Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/PKwLv4gycur9-PT_xh65FbGGp0Q.roa
File: PKwLv4gycur9-PT_xh65FbGGp0Q.roa (raw, json)
Hash identifier: 271gyG2Q7xtMJlNfxc+E2Gb6utUTjnMf6NBWEHOiUWg=
Subject key identifier: 3C:AC:0B:BF:88:32:72:EA:FD:F8:F4:FF:C6:1E:B9:15:B1:86:A7:44
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01920048437578B647C95B184645E4FCC612
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/PKwLv4gycur9-PT_xh65FbGGp0Q.roa
Signing time: Tue 17 Sep 2024 13:59:48 +0000
ROA not before: Tue 17 Sep 2024 13:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.136.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 12:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:48:43:75:78:b6:47:c9:5b:18:46:45:e4:fc:c6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 17 13:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cac0bbf883272eafdf8f4ffc61eb915b186a744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:ec:9f:b9:61:8d:31:db:75:e4:bc:31:e4:
23:bf:8e:53:20:fd:fc:ca:a1:20:16:9d:ba:59:a0:
9f:c5:cb:cb:56:f1:b0:34:d7:4c:5d:32:3d:80:c0:
c5:a0:e8:69:18:ac:1b:92:77:da:9a:e0:3b:1d:d7:
2e:55:25:d4:ac:fa:af:cd:86:aa:76:a7:b6:87:65:
04:b3:19:ed:26:ce:c0:90:fa:48:4c:49:f4:f5:37:
cc:bd:52:28:c2:13:70:a2:c1:bb:8b:a7:a9:d4:a5:
40:88:1b:6e:97:30:1d:31:57:87:65:d0:15:bd:1f:
37:6c:25:89:05:db:3b:21:ad:64:6b:f3:dd:6a:9c:
e0:e2:d4:13:2c:4d:12:a4:85:d3:f2:89:d1:d7:93:
b5:80:ae:99:86:e0:ed:fd:e6:39:e6:d7:a8:90:c2:
08:20:df:c7:e2:30:5c:c7:15:7e:84:97:83:c0:8c:
82:af:d1:6f:1c:de:f8:6f:cb:9e:eb:d2:31:fe:59:
ee:9d:9e:48:cc:4d:5b:b1:61:b3:28:d6:0d:94:69:
49:f1:b9:da:80:b4:40:34:2b:ee:8d:3c:d3:1d:35:
4c:ab:98:86:6c:b1:68:12:f4:04:da:f4:26:88:f0:
2a:09:9f:e5:2f:99:fe:5a:6b:49:91:76:46:b6:63:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:0B:BF:88:32:72:EA:FD:F8:F4:FF:C6:1E:B9:15:B1:86:A7:44
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/PKwLv4gycur9-PT_xh65FbGGp0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.10.0/24
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
62.217.129.0-62.217.131.255
62.217.134.0/24
62.217.136.0/24
62.217.138.0/24
62.217.140.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0-62.217.159.255
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
04:5e:d5:f8:9a:e0:cb:69:34:60:af:5c:a8:c0:bf:24:8c:9a:
b0:8d:35:aa:db:75:fb:bf:9c:b2:7b:b8:12:75:48:cb:0e:55:
16:17:b1:96:d7:e0:e4:66:6b:4e:b8:cf:13:6d:99:cc:96:c8:
58:8b:0a:62:a2:e7:d5:1c:a6:74:fd:0e:e4:50:30:80:f6:3f:
3c:59:37:82:0d:6f:a6:fb:72:3c:21:86:15:29:81:8d:24:67:
8b:14:59:24:b8:19:68:19:bb:db:14:39:5f:8e:12:c0:7e:97:
ab:a0:56:f5:7c:79:cb:00:e9:9e:b0:76:04:45:48:e8:16:27:
d6:e8:fb:0c:29:e4:e5:3a:8a:10:5a:b4:46:55:c1:35:70:b3:
d3:20:c2:4c:81:d9:d4:53:d9:6c:62:4f:30:e8:cd:df:ab:5f:
9c:16:ba:b7:67:89:60:ff:db:ae:39:71:4b:b3:95:a8:7d:82:
ff:af:9a:71:5b:af:34:22:62:73:c5:33:cf:35:41:74:eb:71:
67:e7:b4:8c:a4:9a:77:b3:81:9f:07:b8:bf:53:5f:7e:b7:8f:
77:81:e8:65:6b:1a:82:9d:82:e4:dd:d4:1e:d4:53:41:61:ce:
88:85:90:e3:48:c4:73:40:d7:d6:b9:55:93:1b:30:f9:03:df:
dd:99:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:08 2025 by rpki-client