Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/4NyfDzPs_AG6RvIXDMYHGTGiCY0.roa
File: 4NyfDzPs_AG6RvIXDMYHGTGiCY0.roa (raw, json)
Hash identifier: DsZB/f2eISrlLetZtPgKs+udPuIJM3K8xCAamBc5Sd0=
Subject key identifier: E0:DC:9F:0F:33:EC:FC:01:BA:46:F2:17:0C:C6:07:19:31:A2:09:8D
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 018F391609DC97AD4EA28D750913131060ED
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/4NyfDzPs_AG6RvIXDMYHGTGiCY0.roa
Signing time: Thu 02 May 2024 11:34:56 +0000
ROA not before: Thu 02 May 2024 11:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203053
IP address blocks: 31.14.56.0/24 maxlen: 24
37.156.4.0/24 maxlen: 24
37.156.180.0/24 maxlen: 24
37.156.181.0/24 maxlen: 24
85.204.69.0/24 maxlen: 24
86.105.228.0/24 maxlen: 24
86.107.43.0/24 maxlen: 24
86.107.78.0/24 maxlen: 24
86.107.79.0/24 maxlen: 24
89.36.154.0/24 maxlen: 24
89.37.29.0/24 maxlen: 24
89.39.209.0/24 maxlen: 24
89.40.32.0/24 maxlen: 24
89.40.33.0/24 maxlen: 24
89.42.13.0/24 maxlen: 24
89.44.105.0/24 maxlen: 24
93.113.54.0/24 maxlen: 24
93.113.55.0/24 maxlen: 24
93.114.248.0/24 maxlen: 24
93.119.122.0/24 maxlen: 24
94.176.213.0/24 maxlen: 24
176.126.172.0/24 maxlen: 24
185.146.84.0/22 maxlen: 22
185.146.85.0/24 maxlen: 24
185.146.86.0/24 maxlen: 24
185.146.87.0/24 maxlen: 24
188.212.127.0/24 maxlen: 24
188.212.252.0/24 maxlen: 24
188.212.255.0/24 maxlen: 24
188.214.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 13:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:16:09:dc:97:ad:4e:a2:8d:75:09:13:13:10:60:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: May 2 11:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0dc9f0f33ecfc01ba46f2170cc6071931a2098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:6c:e7:be:9e:03:c9:67:2f:39:c9:b5:73:
99:c3:b4:6d:85:83:d8:f4:84:8f:bf:66:fc:43:12:
19:71:5b:a7:dd:bc:d5:5c:d4:7c:8f:22:08:58:cf:
8b:31:cc:26:3f:9b:99:53:a0:81:93:b0:3a:8a:9e:
14:db:43:dc:c6:3e:e5:2c:17:78:d9:09:fb:86:a6:
3b:ad:d9:f1:1d:7a:94:86:ca:98:61:37:3a:12:98:
1d:18:12:ec:8e:91:dc:d0:6b:c3:26:c2:ce:91:11:
e4:a8:db:88:07:e6:d3:7e:86:32:bf:36:0b:3a:39:
b8:6e:b1:82:35:f6:c7:b2:a6:9d:18:7e:ae:9d:b6:
25:61:3d:0b:b9:f9:6a:aa:2a:8c:f6:94:03:1f:ad:
86:93:28:91:4b:9d:a0:43:a4:e3:1e:44:95:42:01:
0a:3b:10:48:7b:47:51:85:9a:b8:05:d2:c4:36:9a:
94:ec:8c:b0:3e:2a:91:8e:ab:eb:96:65:0c:0b:c0:
e3:29:5e:16:98:4e:6c:17:8a:75:81:5d:ed:44:bb:
6f:65:ee:76:2c:32:cc:72:1d:11:87:fc:7e:9e:b9:
42:7c:1f:46:48:2b:05:23:39:2a:67:70:56:82:8d:
ec:b0:bc:17:57:b9:6a:ae:71:af:e2:fc:41:86:25:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:9F:0F:33:EC:FC:01:BA:46:F2:17:0C:C6:07:19:31:A2:09:8D
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/4NyfDzPs_AG6RvIXDMYHGTGiCY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.56.0/24
37.156.4.0/24
37.156.180.0/23
85.204.69.0/24
86.105.228.0/24
86.107.43.0/24
86.107.78.0/23
89.36.154.0/24
89.37.29.0/24
89.39.209.0/24
89.40.32.0/23
89.42.13.0/24
89.44.105.0/24
93.113.54.0/23
93.114.248.0/24
93.119.122.0/24
94.176.213.0/24
176.126.172.0/24
185.146.84.0/22
188.212.127.0/24
188.212.252.0/24
188.212.255.0/24
188.214.214.0/24
Signature Algorithm: sha256WithRSAEncryption
73:02:33:fd:88:99:7e:c3:c8:30:7c:3d:df:65:ce:ee:15:39:
7a:df:6b:0c:45:ba:6c:07:53:4f:46:c4:90:00:41:e5:ab:60:
7c:91:37:0f:97:6e:f5:74:31:d8:47:ef:1a:fb:a1:a8:4b:45:
0a:b0:73:88:db:9f:4c:8c:75:4d:b1:50:7d:79:7d:76:1b:6a:
8a:f0:56:51:62:08:1a:a7:95:bc:3a:fc:87:47:6c:4e:4d:6b:
cd:fd:43:08:60:29:cd:64:74:33:12:8b:2e:ff:07:a5:e1:fd:
7e:0f:5c:71:66:c6:98:ad:eb:da:79:4d:bf:27:eb:28:6c:39:
04:05:0b:fb:b5:50:cb:25:37:5f:e2:3f:3b:15:1e:63:69:e6:
56:ab:14:e2:0d:47:3c:46:e5:bf:14:20:c1:c5:09:fd:94:f5:
e6:20:77:e7:b3:9e:fa:72:8e:02:c9:f0:45:58:b3:7a:f2:e7:
f1:88:a6:50:7f:12:3b:bc:7a:20:f5:86:00:7c:e7:0d:16:c7:
34:ac:02:85:6a:22:db:ab:57:54:81:97:29:02:fe:4e:7a:9f:
74:27:ca:73:11:bb:65:47:4e:0b:fe:60:09:62:13:4c:36:8b:
e4:70:63:54:c9:1f:f9:7b:99:c3:a5:fb:8d:17:72:8c:70:93:
ee:3b:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:54 2024 by rpki-client on console-ams.rpki-client.org