/24 maxlen: 24
5.100.251.0/24 maxlen: 24
5.100.252.0/23 maxlen: 23
5.100.252.0/24 maxlen: 24
5.100.253.0/24 maxlen: 24
5.100.254.0/23 maxlen: 23
5.100.254.0/24 maxlen: 24
5.100.255.0/24 maxlen: 24
31.133.100.0/24 maxlen: 24
31.133.102.0/24 maxlen: 24
31.133.103.0/24 maxlen: 24
45.83.40.0/24 maxlen: 24
45.83.42.0/24 maxlen: 24
45.83.43.0/24 maxlen: 24
45.93.92.0/24 maxlen: 24
45.93.93.0/24 maxlen: 24
45.93.94.0/24 maxlen: 24
45.93.95.0/24 maxlen: 24
63.250.61.0/24 maxlen: 24
63.250.62.0/24 maxlen: 24
63.250.63.0/24 maxlen: 24
81.28.7.0/24 maxlen: 24
83.229.70.0/24 maxlen: 24
83.229.71.0/24 maxlen: 24
83.229.72.0/24 maxlen: 24
83.229.73.0/24 maxlen: 24
83.229.74.0/24 maxlen: 24
91.202.168.0/24 maxlen: 24
91.202.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.202.171.0/24 maxlen: 24
91.223.106.0/24 maxlen: 24
91.226.72.0/24 maxlen: 24
91.226.76.0/24 maxlen: 24
91.228.126.0/23 maxlen: 23
103.13.209.0/24 maxlen: 24
103.45.244.0/24 maxlen: 24
109.207.76.0/24 maxlen: 24
109.207.79.0/24 maxlen: 24
185.28.152.0/24 maxlen: 24
185.28.153.0/24 maxlen: 24
185.28.154.0/24 maxlen: 24
185.28.155.0/24 maxlen: 24
185.47.175.0/24 maxlen: 24
185.56.72.0/22 maxlen: 22
185.139.231.0/24 maxlen: 24
185.162.124.0/24 maxlen: 24
185.162.125.0/24 maxlen: 24
185.162.126.0/24 maxlen: 24
185.220.207.0/24 maxlen: 24
185.241.4.0/24 maxlen: 24
185.241.5.0/24 maxlen: 24
185.241.6.0/24 maxlen: 24
185.241.7.0/24 maxlen: 24
185.253.72.0/24 maxlen: 24
185.253.73.0/24 maxlen: 24
185.253.75.0/24 maxlen: 24
188.191.147.0/24 maxlen: 24
194.36.89.0/24 maxlen: 24
194.36.90.0/24 maxlen: 24
194.36.91.0/24 maxlen: 24
195.28.180.0/24 maxlen: 24
195.28.181.0/24 maxlen: 24
195.238.120.0/24 maxlen: 24
212.80.204.0/24 maxlen: 24
212.80.205.0/24 maxlen: 24
212.80.206.0/24 maxlen: 24
212.80.207.0/24 maxlen: 24
2a06:c5c0::/48 maxlen: 48
2a06:c5c0:700::/48 maxlen: 48
2a06:c5c0:900::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Apr 2024 12:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:b8:56:33:66:c7:3b:6f:da:ec:c1:76:8c:1b:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Feb 27 08:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8904b005b75533cfef41cbb6fb2c98ca6ca6f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:da:ee:ac:26:ce:5d:f8:ca:ce:7a:81:3d:
21:62:00:77:cd:81:77:d5:8b:fb:f2:69:6f:a2:ad:
31:ee:65:7b:e0:49:fe:57:3d:36:87:2e:ec:bd:fc:
3f:4c:cf:21:b2:14:31:1a:51:57:3e:c5:5a:17:b7:
a4:6c:09:83:4a:7b:27:28:32:bb:42:65:6f:3e:f8:
73:8b:ab:3c:f3:13:ae:34:50:9c:5f:de:8b:1a:eb:
3f:ee:9c:b2:d4:02:c6:43:83:45:9c:30:24:ba:ff:
26:3d:b8:05:b3:9a:71:54:ee:9f:aa:83:98:ea:09:
ec:37:9d:00:d1:98:1f:dc:6e:05:2a:f0:82:62:5b:
b9:32:55:b7:41:a9:3b:ba:14:52:52:38:72:3e:ae:
37:05:4e:5c:b3:1d:d5:ad:d1:ad:46:55:ee:ee:77:
97:03:e3:f9:60:a6:6f:d4:a1:94:39:e4:1c:8b:87:
9d:fb:5b:04:a0:b4:94:59:c3:08:7e:18:59:fd:8b:
c6:77:a3:42:ba:ac:a2:c1:a6:c5:0e:f1:13:78:77:
13:a7:53:f3:61:cb:fe:cb:21:b7:11:cd:cd:ee:46:
1e:60:04:74:3e:b4:0d:21:e1:24:aa:77:50:73:ff:
e8:36:83:f7:62:c6:98:09:05:3d:14:7c:00:f9:8d:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:90:4B:00:5B:75:53:3C:FE:F4:1C:BB:6F:B2:C9:8C:A6:CA:6F:56
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/qJBLAFt1Uzz-9By7b7LJjKbKb1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.248.0/21
31.133.100.0/24
31.133.102.0/23
45.83.40.0/24
45.83.42.0/23
45.93.92.0/22
63.250.61.0-63.250.63.255
81.28.7.0/24
83.229.70.0-83.229.74.255
91.202.168.0/22
91.223.106.0/24
91.226.72.0/24
91.226.76.0/24
91.228.126.0/23
103.13.209.0/24
103.45.244.0/24
109.207.76.0/24
109.207.79.0/24
185.28.152.0/22
185.47.175.0/24
185.56.72.0/22
185.139.231.0/24
185.162.124.0-185.162.126.255
185.220.207.0/24
185.241.4.0/22
185.253.72.0/23
185.253.75.0/24
188.191.147.0/24
194.36.89.0-194.36.91.255
195.28.180.0/23
195.238.120.0/24
212.80.204.0/22
IPv6:
2a06:c5c0::/48
2a06:c5c0:700::/48
2a06:c5c0:900::/48
Signature Algorithm: sha256WithRSAEncryption
be:ad:e0:ee:10:5e:0f:c5:f4:94:d8:c4:90:86:5d:32:9a:76:
4b:53:24:e7:fa:5e:01:59:a4:bd:38:de:4a:05:a8:28:24:2b:
63:67:a6:6d:dd:45:2a:21:1e:dd:46:9a:4f:78:ed:10:6f:50:
b4:8d:4c:ad:3b:29:ba:60:5f:a0:c0:15:ec:f3:e9:c1:02:7a:
95:d8:49:0f:80:83:9e:88:21:57:64:91:2e:74:d0:3a:93:23:
17:83:17:c5:86:66:29:e3:2b:77:b1:83:b4:9c:bc:9a:ee:a1:
7a:c4:8a:ab:bb:d7:8e:eb:4a:6b:20:99:56:8a:cf:d0:bb:c9:
ac:63:e0:17:6b:42:ab:ef:a2:25:76:4c:c5:eb:14:df:8d:65:
94:87:4f:b2:ea:aa:39:c3:6a:a0:1d:b7:61:0d:7d:0b:9a:29:
1b:10:dc:9a:5b:48:3e:9b:78:20:8d:d1:2e:6f:d3:98:6b:61:
bb:c8:c8:ee:74:9a:6b:f9:5f:ad:56:07:fa:4e:d6:4d:24:40:
2a:4f:df:f3:1c:02:58:c2:b8:72:f6:7c:a5:cf:db:eb:22:6e:
81:af:53:ea:b3:f2:ff:70:b3:ea:49:a1:59:c0:f0:2c:53:64:
2e:3e:97:66:a8:a6:31:0b:0e:4d:12:2e:f7:3f:41:9b:f1:46:
f8:c1:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:36 2024 by rpki-client on console-ams.rpki-client.org