Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bs9S0_n--8iHAhGuwQvFKDVC-8E.roa
File: bs9S0_n--8iHAhGuwQvFKDVC-8E.roa (raw, json)
Hash identifier: luihb2n/vF0AHstBZ+xTZYDgh/KU7kT93tXccuTIVPU=
Subject key identifier: 6E:CF:52:D3:F9:FE:FB:C8:87:02:11:AE:C1:0B:C5:28:35:42:FB:C1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE185822D81A23D9552C09E6DF3A3F784
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bs9S0_n--8iHAhGuwQvFKDVC-8E.roa
Signing time: Mon 15 Apr 2024 11:30:06 +0000
ROA not before: Mon 15 Apr 2024 11:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34892
IP address blocks: 5.158.232.0/24 maxlen: 24
5.158.233.0/24 maxlen: 24
5.158.234.0/23 maxlen: 23
5.158.236.0/23 maxlen: 23
5.158.238.0/23 maxlen: 23
85.234.0.0/22 maxlen: 22
85.234.4.0/22 maxlen: 22
85.234.8.0/22 maxlen: 22
85.234.12.0/22 maxlen: 22
85.234.16.0/22 maxlen: 22
85.234.20.0/24 maxlen: 24
85.234.21.0/24 maxlen: 24
85.234.24.0/22 maxlen: 22
85.234.28.0/22 maxlen: 22
185.24.44.0/23 maxlen: 23
185.24.44.0/24 maxlen: 24
185.24.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 06:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:85:82:2d:81:a2:3d:95:52:c0:9e:6d:f3:a3:f7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 15 11:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ecf52d3f9fefbc8870211aec10bc5283542fbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:d8:16:81:31:3e:fc:9d:ac:63:3d:db:ea:
60:70:05:67:98:11:24:41:90:be:48:f3:b5:0a:22:
98:9e:bb:c1:c3:3f:c8:a3:e6:e3:32:b0:be:72:28:
f4:c1:2c:60:03:50:ab:32:68:56:09:99:7c:c3:64:
5e:d7:96:b7:ef:9e:59:4a:db:5d:bc:ba:46:d1:5f:
5c:8e:67:ed:f2:ca:80:c4:65:09:17:43:06:a9:7c:
f6:0f:ec:f5:d9:58:6e:16:6d:28:04:13:63:97:ec:
bc:e3:10:11:be:07:01:cd:7b:e3:42:ea:f5:e8:5f:
8e:a0:4c:55:76:62:65:df:d7:36:c7:ce:fe:b1:22:
ee:ed:76:b4:b8:94:41:67:1c:eb:51:4b:27:82:2d:
51:c6:a3:93:cc:83:a6:6e:4d:4d:3a:08:47:be:07:
59:dc:d7:fa:e9:44:88:17:59:f8:d8:3b:e7:68:06:
66:f2:a8:5f:54:23:b7:5a:db:a6:d0:47:76:24:d0:
5d:3f:9a:89:0b:0e:9c:61:b1:a7:10:de:d2:25:4a:
8b:33:82:3a:9f:8a:27:c0:e1:f3:ca:d4:65:5a:a9:
88:5f:d2:c3:53:37:3c:8b:6f:c0:28:35:50:40:e7:
45:89:9c:3d:4b:fe:42:ed:bb:fa:d9:37:e0:41:ba:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:52:D3:F9:FE:FB:C8:87:02:11:AE:C1:0B:C5:28:35:42:FB:C1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/bs9S0_n--8iHAhGuwQvFKDVC-8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.232.0/21
85.234.0.0-85.234.21.255
85.234.24.0/21
185.24.44.0/23
Signature Algorithm: sha256WithRSAEncryption
24:6c:5b:60:2c:e0:9a:b8:5e:c4:11:50:fa:48:1d:85:e2:df:
9f:06:fc:3c:1e:b9:6b:aa:f1:4b:d9:29:dd:48:92:79:c4:af:
cc:67:02:d0:73:79:21:30:28:b2:61:ba:5b:71:27:b3:1e:36:
dd:f7:c2:25:36:af:3c:7a:be:dc:62:5d:2f:30:e3:17:17:86:
bf:d1:13:6d:13:20:75:61:7a:0e:e9:dc:a2:73:1d:07:52:58:
ae:47:a0:07:f1:8b:9d:80:c9:70:19:98:4f:87:eb:1b:cf:fa:
ac:37:d6:3e:1b:54:65:a2:3d:2f:07:49:a5:b3:1f:72:43:68:
c8:0e:9c:62:c0:04:51:7d:c4:3d:77:75:a9:ed:35:42:61:50:
cc:c6:14:20:5b:e8:42:4b:8c:58:ac:a5:cf:f6:b3:9f:02:1d:
17:75:36:37:63:bc:56:f8:e6:ed:14:2a:bb:06:1b:f3:aa:72:
54:41:52:8d:6f:95:f2:61:ba:ed:9d:18:46:f8:7f:c4:e9:78:
8c:9a:b6:b7:98:53:57:53:70:7a:bd:d3:11:12:a5:d9:e9:d1:
29:8e:da:92:00:9d:7c:b9:96:b5:61:a0:0b:2d:9a:e8:2d:63:
4b:74:57:aa:e3:95:2f:8f:22:0d:60:3b:9f:c1:f5:91:9c:14:
ab:70:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:40:50 2025 by rpki-client