Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9io4obxj4eSUbl1MVPTdZZ3c1k0.roa
File: 9io4obxj4eSUbl1MVPTdZZ3c1k0.roa (raw, json)
Hash identifier: hnsNP0JTtbNmsUKHqT97X+RNZCJ3LT2xmOaGu5YXUdU=
Subject key identifier: F6:2A:38:A1:BC:63:E1:E4:94:6E:5D:4C:54:F4:DD:65:9D:DC:D6:4D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018F0A8B8CE8C015E9E7F7FE208164407778
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9io4obxj4eSUbl1MVPTdZZ3c1k0.roa
Signing time: Tue 23 Apr 2024 10:41:08 +0000
ROA not before: Tue 23 Apr 2024 10:41:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.171.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.68.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.109.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 02:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:8b:8c:e8:c0:15:e9:e7:f7:fe:20:81:64:40:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 23 10:41:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f62a38a1bc63e1e4946e5d4c54f4dd659ddcd64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:b6:bc:2d:4d:8b:3a:22:c1:97:48:f3:ea:
14:37:b8:8a:1a:8b:f8:83:75:dd:67:aa:9f:b1:c1:
a4:38:b8:86:ad:ce:80:3e:c8:2f:f7:da:04:28:85:
39:e2:20:e0:bc:4c:30:4d:2f:99:27:c5:5c:32:8c:
db:69:8c:b7:32:37:76:88:d0:77:43:e5:76:b7:25:
5c:1b:84:5c:56:6f:79:a4:b6:b2:c0:70:9d:c3:5b:
bf:57:dc:ae:c4:85:45:11:b0:3a:56:a0:49:9b:46:
f1:20:b0:c6:7e:f5:f0:8e:bb:e9:86:a2:b3:bb:2e:
47:8c:af:cd:be:1a:af:19:02:40:6c:84:4a:8f:a5:
56:3e:6b:0a:69:59:82:e3:54:74:f2:c2:e3:c8:d9:
7e:b6:3a:9a:ed:72:95:e1:3b:04:61:1a:b7:cc:c3:
5d:49:ed:dc:ac:4c:55:9c:cb:90:d7:72:5e:0d:d9:
df:52:14:73:8c:00:e8:2d:41:fc:a2:98:5c:f6:ef:
45:4c:60:fb:48:c0:c5:80:b2:5f:e8:58:79:bc:67:
8c:94:af:66:58:70:7d:23:d1:7c:a8:f2:af:1d:2b:
07:09:6f:b0:74:7f:76:fe:d9:79:f2:c3:ff:a4:48:
ca:d5:cc:10:0f:8f:80:94:9b:d6:e3:7f:1e:12:f4:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:38:A1:BC:63:E1:E4:94:6E:5D:4C:54:F4:DD:65:9D:DC:D6:4D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9io4obxj4eSUbl1MVPTdZZ3c1k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.171.0/24
31.192.180.0/24
46.229.96.0/20
90.157.5.0/24
90.157.16.0/24
90.157.30.0/24
90.157.34.0/24
90.157.58.0/24
90.157.68.0/23
90.157.80.0/23
90.157.109.0/24
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.147.0/24
94.31.158.0/23
94.31.176.0/24
94.31.193.0-94.31.196.255
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.221.0/24
94.31.229.0/24
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.139.0/24
188.73.141.0/24
188.73.144.0/23
188.73.147.0/24
188.73.151.0/24
188.73.154.0/24
188.73.158.0/24
188.73.168.0/24
188.73.170.0/23
188.73.183.0/24
213.142.34.0/24
213.142.40.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:53:07:01:53:93:f6:85:66:e8:8d:06:3d:6c:a8:e3:92:99:
e5:fa:64:fd:5d:ad:af:92:af:e5:88:70:9a:aa:23:5c:af:db:
02:ce:f9:ae:c3:b6:ab:a1:d1:ba:8e:26:78:0e:00:4d:ca:b1:
e4:1b:a0:36:c1:23:8b:33:09:a3:77:83:9b:1a:07:d4:37:95:
84:4c:54:f6:2d:cc:a8:d6:1e:37:02:9e:4d:77:b8:aa:1c:5d:
5f:ae:be:32:e3:4e:79:85:d4:50:54:eb:ae:ec:47:3d:43:8c:
29:6e:35:b1:dd:f0:1e:1a:04:2d:c6:80:c6:10:85:e5:d2:c3:
3b:61:f7:90:bd:a8:b4:36:46:24:b6:81:7a:22:5d:a9:d4:aa:
e8:51:18:93:7c:73:0c:8d:e4:2c:65:40:0a:fc:48:a9:55:3f:
a3:f3:41:b7:e7:34:28:5c:2d:fc:c7:bc:69:ff:7d:1d:4d:4a:
39:88:69:a8:d7:d6:76:ef:f1:2c:c3:09:97:2d:41:25:5c:64:
a0:25:ca:6f:21:b0:49:70:57:08:85:d7:8a:c1:f2:24:f6:91:
00:25:6a:61:79:bb:77:0b:05:d0:25:9d:63:8e:17:c4:1f:36:
b1:53:03:ad:72:2b:e0:c7:5e:00:df:d9:db:82:fc:63:10:9f:
a5:d1:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:12:23 2025 by rpki-client