Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/yObBWdlX-9k6HQ1briry7z2epds.roa
File: yObBWdlX-9k6HQ1briry7z2epds.roa (raw, json)
Hash identifier: V4PXc77CcdSzI5++GyApD2qcOu3Gg2Eu5tOsaERxK6Q=
Subject key identifier: C8:E6:C1:59:D9:57:FB:D9:3A:1D:0D:5B:AE:2A:F2:EF:3D:9E:A5:DB
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018E8419C4BF386515483C5054A104082983
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/yObBWdlX-9k6HQ1briry7z2epds.roa
Signing time: Thu 28 Mar 2024 08:07:44 +0000
ROA not before: Thu 28 Mar 2024 08:07:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.45.245.0/24 maxlen: 24
103.45.246.0/24 maxlen: 24
103.241.66.0/24 maxlen: 24
103.241.67.0/24 maxlen: 24
185.47.172.0/24 maxlen: 24
185.53.209.0/24 maxlen: 24
185.139.228.0/24 maxlen: 24
185.144.156.0/22 maxlen: 22
193.168.172.0/24 maxlen: 24
2a06:c5c0:1500::/48 maxlen: 48
2a06:c5c0:1600::/48 maxlen: 48
2a06:c5c0:1700::/48 maxlen: 48
2a07:3b80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Apr 2024 08:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:19:c4:bf:38:65:15:48:3c:50:54:a1:04:08:29:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Mar 28 08:07:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8e6c159d957fbd93a1d0d5bae2af2ef3d9ea5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:45:cc:f3:e0:e8:4e:7b:8a:e2:59:a1:1b:
7f:11:a2:67:ea:fd:68:ef:eb:35:5c:1c:3a:e1:40:
29:0b:a1:94:13:13:2b:41:90:3a:70:24:4b:a5:66:
51:e8:e6:a3:c8:e4:fa:f8:6a:1c:4f:31:2a:c3:1c:
84:2a:42:6e:0c:94:c9:31:ce:fa:27:83:f8:de:72:
80:39:60:41:6b:10:74:29:c9:be:c0:05:04:df:f8:
46:a2:03:2c:47:c2:3c:58:18:1e:93:78:c8:9d:af:
34:6d:c0:c9:22:c9:b2:15:09:d3:38:6f:d1:21:12:
20:c3:20:3d:01:06:ac:49:46:c7:39:c3:95:1b:08:
72:d8:f9:13:f8:96:15:70:15:c3:0b:1c:70:0e:ed:
a8:5c:ce:ca:2b:61:26:e6:e6:68:75:84:25:26:10:
4b:48:7a:62:89:72:74:9d:a1:60:3b:ef:e0:8c:7c:
02:6e:bc:bb:90:f1:43:31:9e:d4:5e:ef:27:e4:6c:
69:d7:f5:25:c3:ab:0d:fd:84:d5:8b:ee:45:3d:ed:
e7:f1:b0:90:11:3e:79:50:ba:39:1d:e4:19:39:fc:
94:bd:9f:f3:66:e4:77:78:d5:c7:ec:bb:5b:16:23:
0f:4f:42:20:5d:12:f2:62:ea:e2:52:c7:6f:07:e5:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:C1:59:D9:57:FB:D9:3A:1D:0D:5B:AE:2A:F2:EF:3D:9E:A5:DB
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/yObBWdlX-9k6HQ1briry7z2epds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
103.13.211.0/24
103.45.245.0-103.45.246.255
103.241.66.0/23
185.47.172.0/24
185.53.209.0/24
185.139.228.0/24
185.144.156.0/22
193.168.172.0/24
IPv6:
2a06:c5c0:1500::/48
2a06:c5c0:1600::/48
2a06:c5c0:1700::/48
2a07:3b80::/32
Signature Algorithm: sha256WithRSAEncryption
0d:3a:3e:49:d4:ed:fe:c0:c0:29:cc:7d:4d:0f:dc:18:ed:ff:
3f:01:94:37:3c:1e:f2:20:64:b5:8c:16:c3:a5:a4:ef:eb:49:
30:3d:82:64:cf:15:10:5b:8e:02:af:d5:d2:32:57:e5:a3:97:
07:fa:e0:94:34:bf:c3:29:7c:ff:27:d5:44:cd:0d:1d:81:58:
ad:b9:60:2b:ff:f1:46:60:09:f3:6e:76:06:cd:b1:4e:bf:d1:
1c:d1:76:57:53:98:b5:be:d2:6f:91:b3:01:d7:06:0b:cc:b6:
0b:6d:05:05:e2:4f:27:9e:59:fb:f7:f9:59:15:8c:b6:97:c5:
50:85:a9:53:f0:5a:36:cf:5c:b6:06:7f:ab:d6:7f:4f:cd:18:
3b:3c:86:84:10:94:16:2b:03:a0:6c:2b:24:92:fc:a7:6e:5e:
3e:68:a8:7d:3b:04:64:03:2a:20:4a:81:19:0d:cc:67:fd:b0:
75:08:ca:03:a8:d3:da:eb:a2:7b:a0:a6:9c:cc:da:51:6a:3a:
88:0a:f7:29:62:3a:a7:90:e8:4b:7e:dd:ce:0a:20:de:a2:5f:
70:de:ba:56:e9:bf:ea:62:28:60:9e:a8:ca:e0:ac:aa:a3:a0:
5e:ff:79:79:f5:d9:a2:c2:ee:0e:fd:06:09:b2:67:14:8c:7e:
e7:53:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:11 2025 by rpki-client