Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/pXdv44mnV7MzBtUnDrmz11HKDrY.roa
File: pXdv44mnV7MzBtUnDrmz11HKDrY.roa (raw, json)
Hash identifier: 85hrF6kRV9RjiORL6t5m9Xkt4YKRxWwoD7fFazGUMxA=
Subject key identifier: A5:77:6F:E3:89:A7:57:B3:33:06:D5:27:0E:B9:B3:D7:51:CA:0E:B6
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 01907771B3DD2B1C15E3CB6A892DFAC61D06
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/pXdv44mnV7MzBtUnDrmz11HKDrY.roa
Signing time: Wed 03 Jul 2024 07:14:18 +0000
ROA not before: Wed 03 Jul 2024 07:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.0.32.0/21 maxlen: 21
5.0.40.0/21 maxlen: 21
5.0.48.0/21 maxlen: 21
5.0.56.0/21 maxlen: 21
5.0.64.0/18 maxlen: 18
5.0.128.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.0.0/21 maxlen: 21
5.155.8.0/21 maxlen: 21
5.155.16.0/21 maxlen: 21
5.155.24.0/21 maxlen: 21
5.155.32.0/19 maxlen: 19
5.155.64.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
5.155.160.0/19 maxlen: 19
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.32.0/21 maxlen: 21
94.47.40.0/21 maxlen: 21
94.47.48.0/21 maxlen: 21
94.47.56.0/21 maxlen: 21
94.47.64.0/19 maxlen: 19
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.160.0/21 maxlen: 21
94.47.168.0/21 maxlen: 21
94.47.176.0/21 maxlen: 21
94.47.184.0/21 maxlen: 21
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.99.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
178.253.112.0/22 maxlen: 22
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 19 Sep 2024 10:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:71:b3:dd:2b:1c:15:e3:cb:6a:89:2d:fa:c6:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jul 3 07:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5776fe389a757b33306d5270eb9b3d751ca0eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:ac:a7:df:6d:6a:12:d4:0f:ef:7f:be:cb:
f8:d4:52:99:d8:c0:8c:07:a6:b3:32:1e:ed:ac:4e:
10:b3:4d:95:a9:bc:57:4a:40:7a:ac:10:e1:07:2c:
fc:00:a6:1e:9e:17:81:3c:dd:eb:7b:45:27:dd:d1:
33:a0:ef:04:45:c0:a2:14:1e:5a:00:6d:78:40:90:
45:98:34:46:bf:5b:e0:51:d1:b8:1b:61:6f:bc:9d:
b7:be:8f:d1:a1:bc:0b:e7:e9:4d:18:34:67:4c:00:
82:4a:d9:42:c9:8b:3f:07:68:9c:79:cc:33:84:41:
bc:2c:b4:8e:0e:b4:1b:68:26:fb:e4:77:7a:20:1e:
2c:4c:6c:44:c2:12:60:af:b6:f2:22:87:90:b2:7c:
3d:f4:9c:21:89:4b:13:27:37:93:28:81:d8:d8:ab:
d4:6f:2e:1e:a7:ff:a2:0b:6b:3a:a4:c1:16:9a:8b:
9a:39:69:91:98:9b:cc:10:84:46:e7:03:1d:fa:a5:
d9:25:99:2d:8d:47:77:22:6c:dd:68:d2:90:aa:e6:
f4:d6:a1:82:16:f8:80:75:51:5e:de:2a:d8:32:8f:
38:9f:e3:eb:4b:a0:f3:53:14:8f:c1:7b:07:a3:ee:
75:5c:fe:c2:e8:e1:b6:97:48:0f:9b:54:fa:69:91:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:77:6F:E3:89:A7:57:B3:33:06:D5:27:0E:B9:B3:D7:51:CA:0E:B6
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/pXdv44mnV7MzBtUnDrmz11HKDrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.115.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
43:e3:a8:02:8b:6f:22:80:c6:6b:c8:1d:97:ab:98:7c:37:d7:
27:45:34:4b:27:90:c7:7e:37:9f:04:b3:73:20:3a:e7:20:77:
1a:b2:e6:66:56:89:b6:91:25:33:5f:48:2a:9e:35:63:b0:88:
de:02:03:32:c3:29:12:9f:3e:bb:7b:b8:f7:5e:f2:94:1e:b9:
04:9b:fc:1c:64:eb:c4:1d:5c:a0:d1:66:15:a8:de:e8:80:68:
57:58:44:1a:95:12:95:89:57:99:f4:fb:98:6e:79:8f:ce:69:
72:5b:8f:10:1c:51:61:ba:ee:04:4c:4e:7c:0f:a1:b5:63:6a:
5a:81:21:6f:dc:cb:de:9c:f5:08:9f:8d:ca:b4:72:5d:67:d6:
a9:fa:8a:7e:34:86:21:56:81:a5:50:d0:b6:ee:44:8b:ae:6a:
42:53:1d:c5:5d:b4:96:02:22:73:57:27:43:db:1b:4c:2d:77:
55:b3:83:bf:84:ee:03:e5:fc:33:64:cb:91:59:e2:7d:ef:09:
5f:17:a5:8b:04:7c:3c:6a:07:0a:6d:ce:c3:9f:dc:16:84:46:
74:92:41:a0:5b:68:73:48:b5:f8:d9:d5:82:9d:fe:85:14:a9:
92:f4:72:a4:95:7e:67:50:0b:83:f0:72:b6:0f:77:7c:73:a5:
75:e6:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:07 2024 by rpki-client on console-fra.rpki-client.org