Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/F8cpwdwivhthPznQ4bGGquvZOEc.roa
File: F8cpwdwivhthPznQ4bGGquvZOEc.roa (raw, json)
Hash identifier: 7CicrF+ipGiLkxJE78kRDsdGqzROlrxwaECqrYjqyes=
Subject key identifier: 17:C7:29:C1:DC:22:BE:1B:61:3F:39:D0:E1:B1:86:AA:EB:D9:38:47
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018F61E9B3A198A0D30107C004711019172C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/F8cpwdwivhthPznQ4bGGquvZOEc.roa
Signing time: Fri 10 May 2024 09:50:56 +0000
ROA not before: Fri 10 May 2024 09:50:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.133.24.0/22 maxlen: 22
46.151.32.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
77.36.2.0/23 maxlen: 24
77.36.4.0/22 maxlen: 22
77.36.54.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.232.254.0/24 maxlen: 24
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.246.184.0/22 maxlen: 22
93.120.12.0/22 maxlen: 22
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.74.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
176.96.48.0/22 maxlen: 22
176.96.93.0/24 maxlen: 24
176.107.72.0/21 maxlen: 21
178.159.147.0/24 maxlen: 24
188.191.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 Aug 2024 10:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:e9:b3:a1:98:a0:d3:01:07:c0:04:71:10:19:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 10 09:50:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17c729c1dc22be1b613f39d0e1b186aaebd93847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:f9:2c:35:46:cd:9d:29:48:df:12:ff:c5:
c5:d0:23:af:3b:1b:1c:11:b7:1f:fa:a0:bd:c1:29:
e8:09:5d:f9:e3:fe:6d:17:a9:e5:5c:6e:7b:b7:26:
4b:ee:f4:ca:0e:f9:2c:ca:c2:e3:78:84:10:51:29:
7a:8c:a8:86:97:b7:f0:cb:af:48:5e:7b:bd:7a:f9:
a2:67:61:2b:98:6f:41:51:ef:07:67:db:db:1f:60:
31:03:32:75:88:cb:60:a4:2e:07:bc:cf:27:34:e3:
f2:e2:7b:1a:63:22:1e:1e:a8:d3:82:e9:2f:55:cd:
05:83:f3:50:42:5c:bd:02:de:04:63:ea:84:ad:0c:
57:54:e3:4c:34:27:45:e2:80:60:5e:64:83:e3:af:
c2:5a:4c:e5:0a:17:38:ba:ba:b4:cc:eb:c4:66:7f:
69:9c:f1:1e:4f:e0:c8:15:9f:f9:77:94:13:63:37:
0a:22:76:8b:7e:44:61:c3:92:69:6f:c9:25:c0:d0:
82:76:da:9e:e4:eb:9c:c1:b4:cb:89:ff:cd:34:7f:
d9:9a:07:95:4b:86:03:e4:80:9a:34:11:f3:00:f8:
bf:45:e9:6b:4a:b8:71:6f:6b:4f:95:0b:aa:cc:aa:
ad:8c:60:08:58:e1:f5:05:30:bd:a0:7f:ed:0f:31:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:29:C1:DC:22:BE:1B:61:3F:39:D0:E1:B1:86:AA:EB:D9:38:47
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/F8cpwdwivhthPznQ4bGGquvZOEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.24.0/22
46.151.32.0/22
77.36.2.0-77.36.7.255
77.36.54.0/23
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.218.252.0/22
91.223.158.0/24
91.228.119.0/24
91.229.6.0/24
91.232.254.0/24
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.222.0/23
91.246.184.0/22
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.46.0/24
93.120.74.0/24
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
176.107.72.0/21
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:61:b7:9b:f0:68:e0:4a:d9:28:42:9b:31:48:89:f0:24:ed:
a9:05:25:7c:e6:90:53:3b:0d:7e:f1:46:ef:41:85:c3:a4:31:
13:e9:ba:17:9a:a2:f9:30:00:91:cd:6b:cd:c8:8d:b3:95:ef:
69:0a:3a:a5:98:e5:fa:18:4a:25:7a:0f:16:52:f2:5a:e7:37:
eb:ad:86:a3:1b:44:22:da:60:9e:55:e0:9b:51:e6:56:03:de:
a0:3f:91:d8:48:24:7a:00:4f:0f:6b:0a:82:dc:cf:a1:b7:d9:
fd:b8:18:10:04:d1:0b:8b:6c:01:d0:44:c4:eb:b1:1f:2b:c2:
ef:58:a4:36:9e:70:08:b2:a1:75:74:ae:1a:3a:d1:19:ef:f3:
79:d3:e4:d3:6d:52:37:b2:8a:d1:c6:67:7c:81:60:d2:56:10:
87:62:b6:75:b5:7b:1c:65:e8:36:9f:b8:37:65:a7:35:79:c0:
bb:73:f1:68:d8:37:d8:9d:3b:df:83:4a:81:1a:39:af:98:6d:
3a:2c:ec:c1:79:78:59:39:21:58:2a:93:01:ed:89:04:9e:e8:
6d:20:8c:d5:82:e2:44:76:3c:da:60:44:f2:40:07:4f:8b:a0:
13:20:58:9d:36:6a:5e:bf:5b:27:c4:3b:e4:91:84:2c:79:b9:
4b:00:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 16:53:01 2024 by rpki-client on console-ams.rpki-client.org