Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/DTuvntUC68UKYGe2TzFeEb-i0ms.roa
File: DTuvntUC68UKYGe2TzFeEb-i0ms.roa (raw, json)
Hash identifier: LjgENsKKmT/Z7KSOhj0DBEkMP4H6lJmvFKmXT7UeHY4=
Subject key identifier: 0D:3B:AF:9E:D5:02:EB:C5:0A:60:67:B6:4F:31:5E:11:BF:A2:D2:6B
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018CC8DD944D245D051A02CA4131DBA59CF5
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/DTuvntUC68UKYGe2TzFeEb-i0ms.roa
Signing time: Tue 02 Jan 2024 06:30:13 +0000
ROA not before: Tue 02 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48011
IP address blocks: 87.236.161.0/24 maxlen: 24
103.130.145.0/24 maxlen: 24
5.172.177.0/24 maxlen: 24
103.130.147.0/24 maxlen: 24
45.93.168.0/22 maxlen: 24
213.217.31.0/24 maxlen: 24
77.87.122.0/24 maxlen: 24
193.163.72.0/24 maxlen: 24
185.217.143.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
45.252.180.0/24 maxlen: 24
45.252.182.0/23 maxlen: 23
45.252.182.0/24 maxlen: 24
45.252.183.0/24 maxlen: 24
45.252.180.0/23 maxlen: 23
45.252.181.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
91.247.188.0/24 maxlen: 24
45.89.236.0/22 maxlen: 24
185.211.79.0/24 maxlen: 24
62.204.58.0/24 maxlen: 24
185.182.105.0/24 maxlen: 24
2a0c:6600:6::/48 maxlen: 48
2a0c:6600:1::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:8::/48 maxlen: 48
2a0c:6600:5::/48 maxlen: 48
2a0c:6600:2000::/48 maxlen: 48
2a0c:6600:3000::/48 maxlen: 48
2a0c:6600:4000::/48 maxlen: 48
2a0c:6600::/48 maxlen: 48
2a0c:6600:6600::/48 maxlen: 48
2a0c:6600:6000::/48 maxlen: 48
2a0c:6600:1000::/48 maxlen: 48
2a0c:6600:9::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:7::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:94:4d:24:5d:05:1a:02:ca:41:31:db:a5:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d3baf9ed502ebc50a6067b64f315e11bfa2d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:ef:af:f6:59:d3:c9:6f:c0:f3:f8:2d:10:
84:fd:a5:e3:dc:e3:76:ec:e4:58:3f:35:e6:3d:f2:
1f:f3:5b:bc:f2:aa:4d:7e:eb:dd:58:65:34:31:26:
55:d5:3c:ba:a0:09:f7:b4:60:46:d3:d8:1d:cd:f3:
c7:4a:bb:52:e8:2e:da:80:ca:83:42:0a:71:31:f9:
fb:ac:c0:83:6d:04:ab:7e:70:2f:37:1b:8f:a5:f4:
43:37:ec:3c:a6:f8:a2:9b:c0:b3:8a:ec:cb:0e:19:
10:e6:2a:ba:e2:12:de:d5:2d:21:5b:d0:60:c5:d5:
1e:8f:c6:0c:70:32:1d:0e:82:79:7d:00:f6:4d:42:
95:01:2b:f5:b3:98:d4:29:06:fa:a8:c0:0e:81:51:
1c:c1:9a:83:db:64:04:6a:34:c3:ae:95:f1:e2:62:
49:82:5d:e2:39:53:a3:27:35:4f:62:a6:8a:2f:95:
0a:2d:16:1c:02:91:f7:11:8f:fc:cf:3a:43:52:25:
fe:30:7c:86:10:5e:da:d7:aa:2f:4b:8d:66:1e:84:
8d:65:c0:d7:5e:b0:eb:c8:57:be:c9:47:4f:3e:77:
a9:1a:28:99:ce:8a:11:23:0c:72:16:d9:99:77:85:
33:3e:a6:4d:17:77:e0:03:60:91:4d:b8:f8:43:0e:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3B:AF:9E:D5:02:EB:C5:0A:60:67:B6:4F:31:5E:11:BF:A2:D2:6B
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/DTuvntUC68UKYGe2TzFeEb-i0ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.177.0/24
45.89.236.0/22
45.93.168.0/22
45.252.180.0/22
62.204.58.0/24
77.87.122.0/24
87.236.161.0/24
91.247.188.0/24
103.130.145.0/24
103.130.147.0/24
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.217.31.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff
2a0c:6600:1000::/48
2a0c:6600:2000::/48
2a0c:6600:3000::/48
2a0c:6600:4000::/48
2a0c:6600:6000::/48
2a0c:6600:6600::/48
Signature Algorithm: sha256WithRSAEncryption
1e:9b:1b:65:51:2b:79:c9:68:35:fb:e7:a6:80:4c:83:7e:0f:
95:10:0e:b3:6a:b2:87:27:9c:7a:5c:e7:57:0e:b6:12:1f:ad:
d5:3b:47:ef:46:ec:02:2c:cf:b9:64:cb:08:ec:9d:c5:5d:88:
4c:30:33:67:76:fa:2e:d8:c9:36:61:62:38:19:b7:1e:1c:34:
10:f8:d6:e6:c0:8e:4c:a4:7f:39:62:3d:28:63:48:13:b5:1a:
6d:c5:47:4d:3b:99:2b:70:0b:41:25:e6:21:f0:11:0a:ca:19:
cf:a9:21:81:4f:5b:d1:01:f3:45:32:6e:69:ca:2d:48:89:2a:
9e:bb:23:b7:11:71:e4:58:3f:7e:c4:22:2b:ed:d6:4e:a9:99:
80:0d:ff:6a:f7:1a:85:30:06:45:81:76:19:35:6a:3a:87:19:
49:4f:9d:56:60:09:cc:99:91:41:00:78:d7:b4:b5:21:ca:b0:
2b:ca:15:06:b5:fb:59:b5:d6:8c:55:2b:15:b8:1d:76:43:22:
bd:36:ce:0e:3c:f0:49:d9:69:75:51:2d:6e:2e:d1:05:a7:b9:
f9:10:19:90:44:ff:13:82:14:1f:c3:5d:f3:c0:c0:2d:00:7c:
2d:3b:b0:48:01:93:3a:37:01:43:2b:15:95:a8:32:7a:c4:05:
1a:56:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org