Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/5iQHeHwrXX4ZCI-GN8bbUOe4NfY.roa
File: 5iQHeHwrXX4ZCI-GN8bbUOe4NfY.roa (raw, json)
Hash identifier: r/7f28xpEoSOTnasKqcWlr6oOsATW8jpaXFo0OwG0ds=
Subject key identifier: E6:24:07:78:7C:2B:5D:7E:19:08:8F:86:37:C6:DB:50:E7:B8:35:F6
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B89E964A5354F6B81A8E8B63DC4BBBAAA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/5iQHeHwrXX4ZCI-GN8bbUOe4NfY.roa
Signing time: Wed 01 Nov 2023 08:04:16 +0000
ROA not before: Wed 01 Nov 2023 08:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 193.124.20.0/23 maxlen: 24
5.35.192.0/21 maxlen: 24
84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
89.34.124.0/23 maxlen: 24
194.135.26.0/23 maxlen: 24
85.204.160.0/22 maxlen: 24
194.88.112.0/20 maxlen: 24
86.107.108.0/23 maxlen: 24
89.39.172.0/23 maxlen: 24
91.232.136.0/22 maxlen: 24
188.211.250.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:e9:64:a5:35:4f:6b:81:a8:e8:b6:3d:c4:bb:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Nov 1 08:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e62407787c2b5d7e19088f8637c6db50e7b835f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:9a:4e:9f:6b:87:2d:61:bf:bb:2d:70:f6:
7e:c0:a6:f7:ee:9c:7f:9c:a2:0f:fd:5c:44:66:98:
bb:bf:5d:80:6c:aa:1a:98:a1:d5:1b:7b:f6:a8:11:
d1:d8:c5:2d:bb:f3:e7:54:5a:ab:84:62:66:1e:82:
f7:2c:81:03:bd:f5:4d:77:12:8b:56:51:de:25:31:
78:ba:85:3e:fb:5b:b3:92:c5:f2:4d:16:65:66:33:
d4:ae:82:0b:f7:ab:32:db:90:a8:cf:4a:01:39:98:
87:10:9b:48:ff:5c:d4:67:63:a4:e5:ad:ee:23:ae:
7a:da:dd:fb:50:9e:87:04:75:45:d8:bb:cc:ee:a5:
ed:d1:aa:91:a2:6b:e1:98:cd:5d:c8:a9:4d:d6:e5:
51:10:63:75:e5:eb:57:d7:6c:af:1e:3f:df:e9:71:
e1:6c:2d:fc:82:4f:7a:56:15:e4:00:4a:b0:4a:1a:
1d:66:ae:75:4e:db:3c:77:b1:23:8b:e5:90:ea:7a:
c0:87:d3:1b:e3:b8:be:51:02:e5:11:e0:b3:4f:3d:
98:02:77:10:21:11:aa:be:21:6b:c5:36:49:38:c6:
d6:11:0a:c1:71:cf:ba:87:cf:a1:81:eb:3d:3b:27:
c0:1a:e3:87:b8:58:8b:66:c7:dd:3a:b6:bd:b2:81:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:24:07:78:7C:2B:5D:7E:19:08:8F:86:37:C6:DB:50:E7:B8:35:F6
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/5iQHeHwrXX4ZCI-GN8bbUOe4NfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
84.234.16.0/20
85.204.160.0/22
86.107.108.0/23
89.34.124.0/23
89.39.172.0/23
91.232.136.0/22
188.211.250.0/23
193.124.20.0/23
194.88.96.0/21
194.88.112.0/20
194.135.26.0/23
Signature Algorithm: sha256WithRSAEncryption
05:24:51:ce:7d:9b:7a:62:0a:1e:ee:e3:43:91:13:92:a6:f5:
d0:0b:78:be:ab:d0:4c:d0:01:e8:3c:2f:03:23:07:d5:52:54:
09:7f:8a:e3:4e:34:36:61:bb:49:61:9f:33:40:29:af:f2:24:
21:ab:66:45:88:50:e5:65:fa:49:bd:43:f6:7c:df:82:a5:d1:
c9:10:bf:27:33:e4:45:59:34:a6:71:91:de:49:1e:29:be:c6:
12:6b:23:e0:cf:29:7f:74:b8:64:98:33:35:74:f7:51:a8:04:
d4:90:cc:16:d7:bc:94:82:0d:e3:6e:31:66:3a:f7:40:34:58:
5a:52:64:63:b0:27:68:10:4f:64:39:16:7c:18:6f:6d:53:34:
0d:7f:e4:ee:26:f0:3a:11:8c:00:78:8c:82:3c:8d:d3:79:af:
5b:c0:75:97:e8:a7:54:08:0a:4b:ea:e0:a2:2d:a5:11:79:a7:
ec:2e:32:58:6f:23:49:cb:ee:5b:de:0f:10:fe:d5:55:d0:df:
19:9e:74:ab:6f:76:b3:0d:ef:7f:30:be:d9:f9:03:45:b4:9f:
62:d3:04:05:5a:c7:b8:5f:a5:f4:80:c8:fa:3d:a6:3d:e4:39:
2d:72:83:17:be:f0:fe:3f:a8:3c:92:2a:88:87:3d:98:10:04:
f3:56:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:15:04 2024 by rpki-client on console-ams.rpki-client.org