Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/D80I5P09WlxTme1fyLuPoa64v0I.roa
File: D80I5P09WlxTme1fyLuPoa64v0I.roa (raw, json)
Hash identifier: xwNYLUYEA0eUoS518qYfLz5zhRbEY+sgWtrFIX/bHsk=
Subject key identifier: 0F:CD:08:E4:FD:3D:5A:5C:53:99:ED:5F:C8:BB:8F:A1:AE:B8:BF:42
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019218DAD9928BC5B38BD24D886CA103B52C
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/D80I5P09WlxTme1fyLuPoa64v0I.roa
Signing time: Sun 22 Sep 2024 08:30:48 +0000
ROA not before: Sun 22 Sep 2024 08:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.128.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.64.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/19 maxlen: 19
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.160.0/21 maxlen: 21
94.47.168.0/21 maxlen: 21
94.47.176.0/21 maxlen: 21
94.47.184.0/21 maxlen: 21
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 22 Sep 2024 21:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:18:da:d9:92:8b:c5:b3:8b:d2:4d:88:6c:a1:03:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Sep 22 08:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fcd08e4fd3d5a5c5399ed5fc8bb8fa1aeb8bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:ae:58:b3:b3:1d:57:c5:40:0f:5e:75:44:
74:74:d6:8e:ef:e9:be:2a:f9:0f:0f:de:53:f9:af:
93:8d:5a:36:ec:99:a1:c8:e3:59:c9:9c:47:37:0b:
ae:03:72:40:13:ca:eb:21:26:fb:3e:a6:ec:58:32:
c9:b2:28:23:98:c8:31:44:57:fa:31:8a:3a:b6:59:
33:3d:91:fb:27:d5:3b:7e:69:2a:c7:26:00:8a:96:
72:ca:4e:d7:b1:a6:08:6a:6c:d0:8e:47:23:47:97:
01:2b:83:12:f4:57:fb:44:2a:38:f4:2f:2e:6b:f8:
b5:55:25:db:9b:b2:91:8a:c7:6e:43:70:67:6b:d6:
9f:0c:03:d8:03:f8:0d:a8:3b:e4:40:c0:59:5e:b9:
da:08:cd:ab:44:b8:cd:43:d1:3a:b6:bd:e1:49:71:
66:93:c0:e7:04:9b:91:9c:b6:dc:d2:21:90:04:01:
f5:46:0c:eb:69:e2:ea:ef:d1:14:b0:9f:04:39:72:
80:bb:aa:25:4b:6d:8d:4a:6b:25:2a:b8:3d:db:a5:
fc:01:7b:7a:dc:0b:9b:b3:5a:1b:f5:36:24:b6:44:
83:6d:c6:15:1c:dd:0e:6e:b8:24:78:0e:94:e8:c6:
d4:7c:d6:6d:76:65:71:7f:f8:7e:06:22:8d:ff:7f:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:08:E4:FD:3D:5A:5C:53:99:ED:5F:C8:BB:8F:A1:AE:B8:BF:42
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/D80I5P09WlxTme1fyLuPoa64v0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
78:6c:db:a1:da:72:7c:b9:8a:9f:c8:43:30:f1:79:b5:14:0b:
96:8e:91:78:12:fa:5a:f6:46:b2:c5:46:b2:10:96:b3:0d:04:
7e:42:29:a0:e4:de:ce:14:ad:6c:65:2b:62:bc:45:fb:7f:0f:
a1:e0:01:37:1b:16:2c:ca:c9:82:7f:35:de:0c:ab:1f:f2:dd:
04:a6:9f:f4:b7:ca:95:ad:08:c9:b9:81:ff:18:76:7a:55:7e:
0a:20:d0:ca:dc:80:86:de:76:40:7e:1f:ba:a9:28:11:d3:3a:
f6:ee:f3:50:91:45:4a:b0:9b:62:a8:04:6d:39:65:b1:c2:6b:
9e:57:d5:37:88:49:2e:12:05:27:b2:e8:98:60:76:83:9c:95:
9a:79:42:5c:06:03:7a:99:d1:64:68:fc:37:38:f1:f2:b4:31:
77:2a:09:ff:92:2c:b0:d1:3b:f6:cd:3e:e8:d5:e3:d1:39:f6:
67:08:71:d2:18:1c:ab:71:ed:ee:3b:c3:25:3f:d4:f3:e3:a6:
3e:a5:29:fa:c1:ce:b2:24:7b:44:9d:97:cc:91:29:f3:69:fc:
4f:2c:6c:d3:01:73:75:a4:c3:b9:c5:53:20:6f:19:b9:a2:e5:
8b:6b:fd:6b:6e:27:02:b0:48:70:58:be:3e:f6:6c:df:7d:b8:
29:d8:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 00:52:45 2024 by rpki-client on console-ams.rpki-client.org