Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/kqxJl8bwAcrhbcD4Kcn9hNvXnSo.roa
File: kqxJl8bwAcrhbcD4Kcn9hNvXnSo.roa (raw, json)
Hash identifier: w+Ggj7EN36m4gkttEtFMM042XgtVB7h0oJojQBC8aDY=
Subject key identifier: 92:AC:49:97:C6:F0:01:CA:E1:6D:C0:F8:29:C9:FD:84:DB:D7:9D:2A
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FC7DE58972072E32F7846EFC9823C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/kqxJl8bwAcrhbcD4Kcn9hNvXnSo.roa
Signing time: Tue 02 Jan 2024 04:30:17 +0000
ROA not before: Tue 02 Jan 2024 04:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 91.228.119.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
46.151.32.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.54.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
77.36.68.0/22 maxlen: 22
91.229.6.0/24 maxlen: 24
188.191.252.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
91.223.158.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
176.96.93.0/24 maxlen: 24
176.96.48.0/22 maxlen: 22
77.36.2.0/23 maxlen: 24
77.36.4.0/22 maxlen: 22
91.239.222.0/23 maxlen: 23
93.120.12.0/22 maxlen: 22
91.236.77.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
91.232.254.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 17:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c7:de:58:97:20:72:e3:2f:78:46:ef:c9:82:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92ac4997c6f001cae16dc0f829c9fd84dbd79d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:53:e3:85:f5:46:08:16:d4:c3:20:4e:c5:
7c:21:c7:8b:17:0c:1f:48:dc:31:73:0a:a8:6b:81:
fd:73:7b:82:24:08:b4:00:51:05:44:90:0a:45:e2:
66:08:f4:ea:79:7c:ce:84:fb:be:79:a5:78:e6:6c:
0c:08:5e:c6:47:01:c1:93:34:bf:5c:41:4a:51:43:
b4:c5:03:be:f5:fb:f3:bf:91:4d:db:fa:f2:4e:f5:
50:04:db:f0:3a:00:ac:15:88:6a:52:06:91:24:a8:
ae:f5:ce:a3:a9:bb:65:a9:0b:e1:ef:a4:d2:51:22:
51:fd:00:ba:e0:8e:6c:11:ef:45:62:a0:e3:53:7e:
ba:87:38:7b:f2:38:f2:31:da:99:a8:b7:3d:68:4f:
2a:84:1f:4b:eb:cf:0d:11:89:d0:18:d8:29:c8:d5:
b8:cd:50:8b:5a:01:81:91:c6:25:f1:7c:fd:81:20:
d2:0c:82:ac:19:2b:34:9f:81:0f:55:61:db:ce:c1:
cf:07:ea:75:01:14:4a:14:44:14:8a:eb:84:94:37:
55:1c:59:ae:da:14:87:da:d1:8c:02:81:7b:4d:e8:
4a:0c:48:dc:6f:cd:f8:0b:d7:ea:16:44:f5:ed:30:
af:7f:df:c6:da:06:ee:ef:16:0c:5a:c3:d3:2b:c8:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AC:49:97:C6:F0:01:CA:E1:6D:C0:F8:29:C9:FD:84:DB:D7:9D:2A
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/kqxJl8bwAcrhbcD4Kcn9hNvXnSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/22
77.36.2.0-77.36.7.255
77.36.54.0/23
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.223.158.0/24
91.228.119.0/24
91.229.6.0/24
91.232.254.0/24
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.222.0/23
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.46.0/24
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:dd:b8:76:6b:67:06:94:8a:07:a4:47:bf:9f:28:5c:15:93:
52:1f:41:ce:19:76:e3:0d:79:5a:a6:00:72:47:2f:84:67:02:
52:5c:ea:00:d4:ae:8a:cb:0f:8b:ed:6f:23:76:c7:c6:18:f7:
52:04:23:e5:ff:7c:2c:bb:ea:7c:76:20:52:51:38:5d:55:20:
41:db:80:99:1a:d3:e4:78:d8:ce:06:4d:d0:9e:9d:74:ea:d7:
60:40:c8:50:63:3e:2c:0d:8b:47:f3:b7:c8:cf:81:d4:8a:0f:
1c:ef:2c:03:37:2b:2b:23:4e:63:80:51:a6:64:c8:be:21:20:
25:f1:42:b8:f9:be:7c:99:bb:6e:6c:2d:21:f9:ae:7e:d3:c3:
18:39:87:a0:a4:c2:ef:53:d5:7a:47:50:a0:fb:a6:b7:86:1e:
ad:92:06:8f:90:08:ec:60:a6:b2:3c:26:a6:4d:e2:69:5a:10:
69:d6:4e:ab:11:de:ab:7f:67:8e:9a:25:be:15:00:b5:ca:81:
e4:ac:d3:4d:f8:4e:9d:b9:78:e4:fe:58:28:53:dd:9b:c0:84:
bd:e9:1e:27:01:c5:11:f8:ce:b0:0e:a5:d1:27:79:5e:cf:86:
93:25:c1:21:07:3d:d8:57:6f:a1:74:9d:9a:f0:2e:18:00:3c:
3e:51:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org