Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/cNcqtt24VnFPFsgNNwIWuUjtrEk.roa
File: cNcqtt24VnFPFsgNNwIWuUjtrEk.roa (raw, json)
Hash identifier: tr9P9mvK8W5nFti3iHB0Eu1CMFZfoll+nC5DD1yrO6c=
Subject key identifier: 70:D7:2A:B6:DD:B8:56:71:4F:16:C8:0D:37:02:16:B9:48:ED:AC:49
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 0192AF96047647D6E13720B084B3785D1E52
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/cNcqtt24VnFPFsgNNwIWuUjtrEk.roa
Signing time: Mon 21 Oct 2024 14:58:17 +0000
ROA not before: Mon 21 Oct 2024 14:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 5.252.206.0/24 maxlen: 24
45.67.232.0/24 maxlen: 24
45.67.233.0/24 maxlen: 24
45.67.234.0/24 maxlen: 24
91.230.149.0/24 maxlen: 24
185.130.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:96:04:76:47:d6:e1:37:20:b0:84:b3:78:5d:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Oct 21 14:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d72ab6ddb856714f16c80d370216b948edac49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:87:56:f9:cb:50:72:18:9e:4e:63:a7:80:
67:ad:08:84:44:af:27:4e:2a:89:29:99:6e:13:05:
f6:33:f0:3e:2c:56:fa:f6:f9:66:f1:e6:9f:28:f2:
17:23:60:a7:5b:1b:f0:ab:dc:01:a4:48:86:a0:8b:
24:60:49:77:d0:62:06:67:d0:fb:3e:b2:e7:6e:df:
c9:73:97:b5:5c:f4:8a:c5:db:29:51:41:ce:76:dc:
da:52:0c:f5:4a:fd:7e:13:3d:ab:6e:e9:30:51:8b:
87:c4:0b:67:82:3e:82:97:23:f8:5d:45:ea:b7:73:
55:4a:34:ed:f0:bc:9b:a0:e5:4d:48:6a:f5:78:5c:
4d:b7:aa:a1:2e:e5:b6:fb:5f:6d:d6:be:a4:ce:df:
f0:bf:49:12:38:f6:ca:ee:82:03:9f:bc:30:84:b6:
09:4d:55:9f:ad:d5:5f:74:97:08:c2:9e:17:48:50:
a6:76:b7:48:aa:5d:f7:2d:34:ca:c2:0e:e6:32:4c:
3a:ce:f2:25:75:d6:5f:15:ae:76:65:4d:97:4a:24:
26:17:ba:cd:f4:a3:cd:30:a6:32:32:35:f8:3f:33:
0f:ce:a4:24:f4:06:a5:fc:8b:d2:cc:8c:3f:c6:e1:
39:3f:72:a0:79:bf:19:30:e8:b5:eb:41:05:15:df:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D7:2A:B6:DD:B8:56:71:4F:16:C8:0D:37:02:16:B9:48:ED:AC:49
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/cNcqtt24VnFPFsgNNwIWuUjtrEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.206.0/24
45.67.232.0-45.67.234.255
91.230.149.0/24
185.130.56.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c3:26:9a:b7:bc:79:cf:49:ea:4b:d7:d3:b4:8f:8a:5b:e4:
d3:a6:9c:1f:f5:a9:d9:a7:6b:54:db:9d:19:c1:9d:d2:b4:65:
22:98:8a:72:df:36:38:43:6d:4c:6b:20:3b:41:d3:31:d8:04:
c6:e9:a6:c3:36:89:d5:cb:51:f1:83:2a:8f:c0:89:99:10:82:
76:57:db:b4:de:8c:f1:0b:01:24:f0:0a:eb:f3:6a:7b:f0:ea:
f3:85:92:63:35:fd:dd:92:3d:cc:f8:fe:7a:c3:b6:79:de:e5:
d6:ed:c4:e9:a9:55:fc:7a:81:5c:02:51:79:57:f0:0b:20:3d:
f4:e9:fe:cd:c5:86:01:62:bf:18:d7:98:ac:50:68:f5:4c:48:
e3:1f:35:10:c6:7c:f2:57:92:f7:fa:8d:75:91:4c:3c:84:2a:
04:ba:d8:95:30:c1:3d:02:33:d1:43:17:96:65:d7:aa:3a:79:
43:1a:4b:7f:1e:87:4e:85:6b:11:b7:dc:5e:3b:26:21:f4:b1:
ce:1c:3d:b7:72:78:b1:56:85:3b:3e:06:08:7b:44:fc:58:1b:
9d:a0:9f:70:da:e4:7f:1a:b5:7f:44:cf:b3:bd:8b:fe:e5:6f:
6a:01:e5:b9:8f:b3:35:20:55:6b:76:85:0e:fa:03:5f:d7:4a:
c5:a6:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:50 2025 by rpki-client