Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/NTpTJ50GkCufvsk8qrG5sJHhG7M.roa
File: NTpTJ50GkCufvsk8qrG5sJHhG7M.roa (raw, json)
Hash identifier: KX0K3bKRRcz5STAhJGkhPgJuG/OyT7f49GM49SZV+UA=
Subject key identifier: 35:3A:53:27:9D:06:90:2B:9F:BE:C9:3C:AA:B1:B9:B0:91:E1:1B:B3
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01856CCACE2FD00C0169D683A18EC5C628B8
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/NTpTJ50GkCufvsk8qrG5sJHhG7M.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61098
IP address blocks: 159.100.240.0/22 maxlen: 24
159.100.245.0/24 maxlen: 24
159.100.246.0/23 maxlen: 24
159.100.244.0/24 maxlen: 24
159.100.248.0/21 maxlen: 24
91.92.224.0/23 maxlen: 24
91.92.227.0/24 maxlen: 24
85.217.160.0/22 maxlen: 24
85.217.172.0/23 maxlen: 24
185.150.8.0/22 maxlen: 24
91.92.202.0/23 maxlen: 24
91.92.200.0/23 maxlen: 24
85.217.174.0/23 maxlen: 24
85.217.186.0/23 maxlen: 24
85.217.184.0/23 maxlen: 24
185.19.28.0/22 maxlen: 24
194.182.188.0/22 maxlen: 24
91.92.118.0/23 maxlen: 24
91.92.116.0/23 maxlen: 24
91.92.142.0/23 maxlen: 24
91.92.140.0/23 maxlen: 24
91.92.152.0/23 maxlen: 24
91.92.154.0/23 maxlen: 24
194.182.164.0/22 maxlen: 24
194.182.160.0/22 maxlen: 24
194.182.172.0/22 maxlen: 24
194.182.168.0/22 maxlen: 24
89.145.164.0/23 maxlen: 24
194.182.176.0/22 maxlen: 24
89.145.160.0/22 maxlen: 24
194.182.184.0/22 maxlen: 24
89.145.166.0/23 maxlen: 24
194.182.180.0/22 maxlen: 24
2a07:6cc0:11::/48 maxlen: 48
2a07:6cc0:30::/48 maxlen: 48
2a04:c42::/32 maxlen: 48
2a07:6cc0:12::/48 maxlen: 48
2a07:6cc0:41::/48 maxlen: 48
2a04:c42:f12::/48 maxlen: 48
2a04:c41::/32 maxlen: 48
2a07:6cc0:20::/48 maxlen: 48
2a07:6cc0:60::/48 maxlen: 48
2a04:c44::/32 maxlen: 48
2a04:c47::/32 maxlen: 48
2a07:6cc0:31::/48 maxlen: 48
2a04:c46::/32 maxlen: 48
2a04:c42:f11::/48 maxlen: 48
2a04:c45::/32 maxlen: 48
2a07:6cc0:50::/48 maxlen: 48
2a07:6cc0:10::/48 maxlen: 48
2a04:c47:f12::/48 maxlen: 48
2a04:c43::/32 maxlen: 48
2a07:6cc0:21::/48 maxlen: 48
2a07:6cc1::/32 maxlen: 48
2a07:6cc0:40::/48 maxlen: 48
2a04:c47:f11::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 28 Mar 2023 13:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ce:2f:d0:0c:01:69:d6:83:a1:8e:c5:c6:28:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=353a53279d06902b9fbec93caab1b9b091e11bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:2b:71:14:b2:49:4a:de:01:4a:e9:08:58:
83:11:eb:5d:e1:ae:63:44:b3:2e:99:f6:f1:f9:2e:
1e:d1:cf:35:29:41:b8:8b:a4:b8:cb:69:42:53:6b:
54:a7:cf:ec:7f:b5:8c:00:69:fa:61:f6:47:07:a2:
db:f8:68:0a:4d:2c:c7:ea:9f:2d:b3:11:a6:d4:68:
62:4f:32:25:f3:d5:cf:93:c6:5c:91:d8:99:ae:d4:
94:b6:95:99:dd:5f:28:e4:c3:31:60:eb:b0:c6:8c:
a5:1d:0b:10:d4:5d:53:bb:aa:1a:60:64:57:9e:f7:
6b:51:4b:6a:f2:c1:4e:ce:22:ae:f5:96:9b:08:1d:
39:0b:d7:34:2a:d4:25:bb:bc:a5:5f:20:8c:cc:41:
b9:78:b1:e4:cf:dc:1a:fd:34:90:cf:b9:9d:82:e3:
24:d1:4e:83:58:a9:95:e5:ff:68:0b:a4:40:6f:4c:
55:d9:a1:18:6d:f6:c6:f1:a0:af:7e:00:be:a7:e5:
cc:ad:99:d5:77:b5:82:07:59:eb:fd:ae:97:a5:e4:
25:c2:58:bd:5b:0e:62:c4:7b:9a:8b:73:16:c8:c0:
a7:85:ba:e4:f9:68:09:f9:79:aa:31:6d:af:49:4b:
4e:cc:af:90:80:72:34:00:0a:29:e9:7e:72:ef:f1:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:53:27:9D:06:90:2B:9F:BE:C9:3C:AA:B1:B9:B0:91:E1:1B:B3
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/NTpTJ50GkCufvsk8qrG5sJHhG7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.160.0/22
85.217.172.0/22
85.217.184.0/22
89.145.160.0/21
91.92.116.0/22
91.92.140.0/22
91.92.152.0/22
91.92.200.0/22
91.92.224.0/23
91.92.227.0/24
159.100.240.0/20
185.19.28.0/22
185.150.8.0/22
194.182.160.0/19
IPv6:
2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff
2a07:6cc0:20::/47
2a07:6cc0:30::/47
2a07:6cc0:40::/47
2a07:6cc0:50::/48
2a07:6cc0:60::/48
2a07:6cc1::/32
Signature Algorithm: sha256WithRSAEncryption
18:29:4d:fa:04:a0:5b:67:66:2b:e5:b1:32:c2:02:af:8e:f5:
f6:50:38:38:fb:0a:4b:8a:ab:45:54:9d:6f:92:5f:68:8e:a3:
4d:65:35:94:ef:69:d2:c5:85:8c:d2:80:3f:06:c4:9d:4b:8b:
08:c1:31:46:2f:45:d7:79:21:a4:36:49:a5:2a:0e:75:32:85:
00:d0:95:22:b9:53:25:87:29:2a:4c:49:a6:1f:97:0d:62:73:
32:d4:8b:50:84:25:fd:30:8b:41:53:9f:09:fc:32:b3:a0:37:
bd:2e:1a:4d:51:bb:92:df:ec:39:27:2b:ac:9d:03:32:ca:39:
11:92:5a:6c:f2:64:29:6b:a0:0e:15:51:ec:3c:79:78:b6:b9:
8c:a0:99:ec:29:5b:f1:66:8c:01:bf:00:8e:d9:3a:0c:ef:50:
e3:8a:71:6a:18:af:ec:d3:92:7b:76:e3:59:84:e4:83:67:de:
df:32:cd:00:67:90:79:63:20:24:98:b0:e5:b8:cd:d4:8d:05:
42:3e:30:3e:36:5b:a2:15:f7:1f:5f:8f:97:d1:0d:3c:f9:a9:
10:b2:42:56:48:22:41:87:e1:9c:67:56:6b:bc:3c:8d:1c:e2:
b0:fc:94:44:09:0b:e3:40:22:eb:73:6e:73:c5:15:b5:49:1a:
7d:82:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org