Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Nl0inURphtS9FNMdMDZ7wxIn0eQ.roa
File: Nl0inURphtS9FNMdMDZ7wxIn0eQ.roa (raw, json)
Hash identifier: Q+e/SFk8b/b/81pX8uulzvCfZLlPmkHTsg3o3npUUsg=
Subject key identifier: 36:5D:22:9D:44:69:86:D4:BD:14:D3:1D:30:36:7B:C3:12:27:D1:E4
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01856DEF6612157DD0B8753B59CBD4B3DE90
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Nl0inURphtS9FNMdMDZ7wxIn0eQ.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200414
IP address blocks: 195.110.50.0/23 maxlen: 23
213.5.4.0/22 maxlen: 22
46.148.80.0/20 maxlen: 20
178.219.132.0/22 maxlen: 22
178.219.131.0/24 maxlen: 24
178.219.128.0/24 maxlen: 24
178.219.136.0/21 maxlen: 21
2a00:c020::/32 maxlen: 32
2a00:c020:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 26 Jul 2023 10:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:66:12:15:7d:d0:b8:75:3b:59:cb:d4:b3:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=365d229d446986d4bd14d31d30367bc31227d1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:82:4f:da:33:77:8a:10:50:93:f1:95:9c:
4c:e1:ed:eb:b9:f5:21:0b:20:e8:d0:87:1c:1b:d6:
33:3d:b7:c3:d5:62:e4:69:55:34:83:5c:54:77:fb:
d8:26:ea:75:28:4e:cd:bb:c7:c0:30:2f:ef:d9:da:
0d:3b:37:f2:23:62:99:b1:7b:8c:39:d3:32:26:36:
d0:9c:82:ff:f9:56:ea:94:5c:41:75:8a:f3:89:3d:
6e:d4:e6:d9:20:90:7b:da:b9:8b:f9:48:80:bd:41:
62:b8:5d:b7:75:28:c3:fd:00:f8:2c:2d:26:75:20:
ff:fe:cf:f4:a5:95:e6:1d:64:3a:70:33:82:11:8f:
c8:6e:16:ba:20:0e:c6:c4:4d:49:a0:55:a1:17:40:
18:58:e0:74:38:3a:38:8b:da:c1:3e:9e:26:b3:51:
8b:ed:6c:86:f7:22:98:2d:62:11:d3:ee:6a:11:4d:
3e:99:51:27:39:8e:47:71:28:0d:2b:71:a2:e8:8c:
c9:4d:6d:ae:ca:cd:e5:15:31:7c:4a:36:d9:6c:f0:
f6:0b:d5:49:e7:87:d2:e0:7e:f8:dc:4a:41:7c:b5:
b7:90:7e:60:72:ab:ba:44:84:1d:34:c3:6c:bc:c0:
12:e0:e0:71:06:91:e1:61:a8:1c:ee:61:ab:68:0c:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:22:9D:44:69:86:D4:BD:14:D3:1D:30:36:7B:C3:12:27:D1:E4
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/Nl0inURphtS9FNMdMDZ7wxIn0eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.80.0/20
178.219.128.0/24
178.219.131.0-178.219.143.255
195.110.50.0/23
213.5.4.0/22
IPv6:
2a00:c020::/32
Signature Algorithm: sha256WithRSAEncryption
34:c4:f2:ca:92:54:70:0c:83:06:d9:cf:e6:7a:09:82:cb:93:
f5:13:3d:1b:1b:e2:87:1c:d4:22:06:10:73:fb:fd:25:55:c5:
19:8c:d3:6f:77:9e:2c:e1:8b:bc:ae:cf:0e:c6:49:d4:7c:21:
eb:33:a2:35:f8:cc:b2:60:3b:5f:30:80:2b:0a:fa:d7:3d:3e:
53:15:4c:dc:93:f1:f9:de:02:bd:d0:d7:d3:36:52:6c:68:44:
71:72:72:e1:ad:1f:22:41:60:3a:ee:b7:a5:7a:31:4f:a5:90:
9f:ca:10:4a:55:ed:db:f5:fd:e4:84:66:9a:ca:2d:13:84:4f:
d0:33:3c:3f:cc:76:87:45:4e:ec:6a:ef:57:f9:d5:86:56:e9:
0f:5e:e1:cd:74:6a:c5:af:69:fc:8d:d0:d5:f1:86:11:58:ea:
ad:82:3f:15:35:fa:f2:e9:63:a5:7f:84:bc:14:f7:a5:d0:14:
65:d7:97:47:9d:a2:6f:18:e5:68:e8:d2:24:91:5e:29:88:86:
ab:fa:55:76:23:15:83:30:16:a5:b1:8f:86:b2:a4:76:9f:3b:
f5:d7:55:2b:9e:b3:2c:41:4c:de:51:05:10:c5:6b:ab:53:9b:
a5:cf:1b:82:08:fd:1c:81:d3:74:0e:a5:0b:60:11:34:7c:ad:
0f:d2:f0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:44 2024 by rpki-client on console-fra.rpki-client.org