Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Nu3xKz7UFvNORshbLZI78fHDmWg.roa
File: Nu3xKz7UFvNORshbLZI78fHDmWg.roa (raw, json)
Hash identifier: pECYpJhqKhfRNbnxWrwZYiLwadjQiQlz83Tn+rIaq9A=
Subject key identifier: 36:ED:F1:2B:3E:D4:16:F3:4E:46:C8:5B:2D:92:3B:F1:F1:C3:99:68
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 018DAB8F26BB40D5B6D9825EE5B2D68B4494
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Nu3xKz7UFvNORshbLZI78fHDmWg.roa
Signing time: Thu 15 Feb 2024 06:58:21 +0000
ROA not before: Thu 15 Feb 2024 06:58:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56740
IP address blocks: 87.252.234.0/24 maxlen: 24
87.252.237.0/24 maxlen: 24
87.252.238.0/24 maxlen: 24
87.252.240.0/24 maxlen: 24
91.149.167.0/24 maxlen: 24
93.125.18.0/24 maxlen: 24
93.125.60.0/23 maxlen: 23
93.125.114.0/24 maxlen: 24
178.172.164.0/24 maxlen: 24
178.172.165.0/24 maxlen: 24
178.172.212.0/24 maxlen: 24
178.172.217.0/24 maxlen: 24
178.172.220.0/24 maxlen: 24
178.172.247.0/24 maxlen: 24
178.172.251.0/24 maxlen: 24
178.172.255.0/24 maxlen: 24
213.184.236.0/24 maxlen: 24
213.184.240.0/24 maxlen: 24
217.21.44.0/24 maxlen: 24
217.21.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 06:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ab:8f:26:bb:40:d5:b6:d9:82:5e:e5:b2:d6:8b:44:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Feb 15 06:58:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36edf12b3ed416f34e46c85b2d923bf1f1c39968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:d9:c3:3f:ad:0c:f9:77:8d:8c:e3:61:77:
91:78:c3:5e:1d:16:20:9a:45:85:a1:1b:b9:30:0d:
c7:60:0a:08:34:1f:ee:e6:35:2b:2b:7e:15:6b:a7:
81:ef:3f:6e:c0:9a:34:fb:2d:7e:88:e1:84:20:1b:
9e:42:e9:66:4c:34:67:0f:b9:56:3f:7b:df:02:6f:
8a:ef:b6:75:0e:6a:00:e5:a5:5c:1f:d7:8d:bb:d1:
06:e4:28:44:df:55:e8:5f:50:a2:ee:c5:09:e5:7d:
11:ca:58:15:c2:e1:fd:e4:20:de:3c:39:9b:ca:a9:
65:c2:ea:1e:3a:78:f3:9c:39:d1:1e:79:7b:af:3a:
cb:97:70:3a:6e:e7:da:09:30:52:f4:e6:15:b6:51:
0b:4c:b4:83:22:34:2d:46:da:5f:d3:25:42:1c:30:
3d:8e:e1:eb:6a:12:b0:7a:40:f1:16:d7:c3:e8:ba:
70:f2:cd:e3:66:06:e8:9f:42:78:29:6f:11:c3:0b:
5e:a7:bf:99:74:2a:e5:7c:77:49:5a:23:54:17:e5:
5b:2e:b4:be:04:49:52:42:99:8d:cd:2f:30:5a:e6:
07:7a:61:98:a8:77:86:43:a6:41:1a:6f:61:b7:77:
39:97:6d:d4:74:ba:fb:c6:8f:30:7c:f2:29:91:ed:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:F1:2B:3E:D4:16:F3:4E:46:C8:5B:2D:92:3B:F1:F1:C3:99:68
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Nu3xKz7UFvNORshbLZI78fHDmWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.234.0/24
87.252.237.0-87.252.238.255
87.252.240.0/24
91.149.167.0/24
93.125.18.0/24
93.125.60.0/23
93.125.114.0/24
178.172.164.0/23
178.172.212.0/24
178.172.217.0/24
178.172.220.0/24
178.172.247.0/24
178.172.251.0/24
178.172.255.0/24
213.184.236.0/24
213.184.240.0/24
217.21.44.0/24
217.21.52.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0d:a0:74:27:2a:97:ef:44:9a:23:f4:20:1b:9a:8c:34:b6:
f8:b5:3a:48:48:71:39:18:73:a0:1a:b4:f8:87:ba:00:ea:7c:
29:5b:35:fe:ac:dd:78:5f:1b:de:de:95:a5:48:b4:56:33:a9:
42:24:37:32:6d:1e:2a:07:45:db:63:81:3c:67:27:6e:49:9d:
5e:4a:40:7a:a5:e6:3c:04:68:77:da:c3:32:ff:30:f7:55:3f:
8b:14:25:5b:2b:31:01:f3:07:f9:75:71:bf:7c:f7:32:d5:21:
73:73:e3:c1:a4:3e:6e:bb:bb:ca:97:bd:75:15:84:6c:f7:27:
64:b1:f4:81:f7:5b:68:55:bc:05:16:d8:d3:88:69:22:09:3f:
23:1b:65:df:a2:f5:88:c2:30:7c:be:15:74:34:29:f7:41:fd:
49:96:09:5e:bb:ee:50:47:6d:88:9c:af:0f:37:a8:4c:92:5c:
3d:81:13:64:fc:00:03:fa:86:5a:3c:c3:6f:03:9c:22:d8:2f:
8d:99:4e:29:81:13:dc:a6:54:06:f4:82:08:09:0b:c6:b4:7f:
36:63:a8:1e:9e:85:ba:d5:ed:37:10:dd:60:03:de:b9:73:28:
39:c1:3f:5b:be:cd:ec:15:d5:f0:54:32:3c:4c:f1:a5:34:bb:
cb:97:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:50 2024 by rpki-client on console-ams.rpki-client.org