Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/u-z86XzOdj1WEIirWkGp9cXV6ms.roa
File: u-z86XzOdj1WEIirWkGp9cXV6ms.roa (raw, json)
Hash identifier: NszZ0sHXIC3Cm2Q2K2YJ1k0pQ/tdB3iMc5DTxY67+5s=
Subject key identifier: BB:EC:FC:E9:7C:CE:76:3D:56:10:88:AB:5A:41:A9:F5:C5:D5:EA:6B
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 018D51375F142EE458D85A779C6A05A63C67
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/u-z86XzOdj1WEIirWkGp9cXV6ms.roa
Signing time: Sun 28 Jan 2024 17:56:39 +0000
ROA not before: Sun 28 Jan 2024 17:56:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 5.0.0.0/19 maxlen: 19
5.0.32.0/19 maxlen: 19
5.0.64.0/18 maxlen: 18
5.0.128.0/19 maxlen: 19
5.0.160.0/19 maxlen: 19
5.0.192.0/18 maxlen: 18
5.155.0.0/19 maxlen: 19
5.155.32.0/19 maxlen: 19
5.155.64.0/19 maxlen: 19
5.155.96.0/19 maxlen: 19
5.155.128.0/19 maxlen: 19
5.155.160.0/19 maxlen: 19
5.155.192.0/19 maxlen: 19
5.155.224.0/19 maxlen: 19
31.9.48.0/22 maxlen: 22
31.9.56.0/21 maxlen: 21
31.9.64.0/20 maxlen: 20
31.9.80.0/20 maxlen: 20
31.9.96.0/19 maxlen: 19
31.9.128.0/20 maxlen: 20
31.9.144.0/20 maxlen: 20
31.9.160.0/19 maxlen: 19
31.9.192.0/19 maxlen: 19
31.9.224.0/19 maxlen: 19
46.40.128.0/18 maxlen: 18
80.70.120.0/21 maxlen: 21
82.100.128.0/19 maxlen: 19
82.137.192.0/20 maxlen: 20
82.137.208.0/20 maxlen: 20
82.137.224.0/20 maxlen: 20
82.137.240.0/24 maxlen: 24
82.137.242.0/24 maxlen: 24
82.137.243.0/24 maxlen: 24
82.137.244.0/23 maxlen: 23
82.137.246.0/23 maxlen: 23
82.137.248.0/24 maxlen: 24
82.137.249.0/24 maxlen: 24
82.137.250.0/24 maxlen: 24
82.137.251.0/24 maxlen: 24
82.137.252.0/24 maxlen: 24
82.137.253.0/24 maxlen: 24
82.137.254.0/24 maxlen: 24
82.137.255.0/24 maxlen: 24
91.144.0.0/20 maxlen: 20
91.144.16.0/20 maxlen: 20
91.144.32.0/20 maxlen: 20
94.47.0.0/19 maxlen: 19
94.47.0.0/21 maxlen: 21
94.47.8.0/21 maxlen: 21
94.47.16.0/21 maxlen: 21
94.47.24.0/21 maxlen: 21
94.47.32.0/19 maxlen: 19
94.47.64.0/19 maxlen: 19
94.47.96.0/19 maxlen: 19
94.47.128.0/20 maxlen: 20
94.47.144.0/20 maxlen: 20
94.47.160.0/19 maxlen: 19
94.47.192.0/18 maxlen: 18
178.253.64.0/19 maxlen: 19
178.253.96.0/23 maxlen: 23
178.253.98.0/24 maxlen: 24
178.253.100.0/23 maxlen: 23
178.253.102.0/24 maxlen: 24
178.253.103.0/24 maxlen: 24
178.253.104.0/22 maxlen: 22
178.253.108.0/23 maxlen: 23
178.253.110.0/23 maxlen: 23
185.92.88.0/22 maxlen: 22
185.99.100.0/22 maxlen: 22
185.109.212.0/22 maxlen: 22
188.133.0.0/20 maxlen: 20
188.133.16.0/20 maxlen: 20
188.133.32.0/19 maxlen: 19
188.133.64.0/19 maxlen: 19
188.133.96.0/19 maxlen: 19
193.124.10.0/23 maxlen: 23
193.124.12.0/23 maxlen: 23
193.124.26.0/23 maxlen: 23
193.124.28.0/23 maxlen: 23
193.124.38.0/23 maxlen: 23
193.124.52.0/23 maxlen: 23
193.124.62.0/23 maxlen: 23
193.124.68.0/23 maxlen: 23
193.124.86.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 17 Mar 2024 09:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:37:5f:14:2e:e4:58:d8:5a:77:9c:6a:05:a6:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jan 28 17:56:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbecfce97cce763d561088ab5a41a9f5c5d5ea6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:cb:a6:84:18:95:d6:c5:22:be:06:36:27:
42:2e:bc:d7:14:21:d4:e2:9b:0a:5b:40:19:7c:5c:
e8:4a:2f:c8:1c:bc:0e:38:2a:45:9d:bf:81:b9:ea:
92:50:51:b7:80:34:89:44:e7:74:ae:f2:f3:e2:57:
26:4e:ee:5c:8d:03:24:f4:5a:5b:9e:e3:39:0e:6a:
04:4f:cb:5a:1d:a6:4e:2f:fe:6a:6e:32:da:a8:c6:
6e:e4:d5:87:f7:ef:5c:7a:5c:aa:cc:73:53:97:f2:
1f:0c:0c:5b:42:a2:ac:24:3d:09:6e:3f:30:48:11:
9e:9b:fa:0f:bf:51:14:98:1a:7b:8f:3f:3c:10:54:
00:ed:ab:96:ef:d9:fa:25:af:32:2a:db:49:c9:2e:
73:f4:b8:35:8b:cd:a3:c5:c2:4c:1d:25:0f:8b:07:
b7:0e:8e:30:42:88:d3:9d:76:b1:52:74:15:61:5e:
20:07:b8:19:e6:17:f6:17:a6:07:cf:01:4b:e8:44:
41:cf:5c:a5:7c:40:05:83:ee:63:ad:ce:bb:27:e7:
05:e2:70:2f:2a:df:84:a7:82:9e:6c:3d:a9:ac:54:
62:84:44:e6:5e:a0:4b:04:bf:05:15:d7:6a:c2:f1:
3e:04:fa:00:59:37:a8:c6:ee:a5:8b:a7:e9:55:c5:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:FC:E9:7C:CE:76:3D:56:10:88:AB:5A:41:A9:F5:C5:D5:EA:6B
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/u-z86XzOdj1WEIirWkGp9cXV6ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.48.0/22
31.9.56.0-31.9.255.255
46.40.128.0/18
80.70.120.0/21
82.100.128.0/19
82.137.192.0-82.137.240.255
82.137.242.0-82.137.255.255
91.144.0.0-91.144.47.255
94.47.0.0/16
178.253.64.0-178.253.98.255
178.253.100.0-178.253.111.255
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:66:d0:f0:a1:bd:d6:44:e6:7d:69:45:e1:45:4f:69:fd:92:
55:71:61:99:af:ae:ed:dd:af:f7:06:21:06:83:a8:b6:c6:da:
ad:5f:dc:7d:09:01:61:50:e4:65:1a:43:5d:87:b8:85:d3:39:
7f:41:59:d9:41:ee:1b:66:2d:5b:d5:4a:6f:9c:23:ab:85:c0:
05:34:6b:10:fa:ad:8d:8f:5c:4f:f1:10:8a:ac:50:2d:8c:b8:
3e:8e:d0:98:d7:b9:4e:5d:fe:2d:00:9b:ae:c3:14:cf:7b:18:
28:88:6a:1a:39:92:41:08:c0:69:15:e9:23:3b:3f:18:32:ab:
78:99:b8:94:48:c1:a0:e7:b3:1e:0c:2c:01:8d:4f:5c:c3:8a:
e4:2e:93:3d:b5:88:38:c7:83:b8:e9:9e:54:b3:2f:4f:52:ca:
a8:b0:ea:88:71:32:93:9d:64:0c:52:11:9d:22:e3:0a:ac:64:
98:b6:6e:05:da:ff:4b:3f:87:d5:3d:11:c2:52:3e:e2:6a:5f:
60:5a:ea:0b:75:03:06:70:e3:a7:56:85:ea:9e:7a:43:1f:6d:
86:86:91:28:bf:ed:e9:a4:e2:2b:ba:27:b5:4f:bd:dc:13:d8:
af:65:af:02:6a:f4:96:f3:43:b7:d3:09:b0:a3:af:af:0e:1e:
c1:4d:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org