Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/2hXDOdFGfHWaRZYj6MHGOLRcON4.roa
File: 2hXDOdFGfHWaRZYj6MHGOLRcON4.roa (raw, json)
Hash identifier: DJaM/fKtre4EFHitLDX7Q3/JlEY4rDFU6R9t/mgxVgQ=
Subject key identifier: DA:15:C3:39:D1:46:7C:75:9A:45:96:23:E8:C1:C6:38:B4:5C:38:DE
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 018E5593E330695F3D9B4440AF313A61BB57
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/2hXDOdFGfHWaRZYj6MHGOLRcON4.roa
Signing time: Tue 19 Mar 2024 07:18:59 +0000
ROA not before: Tue 19 Mar 2024 07:18:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.0.64.0/18 maxlen: 18
5.0.128.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.32.0/19 maxlen: 19
5.155.64.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
5.155.160.0/19 maxlen: 19
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.160.0/21 maxlen: 21
94.47.168.0/21 maxlen: 21
94.47.176.0/21 maxlen: 21
94.47.184.0/21 maxlen: 21
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:93:e3:30:69:5f:3d:9b:44:40:af:31:3a:61:bb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Mar 19 07:18:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da15c339d1467c759a459623e8c1c638b45c38de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:da:02:78:fd:e7:b6:fb:9b:e3:ed:be:16:
9a:7f:3e:d5:bf:12:39:97:e2:a8:d0:fa:07:23:6e:
84:a3:d7:75:ea:4e:a5:67:bc:3c:27:68:44:56:5e:
f5:db:48:71:cb:8d:7c:a6:af:dc:73:89:51:03:0b:
e6:24:bc:13:93:b7:56:d4:84:c2:ea:2d:6c:87:81:
9f:d3:16:db:fd:71:b4:a1:90:dc:1f:c4:37:fb:9f:
80:4a:9e:18:47:16:f3:3f:57:37:30:39:4a:19:a9:
cb:47:5a:4f:cb:3a:c5:0e:58:58:e2:9b:0c:92:88:
c3:50:11:d4:f9:e4:e1:96:43:64:11:4b:4e:2b:2c:
41:48:24:36:23:61:fc:0c:c3:e6:45:df:c7:06:77:
ed:c7:99:ed:62:68:f6:85:ad:ea:d1:4e:14:a6:c5:
bc:dc:64:01:db:f0:95:f0:77:05:7a:36:bb:1e:bf:
86:27:ff:29:db:99:c3:99:b9:6f:f6:6b:6d:3c:a8:
d2:c7:83:19:4c:6c:70:2e:3d:51:85:cd:d8:fe:4a:
8a:e4:3b:0c:51:0c:b0:5f:70:01:39:8a:75:72:34:
dd:27:72:9a:e5:3a:74:ef:b0:55:c1:a3:db:53:8e:
88:e2:4a:e3:78:ed:71:cb:de:7d:0b:16:3d:57:27:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:C3:39:D1:46:7C:75:9A:45:96:23:E8:C1:C6:38:B4:5C:38:DE
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/2hXDOdFGfHWaRZYj6MHGOLRcON4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.98.255
178.253.100.0-178.253.111.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b5:30:de:38:cc:10:dd:32:57:75:b1:2e:6e:b8:12:eb:a4:
66:14:37:f0:e1:99:d1:c8:0c:75:28:f8:46:3a:04:e4:cf:86:
93:79:b9:73:62:41:c7:17:1e:4a:9c:56:de:82:f0:46:4f:01:
45:29:06:08:fc:eb:93:f2:02:06:70:1c:6e:1d:fc:2e:92:22:
56:44:ef:9c:3b:82:85:8f:1e:57:5c:73:c4:0d:91:c8:92:fa:
d2:2d:e1:14:92:c3:e2:d2:c0:9d:bc:cd:3e:0c:39:1e:52:b7:
70:8e:ea:c0:bb:73:d8:33:f6:08:61:95:58:89:1e:86:b3:53:
9c:ca:f8:ca:57:54:b5:e6:ad:a5:00:02:53:22:38:1c:a5:f3:
5e:c9:ff:9d:5a:03:5a:68:28:f9:c2:87:d6:06:5b:20:79:69:
a8:e3:b4:2d:ee:1d:fc:5f:f8:00:a2:7e:92:5e:88:e8:c5:e2:
92:c7:cd:ab:73:92:9d:c1:30:ca:f9:b0:78:df:fb:33:fb:13:
a1:1d:2e:a3:ee:f6:b5:8f:85:34:bc:b7:de:aa:cf:40:5c:c3:
04:72:82:c4:77:0c:9f:00:c7:19:a6:63:f6:66:65:e1:48:eb:
8e:31:94:6c:61:79:d5:41:ae:f0:41:56:da:97:11:11:7f:6a:
aa:bd:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org