Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s5IDhnA42ZA8La1DbgQW_Q75Syk.roa
File: s5IDhnA42ZA8La1DbgQW_Q75Syk.roa (raw, json)
Hash identifier: 3ZhXyZ+lCLIMRCGA8BGFksiKzN+bB7B7lQIkXFQdWqw=
Subject key identifier: B3:92:03:86:70:38:D9:90:3C:2D:AD:43:6E:04:16:FD:0E:F9:4B:29
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0192D369C53E8A3425DDD5BE828889B40C4D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s5IDhnA42ZA8La1DbgQW_Q75Syk.roa
Signing time: Mon 28 Oct 2024 13:56:17 +0000
ROA not before: Mon 28 Oct 2024 13:56:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.171.0/24 maxlen: 24
31.192.179.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
31.192.187.0/24 maxlen: 24
31.192.188.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
87.224.249.0/24 maxlen: 24
87.224.251.0/24 maxlen: 24
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.24.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.64.0/23 maxlen: 23
90.157.66.0/23 maxlen: 23
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.148.0/24 maxlen: 24
94.31.151.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.171.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.178.0/23 maxlen: 23
94.31.184.0/23 maxlen: 23
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.199.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.217.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.224.0/24 maxlen: 24
94.31.226.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.233.0/24 maxlen: 24
94.31.234.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.131.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.142.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.174.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.37.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.41.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 05:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:69:c5:3e:8a:34:25:dd:d5:be:82:88:89:b4:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Oct 28 13:56:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b39203867038d9903c2dad436e0416fd0ef94b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:46:63:96:bf:7f:46:a2:41:b6:97:a8:21:
65:06:f9:22:3e:a0:9b:41:52:1c:71:79:c4:1d:bc:
e9:9b:63:55:8b:8c:28:f0:4f:73:dc:e9:be:15:7c:
ed:ab:ba:d9:65:63:58:30:08:72:6e:14:0a:a0:e3:
20:7f:7a:53:94:ce:a6:0e:c0:29:27:6b:3d:38:38:
f1:52:13:05:85:29:22:60:66:b7:e4:fd:e4:72:bf:
ea:53:96:db:71:e7:77:a7:ea:34:29:7f:98:c9:8f:
57:21:24:d0:ad:50:1d:25:b7:59:c8:6c:f4:67:71:
ea:c7:ec:46:45:96:31:1c:63:ff:4d:0e:00:e5:c9:
a6:3e:b6:de:b9:4a:e5:e0:d1:cc:20:b3:15:26:7b:
cb:ac:a7:d0:a9:65:75:b6:2f:1f:97:19:bc:1e:90:
35:e6:ca:85:ad:79:c8:82:ce:9c:40:c8:53:42:83:
0e:3c:9c:11:f2:0e:e7:83:71:fb:28:3e:b1:3e:3e:
94:ae:75:9d:ef:82:af:12:92:fa:03:ba:95:89:af:
2f:81:08:94:7d:7c:cc:38:7f:0d:c7:5f:e6:c4:07:
5f:c6:80:34:97:43:b9:82:be:ec:26:8e:c6:3a:b3:
ec:cc:4d:77:2b:da:7d:a1:1b:aa:ad:04:41:23:10:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:03:86:70:38:D9:90:3C:2D:AD:43:6E:04:16:FD:0E:F9:4B:29
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s5IDhnA42ZA8La1DbgQW_Q75Syk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.171.0/24
31.192.179.0-31.192.181.255
31.192.187.0-31.192.188.255
46.229.96.0/20
87.224.249.0/24
87.224.251.0/24
90.157.5.0/24
90.157.16.0/24
90.157.24.0/24
90.157.30.0/24
90.157.34.0/24
90.157.58.0/24
90.157.64.0/21
90.157.78.0-90.157.83.255
90.157.109.0-90.157.110.255
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.147.0-94.31.148.255
94.31.151.0/24
94.31.158.0/23
94.31.171.0/24
94.31.176.0/24
94.31.178.0/23
94.31.184.0/23
94.31.193.0-94.31.196.255
94.31.199.0/24
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.217.0/24
94.31.221.0/24
94.31.224.0/24
94.31.226.0/24
94.31.229.0/24
94.31.233.0-94.31.234.255
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.131.0/24
188.73.137.0/24
188.73.139.0/24
188.73.141.0-188.73.142.255
188.73.144.0/23
188.73.147.0/24
188.73.151.0/24
188.73.154.0/24
188.73.156.0/24
188.73.158.0/24
188.73.168.0/24
188.73.170.0/23
188.73.174.0/23
188.73.183.0/24
188.73.185.0/24
213.142.34.0/23
213.142.37.0/24
213.142.40.0/23
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c7:bb:22:df:00:96:c7:71:99:dd:11:0a:dd:0b:0f:fc:35:
bb:01:11:63:26:79:ed:b8:33:50:90:09:ff:a6:df:89:64:3f:
7f:e6:4e:5e:09:35:6c:9e:26:3f:d9:7f:cb:16:4f:d4:15:4e:
e0:5b:96:d9:a9:f4:6a:25:6d:0b:7c:d0:73:35:fa:3b:3c:c4:
80:f1:2f:fc:50:6e:3a:1a:6a:cd:14:24:08:b6:9e:da:d9:18:
04:2b:e6:9b:49:05:61:9e:55:63:db:50:92:8c:49:f0:fe:e8:
6b:f3:dc:ea:cd:54:80:c8:b2:14:02:d4:ae:23:57:bd:ee:ad:
6e:ec:1f:7a:18:ab:0f:fa:ad:1d:92:29:8d:58:ed:2f:35:f5:
cc:73:7a:4e:c7:9b:2e:85:3e:a7:f7:2a:7a:7b:ff:dd:9e:5c:
c8:6d:85:ea:4b:a9:7b:af:ce:52:ea:a4:68:5d:12:35:ad:ba:
e6:fc:15:b8:b9:fc:ec:a4:b6:92:5c:6c:97:f6:e5:db:f0:f3:
cd:ca:35:39:6b:8b:ce:53:ea:a6:13:d3:e0:6b:f9:3a:2a:0c:
aa:73:ec:a6:78:10:cf:a2:d6:d3:ca:1f:8a:05:f7:ce:0d:ca:
4a:8c:cd:79:02:36:dc:de:69:30:14:29:28:22:1c:39:47:fc:
43:b8:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:38:17 2025 by rpki-client