Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/NFOgvrHehRUUUMPTsnwnBTgGUSo.roa
File: NFOgvrHehRUUUMPTsnwnBTgGUSo.roa (raw, json)
Hash identifier: WTfhFIJtUoWNtsZq4RlgXyBoUzj9vjLwLrzi9umrzfk=
Subject key identifier: 34:53:A0:BE:B1:DE:85:15:14:50:C3:D3:B2:7C:27:05:38:06:51:2A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018F70F9E93B1F514628A56356CFF6E29B86
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/NFOgvrHehRUUUMPTsnwnBTgGUSo.roa
Signing time: Mon 13 May 2024 08:02:57 +0000
ROA not before: Mon 13 May 2024 08:02:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 10:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:f9:e9:3b:1f:51:46:28:a5:63:56:cf:f6:e2:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 13 08:02:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3453a0beb1de85151450c3d3b27c27053806512a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:2e:95:b1:ef:11:00:b1:a8:7b:f0:ff:51:
79:0b:09:14:66:1a:ec:11:9f:31:ee:33:94:05:91:
be:69:28:49:c8:dd:90:69:d9:31:68:e9:81:e3:5b:
83:d1:fc:a3:62:ba:26:4f:cd:61:91:32:50:00:6a:
d0:05:b7:77:a8:6a:91:f3:38:99:c6:4b:db:ee:54:
86:e1:c8:21:4b:ec:3f:2c:fc:fa:5a:fb:dc:b1:45:
98:09:50:be:a7:2b:ee:90:7b:94:53:d1:5c:d5:df:
0f:38:2e:5b:85:84:84:9e:62:fc:13:7b:78:2d:6a:
00:b0:8f:52:b2:d2:a4:f7:1f:e6:86:28:af:34:82:
e4:03:7b:e0:fd:26:c6:86:1a:37:23:db:48:c9:3b:
48:f6:7b:22:02:57:4d:d6:32:bc:49:ed:3e:a1:18:
74:73:a1:f2:2a:1f:e7:b0:14:b8:94:6b:23:04:bd:
7c:df:18:37:67:56:ba:93:3d:13:df:58:b2:61:8e:
b1:eb:80:a9:61:f4:01:eb:03:d9:0c:7b:ff:b0:97:
56:1a:27:00:06:b6:f3:bc:2e:4d:af:33:17:86:a1:
48:f3:00:ee:dd:78:3b:e7:b7:d4:33:c6:98:2f:81:
ab:1e:25:84:4c:a4:41:54:82:b3:42:23:e1:21:0a:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:A0:BE:B1:DE:85:15:14:50:C3:D3:B2:7C:27:05:38:06:51:2A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/NFOgvrHehRUUUMPTsnwnBTgGUSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.10.0/24
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
46.23.110.0/24
62.217.129.0-62.217.131.255
62.217.134.0/24
62.217.138.0/24
62.217.141.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0/24
62.217.156.0/22
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
23:74:6e:56:14:a9:80:64:ee:ae:3a:1a:78:2b:38:e9:a5:8c:
fb:3e:8d:56:dd:be:22:0d:e3:00:07:54:55:d8:84:95:74:20:
ff:dc:98:63:2a:27:ae:2c:5b:97:95:c5:cb:c8:4c:a1:28:98:
99:d2:84:c1:97:5e:e5:6b:fc:20:60:f4:f8:65:1d:72:1a:17:
3a:04:9b:a7:f8:75:8b:e8:0a:93:fe:19:cb:d9:ab:d5:42:37:
f3:55:77:49:7f:55:95:fc:fc:f5:37:2b:47:7c:e5:6b:e1:57:
64:1b:1f:79:2c:b6:96:f7:63:d4:01:71:66:f4:ac:d4:5d:1d:
34:6d:75:7b:81:02:ff:f4:67:b2:e5:43:d1:b9:01:5c:11:4e:
de:f0:86:3f:c3:cd:bc:37:3b:25:70:7c:2b:c4:2f:61:30:47:
06:db:1f:ca:fb:ac:25:2f:bf:48:71:92:ec:4a:b5:96:14:c5:
57:b2:71:1c:4d:0f:6c:eb:09:fa:49:20:a0:b0:bb:27:d1:5e:
0b:da:6a:8f:ee:dd:24:fc:c9:ec:4b:a2:7a:e4:44:db:27:ba:
e1:c8:ff:48:e7:cf:32:89:95:73:82:43:f7:66:05:30:90:38:
09:96:c2:ef:51:75:50:00:c1:9d:5f:22:ec:cd:76:1d:78:4f:
a8:4b:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 12:58:41 2024 by rpki-client on console-fra.rpki-client.org