Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ze2p2kAkZDOX8xP8k9sJnBJctM4.roa
File: ze2p2kAkZDOX8xP8k9sJnBJctM4.roa (raw, json)
Hash identifier: XUO4yDGQ3QDBC6CUXHNDP3c9615JHaQyRaoVBccIFMI=
Subject key identifier: CD:ED:A9:DA:40:24:64:33:97:F3:13:FC:93:DB:09:9C:12:5C:B4:CE
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E1825B6B7353558F4C9BD9E6C9BE518B5
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ze2p2kAkZDOX8xP8k9sJnBJctM4.roa
Signing time: Thu 07 Mar 2024 09:01:48 +0000
ROA not before: Thu 07 Mar 2024 09:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 09:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:25:b6:b7:35:35:58:f4:c9:bd:9e:6c:9b:e5:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 7 09:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdeda9da4024643397f313fc93db099c125cb4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:8b:24:b0:e8:20:9a:59:57:bc:d3:f7:a6:
be:7d:86:78:b0:db:2d:a8:9e:e6:0e:16:63:b3:cf:
e3:54:8e:6a:c8:c1:c2:aa:0d:e0:ab:7b:78:08:dd:
16:36:9e:25:a7:7c:72:f7:2b:e8:ca:cf:cd:cd:c6:
22:bc:aa:d7:74:f1:a0:18:48:a0:f7:00:42:53:0d:
e9:16:fb:23:4b:b4:8d:57:ba:c1:00:df:62:21:71:
3f:0d:61:17:a3:c8:19:9e:f9:ec:17:89:55:1a:e9:
50:10:98:6b:39:1b:5b:6d:2c:a5:e2:2f:51:06:a7:
89:8c:0b:4d:0f:95:a5:3a:b4:5b:b8:90:ac:51:34:
56:a3:91:89:e2:14:1b:48:4f:d2:c4:a2:24:1c:34:
ae:b8:d7:f0:b8:d6:74:15:a6:76:94:d6:5d:94:b9:
62:aa:17:0e:3d:cd:86:95:70:ec:9d:32:48:49:e9:
2d:8c:50:d4:71:eb:d0:4a:ac:8a:fc:db:c2:31:c6:
dc:57:50:72:6a:ca:28:b1:85:5b:bc:4d:2b:49:48:
fc:1c:51:d2:2c:ba:cd:bf:c2:1d:44:6b:68:c6:de:
2d:e0:d6:64:84:c1:78:88:09:ea:b1:43:88:63:80:
ea:fa:e9:f3:ac:d4:cf:1b:95:ca:60:6f:a9:61:cf:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:ED:A9:DA:40:24:64:33:97:F3:13:FC:93:DB:09:9C:12:5C:B4:CE
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ze2p2kAkZDOX8xP8k9sJnBJctM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/23
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
Signature Algorithm: sha256WithRSAEncryption
42:60:38:a1:30:8d:4d:7d:f2:3e:e9:78:29:3e:db:10:d9:11:
61:1a:7a:0f:4b:4a:84:43:a8:00:99:4b:87:f7:07:12:5e:d9:
03:5a:0d:c1:cb:65:7c:55:9e:d1:43:b4:39:89:f9:a3:f4:0a:
02:28:f4:63:db:15:0d:7a:70:fb:98:34:ad:45:14:41:e6:20:
d8:77:06:45:91:8e:e1:f9:31:6e:6e:5d:c5:83:a9:50:9e:61:
63:83:a6:59:04:43:25:94:8a:c9:f8:9c:c4:0d:40:cd:79:ad:
3d:42:cf:c5:4f:46:5a:11:72:5d:ea:e6:93:d5:35:f9:41:9c:
4c:11:34:28:29:be:b1:d9:f4:9f:09:8d:64:e3:29:03:dc:ae:
a9:18:e3:de:ac:29:57:6a:65:bd:34:c0:46:55:b1:fa:f8:1f:
c2:9a:16:45:2b:82:18:3e:e5:da:f1:49:da:f9:ad:5a:e3:08:
47:df:04:84:73:1e:4d:64:6f:8f:85:41:0d:2b:59:61:da:62:
14:04:03:c8:e5:50:d9:43:c2:22:de:10:a1:1b:4d:17:24:ea:
f5:fe:fc:40:cc:ce:1f:f5:df:6e:85:65:70:e5:97:67:29:8d:
0f:9b:ce:a5:5e:ad:e0:42:19:2b:fb:20:14:44:23:5a:a6:44:
c3:f2:e7:3a
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAY4YJba3NTVY9Mm9nmyb5Ri1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMzA3MDkwMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGVkYTlkYTQwMjQ2NDMzOTdmMzEzZmM5M2RiMDk5YzEyNWNiNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovSLJLDoIJpZV7zT96a+fYZ4sNst
qJ7mDhZjs8/jVI5qyMHCqg3gq3t4CN0WNp4lp3xy9yvoys/NzcYivKrXdPGgGEig
9wBCUw3pFvsjS7SNV7rBAN9iIXE/DWEXo8gZnvnsF4lVGulQEJhrORtbbSyl4i9R
BqeJjAtND5WlOrRbuJCsUTRWo5GJ4hQbSE/SxKIkHDSuuNfwuNZ0FaZ2lNZdlLli
qhcOPc2GlXDsnTJISektjFDUcevQSqyK/NvCMcbcV1ByasoosYVbvE0rSUj8HFHS
LLrNv8IdRGtoxt4t4NZkhMF4iAnqsUOIY4Dq+unzrNTPG5XKYG+pYc+UDQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFM3tqdpAJGQzl/MT/JPbCZwSXLTOMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvemUycDJrQWtaRE9YOHhQOGs5c0puQkpjdE00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQABbRoAwQA
BbRrAwQBLYMAAwQALYMDAwQALYgFAwQALY2UAwQALY2WAwQALZMsMAwDBANNU8gD
BABNU8oDBAHCdOQDBAHCdOwDBADCkhoDBADCkiQDBADCki8wDQYJKoZIhvcNAQEL
BQADggEBAEJgOKEwjU198j7peCk+2xDZEWEaeg9LSoRDqACZS4f3BxJe2QNaDcHL
ZXxVntFDtDmJ+aP0CgIo9GPbFQ16cPuYNK1FFEHmINh3BkWRjuH5MW5uXcWDqVCe
YWODplkEQyWUisn4nMQNQM15rT1Cz8VPRloRcl3q5pPVNflBnEwRNCgpvrHZ9J8J
jWTjKQPcrqkY496sKVdqZb00wEZVsfr4H8KaFkUrghg+5drxSdr5rVrjCEffBIRz
Hk1kb4+FQQ0rWWHaYhQEA8jlUNlDwiLeEKEbTRck6vX+/EDMzh/1326FZXDll2cp
jQ+bzqVereBCGSv7IBREI1qmRMPy5zo=
-----END CERTIFICATE-----
Generated at Thu Mar 21 15:18:29 2024 by rpki-client on console.sobornost.net