Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/dsHeW9J9fPcu5tjcjIPT4x3TNqw.roa
File: dsHeW9J9fPcu5tjcjIPT4x3TNqw.roa (raw, json)
Hash identifier: ipR0j3RBJ5jAG4stnZozGMwaJnrIkeWb83C/tAYMTFA=
Subject key identifier: 76:C1:DE:5B:D2:7D:7C:F7:2E:E6:D8:DC:8C:83:D3:E3:1D:D3:36:AC
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019179A8ABAB99414901A0E96D49B921E672
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/dsHeW9J9fPcu5tjcjIPT4x3TNqw.roa
Signing time: Thu 22 Aug 2024 10:36:22 +0000
ROA not before: Thu 22 Aug 2024 10:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.133.24.0/22 maxlen: 22
46.151.32.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
77.36.2.0/23 maxlen: 24
77.36.4.0/22 maxlen: 22
77.36.54.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.232.254.0/24 maxlen: 24
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.246.184.0/22 maxlen: 22
91.246.217.0/24 maxlen: 24
93.120.12.0/22 maxlen: 22
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.74.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
176.96.48.0/22 maxlen: 22
176.96.93.0/24 maxlen: 24
176.107.72.0/21 maxlen: 21
178.159.147.0/24 maxlen: 24
188.191.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Oct 2024 09:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:a8:ab:ab:99:41:49:01:a0:e9:6d:49:b9:21:e6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 22 10:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76c1de5bd27d7cf72ee6d8dc8c83d3e31dd336ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:df:0c:7c:8d:bf:88:67:cf:ba:bc:3e:51:
f9:4a:5b:89:d6:3c:b1:2a:39:52:3f:3e:7b:5f:9c:
7a:42:24:4b:d0:c6:f5:3c:b9:92:7c:1b:6d:56:4a:
b1:7c:c1:29:00:c5:27:5d:db:fe:5f:7d:04:30:3f:
54:d6:61:00:be:cc:10:8d:7b:97:8d:01:6b:e2:1c:
eb:37:aa:22:0e:1d:57:20:30:95:6c:ef:8c:43:ec:
c6:dd:ee:5c:d3:c3:5f:53:db:ee:13:18:b4:d2:17:
ef:ba:c7:df:5a:47:45:84:f4:61:dc:b0:9d:b9:3d:
d5:73:8a:28:fa:ba:15:2b:90:e6:ed:f1:d4:37:6e:
49:0a:f0:f6:1e:7b:ef:e9:c2:c1:ee:bd:34:6e:41:
5e:79:a8:37:49:52:86:02:99:df:7e:11:e5:06:84:
1b:2c:5d:9a:d3:19:2c:6f:25:79:ec:3f:f5:6f:63:
09:9d:50:e1:d8:b5:a4:f2:30:93:93:e6:cd:c3:f7:
f0:97:9e:6b:6a:c8:8a:67:65:da:0a:1c:84:80:72:
55:4f:cb:0e:c3:19:8b:3b:0c:89:f2:ef:2a:30:0a:
4b:a8:55:78:5a:f7:37:c3:d8:24:09:de:e0:7f:45:
3f:cf:9f:39:3d:ab:69:86:e0:55:a3:5a:4a:6d:d9:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C1:DE:5B:D2:7D:7C:F7:2E:E6:D8:DC:8C:83:D3:E3:1D:D3:36:AC
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/dsHeW9J9fPcu5tjcjIPT4x3TNqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.24.0/22
46.151.32.0/22
77.36.2.0-77.36.7.255
77.36.54.0/23
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.218.252.0/22
91.223.158.0/24
91.228.119.0/24
91.229.6.0/24
91.232.254.0/24
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.222.0/23
91.246.184.0/22
91.246.217.0/24
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.46.0/24
93.120.74.0/24
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
176.107.72.0/21
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
31:99:ef:93:f1:2b:6e:3d:a1:85:90:76:c3:6e:a5:4e:3a:2f:
44:b5:82:46:5f:d3:f3:2f:f2:59:40:22:c5:76:61:6e:83:4b:
12:bf:63:68:92:17:73:8d:fb:8c:77:b6:e0:a9:f7:85:23:f9:
86:9c:79:77:97:50:8d:ce:5c:54:6d:9b:e7:a4:0e:15:e3:44:
43:64:59:56:39:a4:e4:c5:24:31:4a:32:9a:81:9b:8f:09:5e:
cf:cc:28:3a:a7:f6:ac:f2:74:e7:51:63:42:eb:a7:00:ba:64:
21:c2:42:df:1c:70:96:da:64:35:e9:63:c0:4e:d9:68:bb:42:
9b:00:bd:e4:c9:cc:fb:3c:e0:be:c6:b3:04:ea:38:be:b3:3a:
6b:99:f8:ee:2a:bb:72:2b:e9:5d:72:32:9f:41:08:a4:21:13:
fd:3f:f0:52:e0:1d:ba:c7:27:0b:aa:26:dc:5e:a4:00:4f:7c:
a0:03:b5:b0:f6:20:0c:b8:06:d0:20:c0:e2:94:5c:33:5f:a3:
31:e9:42:21:22:84:6f:5f:b2:46:3c:12:35:8d:e0:90:10:8d:
e4:bc:fd:ab:ec:81:bb:95:4e:e0:ed:dc:8b:64:96:1f:99:4a:
5c:cb:e4:22:26:03:ef:09:c3:9b:74:d7:96:8c:d9:f0:6a:0a:
7b:8e:ee:8c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZF5qKurmUFJAaDpbUm5IeZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwODIyMTAzNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmMxZGU1YmQyN2Q3Y2Y3MmVlNmQ4ZGM4YzgzZDNlMzFkZDMzNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KHfDHyNv4hnz7q8PlH5SluJ1jyx
KjlSPz57X5x6QiRL0Mb1PLmSfBttVkqxfMEpAMUnXdv+X30EMD9U1mEAvswQjXuX
jQFr4hzrN6oiDh1XIDCVbO+MQ+zG3e5c08NfU9vuExi00hfvusffWkdFhPRh3LCd
uT3Vc4oo+roVK5Dm7fHUN25JCvD2Hnvv6cLB7r00bkFeeag3SVKGApnffhHlBoQb
LF2a0xksbyV57D/1b2MJnVDh2LWk8jCTk+bNw/fwl55rasiKZ2XaChyEgHJVT8sO
wxmLOwyJ8u8qMApLqFV4Wvc3w9gkCd7gf0U/z585PatphuBVo1pKbdl16QIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFHbB3lvSfXz3LubY3IyD0+Md0zasMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvZHNIZVc5SjlmUGN1NXRqY2pJUFQ0eDNUTnF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAIf
hRgDBAIulyAwDAMEAU0kAgMEA00kAAMEAU0kNgMEAE0kOQMEAE0kPAMEAE0kQQME
Ak0kRAMEAlva/AMEAFvfngMEAFvkdwMEAFvlBgMEAFvo/gMEAFvsTQMEAFvs7QME
AFvtMAMEAVvv3gMEAlv2uAMEAFv22QMEAl14DDAMAwQCXXgkAwQAXXgmAwQAXXgu
AwQAXXhKAwQCXXh4AwQCsGAwAwQAsGBdAwQDsGtIAwQAsp+TAwQCvL/8MA0GCSqG
SIb3DQEBCwUAA4IBAQAxme+T8StuPaGFkHbDbqVOOi9EtYJGX9PzL/JZQCLFdmFu
g0sSv2NokhdzjfuMd7bgqfeFI/mGnHl3l1CNzlxUbZvnpA4V40RDZFlWOaTkxSQx
SjKagZuPCV7PzCg6p/as8nTnUWNC66cAumQhwkLfHHCW2mQ16WPATtlou0KbAL3k
ycz7POC+xrME6ji+szprmfjuKrtyK+ldcjKfQQikIRP9P/BS4B26xycLqibcXqQA
T3ygA7Ww9iAMuAbQIMDilFwzX6Mx6UIhIoRvX7JGPBI1jeCQEI3kvP2r7IG7lU7g
7dyLZJYfmUpcy+QiJgPvCcObdNeWjNnwagp7ju6M
-----END CERTIFICATE-----
Generated at Wed Oct 23 13:19:16 2024 by rpki-client on console-ams.rpki-client.org