Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/CnosuDBIlibX83mPUtV5w1zdDNY.roa
File: CnosuDBIlibX83mPUtV5w1zdDNY.roa (raw, json)
Hash identifier: m5WU85nWCSffE5RFVtidRJi802vSUkmoIEM2Nu4SvTE=
Subject key identifier: 0A:7A:2C:B8:30:48:96:26:D7:F3:79:8F:52:D5:79:C3:5C:DD:0C:D6
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018DF18604E2DCD075DEBEA77366C9EA9882
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/CnosuDBIlibX83mPUtV5w1zdDNY.roa
Signing time: Wed 28 Feb 2024 21:01:48 +0000
ROA not before: Wed 28 Feb 2024 21:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 04:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f1:86:04:e2:dc:d0:75:de:be:a7:73:66:c9:ea:98:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 28 21:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a7a2cb830489626d7f3798f52d579c35cdd0cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:a8:4f:65:6a:4e:a5:5e:fd:98:c0:15:a1:
33:d3:b8:7b:32:df:d8:16:dd:67:5f:6f:d3:34:c9:
a2:e2:26:82:eb:c2:9e:3c:7e:6a:d7:de:37:8d:4a:
66:c8:9d:e8:72:ae:dc:41:84:6c:fa:81:d2:e0:8b:
0e:0f:0b:b4:32:d8:23:09:8d:ad:b7:d2:cc:66:86:
72:b8:11:63:42:ae:bf:ca:53:2e:ce:bb:86:24:28:
ea:cd:a0:bd:ac:13:2e:44:c5:fd:bd:c2:46:e0:85:
43:44:35:f3:f0:74:81:01:df:4a:f3:4a:03:b5:d7:
47:8a:50:31:39:be:b5:19:86:2c:b1:02:d3:5c:83:
78:61:80:88:b9:c7:cf:82:d8:b3:a8:6c:46:b4:60:
3b:3a:fe:87:33:73:f5:3b:fc:b0:6b:f2:9d:1c:e5:
6d:ab:65:2c:2b:87:cf:37:02:b9:42:6a:b7:97:1a:
5d:e3:d5:36:53:1e:04:4d:b3:09:93:3a:1a:ec:c9:
34:01:13:67:6e:77:17:2e:e9:cd:91:2a:ac:36:3e:
8b:2f:06:6a:91:ed:10:16:02:ff:20:5d:e6:d5:dc:
43:1c:6d:c2:98:a9:8d:9b:44:8a:fa:d3:09:76:cc:
86:86:00:d9:91:e5:f6:00:77:21:49:3d:61:68:86:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:2C:B8:30:48:96:26:D7:F3:79:8F:52:D5:79:C3:5C:DD:0C:D6
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/CnosuDBIlibX83mPUtV5w1zdDNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0/22
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.132.0/24
176.46.140.0/24
176.46.143.0/24
176.46.145.0-176.46.147.255
176.46.151.0/24
176.46.159.0/24
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6d:4c:bb:61:88:3a:53:39:94:6d:7c:6d:81:ed:ab:5b:76:
2b:94:a7:c8:ac:5d:fc:cb:50:a8:d0:14:86:0f:ba:92:d8:6c:
74:e5:f9:89:32:29:86:90:81:59:34:06:35:11:c6:3e:71:72:
ab:20:59:a5:a0:64:0c:7e:30:d0:1c:65:98:57:a8:6a:ee:da:
a0:ec:3a:78:b8:8b:1a:4c:21:e2:ce:f6:f5:b2:68:04:d7:e1:
f9:c3:33:49:67:fa:9a:2c:a4:57:12:5c:44:31:3b:b1:e4:5a:
58:6c:a8:f0:a7:ef:1d:5f:27:a3:c9:5f:d5:2f:a4:ff:81:57:
65:fa:24:f1:d4:6f:b8:f3:f2:87:e5:1d:5f:1d:dd:a2:33:eb:
2a:b7:b5:13:68:94:78:34:96:22:d9:86:c2:f0:88:dc:53:1b:
04:85:a5:48:4a:b8:43:8d:e9:7d:41:09:12:0b:f5:19:72:d8:
f3:6e:6d:82:66:14:21:71:6b:ec:2d:40:c9:46:a7:30:7d:e0:
43:07:07:49:b3:b0:cc:6e:62:d5:bd:d6:83:01:8b:26:35:3e:
8d:2a:b5:eb:78:6b:40:af:4e:66:f8:4a:08:ae:16:4a:d9:14:
cc:17:6b:c0:f6:cd:5d:cb:45:52:0b:0e:7f:1b:cd:71:95:0b:
6b:fb:34:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAY3xhgTi3NB13r6nc2bJ6piCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMjI4MjEwMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTdhMmNiODMwNDg5NjI2ZDdmMzc5OGY1MmQ1NzljMzVjZGQwY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufyoT2VqTqVe/ZjAFaEz07h7Mt/Y
Ft1nX2/TNMmi4iaC68KePH5q1943jUpmyJ3ocq7cQYRs+oHS4IsODwu0MtgjCY2t
t9LMZoZyuBFjQq6/ylMuzruGJCjqzaC9rBMuRMX9vcJG4IVDRDXz8HSBAd9K80oD
tddHilAxOb61GYYssQLTXIN4YYCIucfPgtizqGxGtGA7Ov6HM3P1O/ywa/KdHOVt
q2UsK4fPNwK5Qmq3lxpd49U2Ux4ETbMJkzoa7Mk0ARNnbncXLunNkSqsNj6LLwZq
ke0QFgL/IF3m1dxDHG3CmKmNm0SK+tMJdsyGhgDZkeX2AHchST1haIa9pwIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFAp6LLgwSJYm1/N5j1LVecNc3QzWMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvQ25vc3VEQklsaWJYODNtUFV0VjV3MXpkRE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAH6o3AwQC
XkqYAwQAbcugMAwDBANty6gDBAZty4ADBACwLoQDBACwLowDBACwLo8wDAMEALAu
kQMEArAukAMEALAulwMEALAunwMEArkioDANBgkqhkiG9w0BAQsFAAOCAQEAK21M
u2GIOlM5lG18bYHtq1t2K5SnyKxd/MtQqNAUhg+6kthsdOX5iTIphpCBWTQGNRHG
PnFyqyBZpaBkDH4w0BxlmFeoau7aoOw6eLiLGkwh4s729bJoBNfh+cMzSWf6miyk
VxJcRDE7seRaWGyo8KfvHV8no8lf1S+k/4FXZfok8dRvuPPyh+UdXx3dojPrKre1
E2iUeDSWItmGwvCI3FMbBIWlSEq4Q43pfUEJEgv1GXLY825tgmYUIXFr7C1AyUan
MH3gQwcHSbOwzG5i1b3WgwGLJjU+jSq163hrQK9OZvhKCK4WStkUzBdrwPbNXctF
UgsOfxvNcZULa/s0WQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:17 2025 by rpki-client