Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/ni0zGd48y8CkDZ0zY_vzUOl5Mbs.roa
File: ni0zGd48y8CkDZ0zY_vzUOl5Mbs.roa (raw, json)
Hash identifier: ju6FmF/Xhvm3dr8HBuZi2UDWPEOST5qQ36Lzfz2ReBI=
Subject key identifier: 9E:2D:33:19:DE:3C:CB:C0:A4:0D:9D:33:63:FB:F3:50:E9:79:31:BB
Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial: 018CC8DF721D43177F281030881E052C0EDF
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/ni0zGd48y8CkDZ0zY_vzUOl5Mbs.roa
Signing time: Tue 02 Jan 2024 06:32:16 +0000
ROA not before: Tue 02 Jan 2024 06:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 185.47.131.0/24 maxlen: 24
185.47.128.0/24 maxlen: 24
185.47.128.0/22 maxlen: 22
185.47.130.0/24 maxlen: 24
185.47.129.0/24 maxlen: 24
188.213.4.0/24 maxlen: 24
188.213.4.0/22 maxlen: 22
188.213.7.0/24 maxlen: 24
188.213.6.0/24 maxlen: 24
188.213.5.0/24 maxlen: 24
5.134.112.0/24 maxlen: 24
5.134.113.0/24 maxlen: 24
5.134.112.0/21 maxlen: 21
5.134.114.0/24 maxlen: 24
5.134.116.0/24 maxlen: 24
5.134.115.0/24 maxlen: 24
5.134.118.0/24 maxlen: 24
5.134.117.0/24 maxlen: 24
5.134.119.0/24 maxlen: 24
2a03:c7c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 02 Mar 2024 07:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:72:1d:43:17:7f:28:10:30:88:1e:05:2c:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Validity
Not Before: Jan 2 06:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e2d3319de3ccbc0a40d9d3363fbf350e97931bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:e8:49:82:45:70:82:a5:79:d9:79:0e:82:
07:05:34:58:c8:97:17:f3:0e:bd:44:e0:ca:78:62:
39:aa:42:19:49:e3:36:07:d3:bb:91:bd:1d:a7:73:
4c:48:c0:9f:e9:92:f5:0a:db:67:45:ea:dc:43:ee:
27:db:ff:96:d9:e3:32:9e:6a:d7:9f:8f:72:e2:f4:
6e:47:09:98:84:02:8a:52:cd:7f:f4:08:f5:cd:22:
a3:6e:04:4e:74:77:13:17:7f:3d:00:ff:e9:b0:4a:
f3:ed:35:e9:f5:38:71:74:ad:fe:b0:fc:a6:e4:b2:
0c:1c:f1:57:39:e1:20:51:23:1b:10:b2:cf:38:8b:
22:57:0e:e4:16:5b:79:f8:52:0d:0b:ef:44:02:97:
e4:db:ec:75:2e:3b:12:22:e4:95:d3:ce:25:6e:9b:
57:55:de:59:f6:f3:55:c7:46:84:d4:a8:5b:15:9c:
6e:ed:03:46:fa:76:cb:1e:b2:d4:45:e4:f2:72:35:
8b:ee:3c:c9:07:f1:e9:5c:47:e7:73:3d:99:f8:c6:
8f:a7:05:f2:9f:3c:49:e4:c3:4e:1e:5b:e8:50:13:
1b:8f:4c:c0:8e:37:42:82:2a:8b:8d:5a:b2:b1:45:
12:e5:3d:7e:42:33:5e:4d:e0:09:1e:b4:84:eb:9d:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:33:19:DE:3C:CB:C0:A4:0D:9D:33:63:FB:F3:50:E9:79:31:BB
X509v3 Authority Key Identifier:
keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/ni0zGd48y8CkDZ0zY_vzUOl5Mbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.112.0/21
185.47.128.0/22
188.213.4.0/22
IPv6:
2a03:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:2c:bc:c1:f4:2c:7e:84:0c:01:1d:45:bb:61:a5:5f:81:49:
0c:c8:ff:9b:a5:74:5b:32:e2:b1:f5:e2:0b:9a:fb:c9:6d:77:
8f:a4:1d:ed:0d:54:e1:3e:fd:34:6d:4b:f1:e4:54:27:f8:c6:
51:8d:b0:a1:c0:f2:84:5b:36:a1:e5:ae:f6:a7:1a:76:52:db:
2e:e4:f2:59:46:90:b7:ed:16:6a:a5:6c:3d:d0:47:ba:eb:07:
2d:b0:45:f0:e1:f5:b2:9e:40:ee:07:8e:b5:c3:a6:54:1a:6d:
83:d5:bc:f6:5f:c3:74:54:7a:a4:46:28:c0:2b:38:84:31:13:
8d:40:7c:ad:14:23:c1:c4:51:a9:52:49:c8:64:8b:7e:88:f7:
85:12:76:35:0e:7a:70:c5:d8:01:88:95:b0:50:71:a0:90:8a:
6c:4c:ad:72:51:50:b3:18:ee:cd:40:4c:fd:6b:fe:f0:2d:af:
ec:11:49:9e:ff:e7:f8:7f:68:4f:3c:48:e4:5c:a2:10:91:5f:
f2:34:81:da:68:7e:8b:d9:d3:fc:65:48:4b:3f:36:f3:00:35:
8e:ba:ca:d8:da:4c:f5:3b:89:15:9a:7e:a4:49:7f:39:f6:32:
6e:e2:5a:76:28:79:c7:0f:db:de:61:c4:f7:63:06:eb:98:0e:
78:11:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 07:59:28 2024 by rpki-client on console-ams.rpki-client.org