Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Gc5HBCMH5jyTDNzokUQj2w1xBt8.roa
File: Gc5HBCMH5jyTDNzokUQj2w1xBt8.roa (raw, json)
Hash identifier: L5L4zhEZbx5flyEXM0qIn0DXLaMYV4rZ/TB6Xlta3TI=
Subject key identifier: 19:CE:47:04:23:07:E6:3C:93:0C:DC:E8:91:44:23:DB:0D:71:06:DF
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0192BFA1FC36F48D021B634BADBEE9A48775
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Gc5HBCMH5jyTDNzokUQj2w1xBt8.roa
Signing time: Thu 24 Oct 2024 17:45:17 +0000
ROA not before: Thu 24 Oct 2024 17:45:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.133.24.0/22 maxlen: 22
46.151.32.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
77.36.2.0/23 maxlen: 24
77.36.4.0/22 maxlen: 22
77.36.54.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.232.254.0/24 maxlen: 24
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.246.184.0/22 maxlen: 22
93.120.12.0/22 maxlen: 22
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.74.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
176.96.48.0/22 maxlen: 22
176.96.93.0/24 maxlen: 24
176.107.72.0/21 maxlen: 21
176.110.107.0/24 maxlen: 24
176.110.112.0/24 maxlen: 24
176.110.113.0/24 maxlen: 24
178.159.147.0/24 maxlen: 24
188.191.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 28 Oct 2024 15:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bf:a1:fc:36:f4:8d:02:1b:63:4b:ad:be:e9:a4:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Oct 24 17:45:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19ce47042307e63c930cdce8914423db0d7106df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:eb:36:da:f6:ff:af:1a:3f:bf:3f:00:78:
ed:bf:06:3b:99:77:4a:96:54:55:77:d8:51:e3:18:
f4:ca:f8:67:1b:4c:d7:55:74:00:72:84:1b:ac:6e:
93:5b:25:59:71:97:76:74:19:2d:40:4a:fe:d7:5f:
46:bc:03:18:76:64:93:0a:7a:ed:eb:b0:b2:2c:b6:
dd:46:54:9a:84:c9:ca:8a:b4:d6:83:75:1c:3f:d0:
5e:7d:5c:3f:45:f6:f0:cc:da:36:24:fc:3a:b6:3a:
39:6e:8f:21:8c:2f:de:de:df:14:8b:77:a1:1b:41:
81:46:bc:ab:62:dc:f0:0e:fc:a4:16:9b:51:9e:3a:
44:93:75:c8:53:e1:ce:41:21:4a:82:07:51:b8:5c:
e2:ef:45:8f:64:48:60:e0:48:14:ab:d1:0e:fd:9c:
5b:81:ea:51:a4:0c:65:8d:6e:b1:da:ba:ad:19:a9:
d4:5c:92:3c:72:67:18:55:14:27:78:ab:df:7e:e6:
6c:41:5a:a4:a5:5d:1c:4e:b2:34:35:02:fa:5c:e3:
ea:29:42:f8:37:77:71:aa:93:cf:5c:ac:f9:b3:79:
68:0a:ec:91:7b:aa:95:4b:f5:e0:87:4c:f2:62:eb:
a1:b9:24:3a:a3:e5:5e:71:4f:cc:e0:cf:2a:43:52:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:47:04:23:07:E6:3C:93:0C:DC:E8:91:44:23:DB:0D:71:06:DF
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Gc5HBCMH5jyTDNzokUQj2w1xBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.24.0/22
46.151.32.0/22
77.36.2.0-77.36.7.255
77.36.54.0/23
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.218.252.0/22
91.223.158.0/24
91.228.119.0/24
91.229.6.0/24
91.232.254.0/24
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.222.0/23
91.246.184.0/22
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.46.0/24
93.120.74.0/24
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
176.107.72.0/21
176.110.107.0/24
176.110.112.0/23
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:82:86:4b:e8:eb:1b:c6:95:7b:76:86:04:d8:f2:cf:29:4d:
fa:a2:6b:4f:72:22:4e:74:76:a8:e3:c3:0b:ae:ad:dc:ca:58:
41:a6:14:63:cc:e9:1a:04:39:5f:9d:80:24:da:f7:b9:fd:07:
69:94:d1:97:c9:16:a4:3b:1c:6b:cc:bd:a0:79:88:eb:56:3c:
26:5c:36:b7:cb:15:31:cd:60:95:29:b6:39:1b:aa:c2:8e:7b:
0f:d5:2b:50:c4:47:4d:90:a2:dd:10:e0:7b:d0:8a:66:87:59:
8d:d8:3f:a8:bf:10:c7:2b:95:23:a0:e2:13:28:d5:7b:41:b7:
2b:a4:55:16:de:fe:76:83:e0:03:57:b4:5a:6d:3f:2e:15:7f:
73:ad:2d:26:85:7a:2e:df:82:72:55:6b:bd:b4:b1:d4:bf:71:
1b:9e:61:7f:39:bc:03:f1:ae:36:fc:1f:03:a7:a8:81:a1:b0:
d4:01:78:1e:ef:c5:63:73:c9:63:e6:2a:5d:86:cf:08:2b:79:
15:3e:62:60:73:1b:f0:66:d1:bb:a0:3c:72:5f:d7:b5:a6:44:
67:20:81:75:31:8f:09:7c:e9:0e:8c:f1:d1:f2:16:ba:81:cf:
bb:48:91:8f:4d:36:7f:ca:5e:7f:99:8e:82:de:f6:fc:5d:c0:
7e:e3:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 20:14:21 2024 by rpki-client on console-ams.rpki-client.org