Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NgQ6UwlNWlc_0Tn5c2JwWAffUEA.roa
File: NgQ6UwlNWlc_0Tn5c2JwWAffUEA.roa (raw, json)
Hash identifier: foYS79Busri2F32cC4x97isTsAwQCoWl5LdxDoLfgIY=
Subject key identifier: 36:04:3A:53:09:4D:5A:57:3F:D1:39:F9:73:62:70:58:07:DF:50:40
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0187D8FA1E5FF6C221D6FEF1767CB5561D2A
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NgQ6UwlNWlc_0Tn5c2JwWAffUEA.roa
Signing time: Mon 01 May 2023 20:21:23 +0000
ROA not before: Mon 01 May 2023 20:21:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30938
IP address blocks: 45.12.216.0/24 maxlen: 24
45.12.217.0/24 maxlen: 24
45.12.219.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
5.39.248.0/24 maxlen: 24
5.39.251.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.39.250.0/24 maxlen: 24
5.39.253.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
31.192.240.0/21 maxlen: 21
5.178.98.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.96.0/24 maxlen: 24
5.144.176.0/21 maxlen: 21
5.178.99.0/24 maxlen: 24
5.178.101.0/24 maxlen: 24
5.178.105.0/24 maxlen: 24
5.178.104.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
5.178.109.0/24 maxlen: 24
5.178.107.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.39.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 10:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d8:fa:1e:5f:f6:c2:21:d6:fe:f1:76:7c:b5:56:1d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 1 20:21:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36043a53094d5a573fd139f97362705807df5040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:51:88:7d:b1:5a:be:9a:5b:5c:d8:3f:fc:
b9:7a:9c:52:49:40:08:17:6b:5a:d9:e3:95:30:62:
0b:cf:e0:e7:ed:95:9e:15:1a:de:dd:c9:da:83:18:
7c:c9:04:cd:52:d7:94:54:92:b9:39:ef:4b:d6:01:
da:4d:11:21:e2:06:b3:83:53:9a:76:36:da:f1:ad:
81:90:86:e1:85:a7:5c:50:76:e9:21:e8:2d:61:e6:
8e:b3:b2:f1:04:cb:62:07:1f:dd:24:6a:02:0e:e1:
3d:e0:59:ca:0b:53:71:e3:5b:4e:d9:49:99:29:d9:
a1:9e:60:ae:0b:7d:cb:6b:f5:53:6c:d4:37:84:0e:
dd:d4:af:48:a1:3f:5f:65:02:3b:c4:05:04:6d:49:
4a:c9:60:af:6a:81:3c:fc:66:ba:b4:aa:e9:03:1f:
06:2e:3b:af:d4:86:42:f8:c6:f3:7b:6f:9c:5b:15:
d3:d6:87:24:8f:ce:5c:1a:13:26:77:d6:a8:5f:1a:
31:39:59:78:a4:f6:23:7a:f4:5b:0d:c7:98:10:ff:
9c:b0:91:0c:1c:93:af:b0:7f:e4:20:01:66:b3:e7:
0f:2d:42:67:b4:02:6d:b3:c5:80:c5:83:c2:2e:4d:
b9:7c:02:b0:5e:39:cc:12:0f:25:a8:67:8d:42:57:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:04:3A:53:09:4D:5A:57:3F:D1:39:F9:73:62:70:58:07:DF:50:40
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/NgQ6UwlNWlc_0Tn5c2JwWAffUEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.39.250.0-5.39.255.255
5.144.176.0/21
5.178.96.0/22
5.178.101.0/24
5.178.104.0/22
5.178.109.0/24
31.192.240.0/21
45.12.216.0/22
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
56:7d:28:20:46:b4:80:5e:2a:0d:bf:62:c3:94:00:b0:be:24:
44:69:e0:5f:07:bf:8e:9e:c9:d0:f2:0b:ff:8b:a4:5f:27:fa:
6e:4b:8e:23:b3:3c:5f:d1:7b:a5:fb:99:52:48:8e:68:67:1f:
0e:81:93:29:08:93:90:2e:e9:fa:4a:4f:4b:4f:8b:d3:53:4d:
ec:8f:bc:22:a1:3f:31:30:95:74:39:b6:00:51:53:3c:a0:9f:
64:a2:c5:43:73:8d:b3:dd:d8:2c:1f:e3:74:e0:de:c3:2b:98:
26:98:39:9d:db:e3:62:14:e9:34:d7:6c:b8:c6:b2:08:b8:37:
63:aa:e0:03:46:db:5d:f2:a9:10:58:16:cd:7d:36:10:34:f5:
45:8e:c5:89:da:04:f1:3d:ce:2a:0e:76:8d:fe:35:e4:10:6b:
6e:bd:1f:04:0d:70:61:06:55:72:b5:f2:e3:20:7e:15:41:17:
a3:ed:ee:03:69:b1:a6:61:8f:e0:94:f7:8a:d2:7c:5e:57:f2:
6b:b9:89:09:58:78:53:6f:1c:5f:32:14:27:52:db:e5:62:a9:
0b:8f:24:50:59:c0:9b:49:40:c0:e8:a3:9f:32:2a:50:df:91:
cc:ad:ae:6c:4b:08:85:b9:48:94:dc:04:4b:4d:6f:66:a8:7a:
25:af:7d:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org