Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NtNclMKzShMIjtB93V5q_fR8aUI.roa
File: NtNclMKzShMIjtB93V5q_fR8aUI.roa (raw, json)
Hash identifier: EEPBgm5YWGNi8iIOZolfp1u9APs2TxXql6S/bWqq7Io=
Subject key identifier: 36:D3:5C:94:C2:B3:4A:13:08:8E:D0:7D:DD:5E:6A:FD:F4:7C:69:42
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0505FB863A749510EC38DA98A175AFEF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NtNclMKzShMIjtB93V5q_fR8aUI.roa
Signing time: Mon 22 Apr 2024 08:57:09 +0000
ROA not before: Mon 22 Apr 2024 08:57:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.8.93.0/24 maxlen: 24
45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:05:fb:86:3a:74:95:10:ec:38:da:98:a1:75:af:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 22 08:57:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36d35c94c2b34a13088ed07ddd5e6afdf47c6942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:57:95:e4:b5:be:fe:3b:b6:7e:c5:48:49:
d7:87:90:0e:5f:52:b3:cf:0f:65:79:41:27:cd:b4:
bd:19:54:75:7d:bd:94:55:81:24:15:95:67:90:70:
2f:07:73:22:dd:52:9a:54:d8:a0:f9:e9:11:a8:7d:
f2:77:6c:44:aa:f4:b7:d8:1d:a3:10:b6:5d:a7:7e:
63:85:db:59:a7:3a:51:b3:16:dc:5c:87:1f:60:48:
ff:83:f2:e3:3d:9e:2f:85:4c:c1:f2:cd:eb:3b:9b:
4c:f5:bd:75:91:3a:6d:cc:91:0a:f3:e7:f1:79:04:
8b:a2:57:45:3c:7b:88:20:12:3a:41:07:87:84:0f:
94:92:d0:c2:1f:87:1d:8a:cb:d3:22:b1:3f:e4:8f:
61:a0:9d:d1:fa:ec:b0:3b:35:1c:01:08:41:e8:6f:
b9:64:54:57:57:a5:5a:5d:ad:00:f6:c3:80:86:f8:
7f:36:46:19:b3:7d:c9:fd:26:ef:56:92:2b:f3:2d:
bb:bb:a9:f8:99:7f:cc:74:a2:77:f0:12:e8:90:66:
a0:84:e5:6f:e9:9e:2f:e9:fc:a6:81:fd:74:d9:eb:
08:e4:bd:ed:96:4e:40:9d:f5:d1:e0:e3:2c:4d:78:
4f:f0:f4:1d:e8:57:65:52:b4:bd:5d:e3:60:8c:1e:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:5C:94:C2:B3:4A:13:08:8E:D0:7D:DD:5E:6A:FD:F4:7C:69:42
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NtNclMKzShMIjtB93V5q_fR8aUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.12.255.0/24
45.66.228.0/24
82.115.211.0/24
141.98.5.0/24
178.215.238.0/24
193.25.216.0/24
193.149.28.0/22
194.180.36.0/24
212.87.207.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
50:20:48:78:d2:3e:94:f4:bd:17:3d:e1:86:bb:cf:33:78:9c:
17:39:a3:32:9b:63:43:6c:f3:55:70:27:57:5c:a3:f7:d6:52:
55:82:18:b4:5b:48:b8:fa:6a:f1:22:78:cc:f4:73:08:47:09:
99:e6:a3:ba:9e:6c:4a:56:91:75:3c:85:cc:b2:c6:f5:01:d0:
3c:2e:28:03:06:51:9e:c1:d6:15:44:bb:f1:2b:29:e9:01:ca:
8f:e8:aa:9c:5f:f0:f1:e9:34:7f:f3:d5:15:51:d6:d1:2b:e3:
56:39:e2:71:45:bc:cb:b8:02:c3:10:fd:23:f2:09:27:17:88:
a7:b7:51:33:61:51:94:23:bb:77:3e:51:0e:72:bc:b1:1a:15:
e7:38:a0:14:00:5f:16:52:a4:58:f2:ea:77:f5:03:25:bb:5e:
d0:64:ab:93:26:85:a3:e7:83:dd:a2:11:1e:3d:5a:2c:af:4c:
8f:6b:ce:a9:82:9b:bb:e6:f6:88:b5:89:2f:c7:68:9f:2a:9f:
b6:a8:4c:4a:fc:99:65:d6:ad:b9:fc:2a:73:6d:ce:6b:40:35:
8d:30:f0:71:1e:07:9c:3a:a2:c6:0c:e0:3c:73:cb:dc:41:0b:
59:12:e3:ac:58:f8:cc:2b:20:e1:f5:05:f9:81:5f:4d:ac:1c:
1b:d4:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:20:39 2024 by rpki-client on console-ams.rpki-client.org