Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/AOUGX1mmqFLZNSTg5_ReKeKDKcw.roa
File: AOUGX1mmqFLZNSTg5_ReKeKDKcw.roa (raw, json)
Hash identifier: OTBv/78R0BGhin1n3grG5ZqzwjqueUnAZQv90ZTuXcI=
Subject key identifier: 00:E5:06:5F:59:A6:A8:52:D9:35:24:E0:E7:F4:5E:29:E2:83:29:CC
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0188F3898819A9D77DB1A8133C418ABF512A
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/AOUGX1mmqFLZNSTg5_ReKeKDKcw.roa
Signing time: Sun 25 Jun 2023 17:10:56 +0000
ROA not before: Sun 25 Jun 2023 17:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.144.176.0/21 maxlen: 21
5.178.99.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:89:88:19:a9:d7:7d:b1:a8:13:3c:41:8a:bf:51:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 25 17:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00e5065f59a6a852d93524e0e7f45e29e28329cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0c:7e:af:97:f5:9a:c0:39:72:4d:ce:5e:d9:
28:ac:e5:d3:7c:27:8a:6a:42:81:89:7e:ab:fa:67:
76:ce:d0:5c:7b:53:9f:9d:00:9a:54:52:be:1a:34:
ec:fe:f1:34:94:eb:77:b4:a7:23:77:c8:01:eb:d1:
99:a4:f7:ab:7e:8a:75:25:c5:c5:15:6c:4f:cb:25:
03:4f:65:99:4e:cf:9f:05:eb:61:ce:52:5e:01:a0:
20:04:38:b0:00:7a:47:de:86:9e:7e:da:b4:71:5d:
4d:22:69:54:d6:9b:c1:1b:4b:0d:89:c3:bc:02:d2:
06:7d:8f:f2:71:50:25:b5:a9:a0:df:5a:94:4c:b9:
e5:36:3e:07:f8:b6:15:06:11:ac:85:36:e9:d6:ef:
53:2f:4b:3c:5a:04:af:2d:24:0d:82:bf:c6:a3:e0:
cf:dd:b9:b9:b2:ce:ab:d7:99:8a:5b:2e:41:c1:96:
27:b9:85:96:f6:f3:93:4e:30:6c:6f:34:f5:8f:0f:
bb:fe:57:4b:9d:f7:52:91:65:1b:87:16:cb:8a:bf:
46:0e:45:cf:8b:93:98:87:6a:fd:d3:57:01:7f:50:
fb:87:b5:cc:d1:cf:17:3f:a2:cf:2f:bd:44:bd:bd:
9c:12:60:37:f9:ed:b5:42:83:84:99:e1:7d:df:4f:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E5:06:5F:59:A6:A8:52:D9:35:24:E0:E7:F4:5E:29:E2:83:29:CC
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/AOUGX1mmqFLZNSTg5_ReKeKDKcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.144.176.0/21
5.178.96.0/22
5.178.104.0-5.178.106.255
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:24:f0:cd:22:8f:d7:c1:7d:f9:d6:ad:88:33:6c:08:78:45:
b4:b9:e6:10:33:d6:e5:17:98:0a:b0:1f:f0:e6:f7:61:1c:25:
c4:1d:a7:7b:b5:4b:21:35:97:fc:26:5e:13:8d:74:58:47:0b:
b2:27:7f:75:cb:1c:37:d8:d7:41:ba:3b:36:29:69:db:95:af:
d0:76:de:6c:07:fb:66:88:52:bb:87:4b:dd:52:50:ce:e2:07:
9b:e9:c7:65:cb:41:6e:22:c1:df:fc:08:8a:ee:a8:f0:fd:d0:
9e:3c:f6:f1:cd:35:1b:1f:aa:19:38:7e:b3:99:f6:cf:90:e9:
0a:39:3b:90:0d:9e:29:2b:64:af:7b:d7:7d:3c:33:7b:1a:17:
9b:c4:7a:23:c3:2a:5c:8e:30:5c:e8:0c:2c:9c:66:a5:3a:7d:
37:a8:39:d7:b1:23:e8:5f:b6:15:2a:ad:ba:74:97:ee:11:43:
e7:2a:30:06:2f:fb:3e:01:74:be:20:82:fd:f7:6b:1c:48:29:
c0:91:30:bc:e7:37:93:e1:8e:d8:b0:1f:a4:6f:ce:6a:f0:a6:
dc:e0:0d:9b:59:c2:43:fb:9e:04:9c:13:2e:67:7d:7d:fa:94:
a6:4d:09:49:35:8e:10:36:cc:67:ac:01:d3:0e:8e:e8:eb:7a:
7e:9f:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:52 2023 by rpki-client on console.sobornost.net