Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/NBrM-HCVQgxAzG8JaeSCOCeLvCM.roa
File: NBrM-HCVQgxAzG8JaeSCOCeLvCM.roa (raw, json)
Hash identifier: I4npxIF74zR/UeK4HC3dBFBaWcIGq8Jhv3pIOZ/oKjA=
Subject key identifier: 34:1A:CC:F8:70:95:42:0C:40:CC:6F:09:69:E4:82:38:27:8B:BC:23
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 018D12A362DC321088D51DBB826AB66DE552
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/NBrM-HCVQgxAzG8JaeSCOCeLvCM.roa
Signing time: Tue 16 Jan 2024 14:18:34 +0000
ROA not before: Tue 16 Jan 2024 14:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 45.145.200.0/24 maxlen: 24
45.145.201.0/24 maxlen: 24
45.145.202.0/24 maxlen: 24
45.145.203.0/24 maxlen: 24
77.242.128.0/20 maxlen: 24
77.242.128.0/24 maxlen: 24
77.242.129.0/24 maxlen: 24
77.242.130.0/24 maxlen: 24
77.242.131.0/24 maxlen: 24
77.242.132.0/24 maxlen: 24
77.242.133.0/24 maxlen: 24
77.242.134.0/24 maxlen: 24
77.242.135.0/24 maxlen: 24
77.242.136.0/24 maxlen: 24
77.242.137.0/24 maxlen: 24
77.242.138.0/24 maxlen: 24
77.242.139.0/24 maxlen: 24
77.242.140.0/24 maxlen: 24
77.242.141.0/24 maxlen: 24
77.242.142.0/24 maxlen: 24
77.242.143.0/24 maxlen: 24
85.208.200.0/24 maxlen: 24
85.208.201.0/24 maxlen: 24
85.208.202.0/24 maxlen: 24
85.208.203.0/24 maxlen: 24
89.37.70.0/23 maxlen: 24
89.37.70.0/24 maxlen: 24
89.37.71.0/24 maxlen: 24
178.23.8.0/21 maxlen: 24
185.56.156.0/22 maxlen: 24
185.171.232.0/24 maxlen: 24
185.171.233.0/24 maxlen: 24
185.171.234.0/24 maxlen: 24
185.171.235.0/24 maxlen: 24
185.191.104.0/24 maxlen: 24
185.191.105.0/24 maxlen: 24
185.191.106.0/24 maxlen: 24
185.191.107.0/24 maxlen: 24
185.215.144.0/24 maxlen: 24
185.215.145.0/24 maxlen: 24
185.215.146.0/24 maxlen: 24
185.215.147.0/24 maxlen: 24
185.219.116.0/24 maxlen: 24
185.219.117.0/24 maxlen: 24
185.219.118.0/24 maxlen: 24
185.219.119.0/24 maxlen: 24
185.248.227.0/24 maxlen: 24
185.255.29.0/24 maxlen: 24
188.191.56.0/22 maxlen: 24
188.191.56.0/24 maxlen: 24
188.191.57.0/24 maxlen: 24
188.191.58.0/24 maxlen: 24
188.191.59.0/24 maxlen: 24
217.28.64.0/24 maxlen: 24
217.28.65.0/24 maxlen: 24
217.28.66.0/24 maxlen: 24
217.28.67.0/24 maxlen: 24
2a02:53e0::/32 maxlen: 32
2a0b:7b80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:a3:62:dc:32:10:88:d5:1d:bb:82:6a:b6:6d:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jan 16 14:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=341accf87095420c40cc6f0969e48238278bbc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:6d:12:a6:4d:6c:c6:60:7a:a2:55:ba:75:
da:c1:e5:ae:9b:75:c4:2d:04:1b:67:3f:9d:8a:b9:
1a:c3:23:2d:46:19:57:e6:f2:5b:ac:f4:d8:57:75:
2d:78:d9:74:33:0b:08:e6:7c:8f:d6:eb:e7:e0:fa:
21:89:11:df:0c:58:2a:5d:a7:61:28:55:ac:9c:fe:
9a:2e:20:19:ca:a4:b1:7d:ea:2e:e6:41:8a:4c:fb:
96:09:93:a5:2f:49:c1:09:f3:33:b1:a0:cb:51:42:
34:d3:ed:e4:03:fa:94:76:d0:38:89:63:11:c3:dd:
55:00:90:3e:fd:75:64:fb:cd:4f:14:ea:2a:ee:e4:
2b:e1:a6:46:9b:e5:c5:6b:6d:d2:4e:8a:f7:60:7f:
40:eb:a9:7d:f1:26:78:68:54:1a:09:54:30:35:39:
23:33:57:a7:ed:3e:d4:2b:20:4a:6c:dc:9a:d2:4e:
04:3f:99:2c:09:33:1a:f7:1e:8a:76:a0:cf:63:cf:
3a:6e:a6:6b:0b:3b:71:af:88:c3:1e:b1:01:e0:03:
ed:d2:d1:14:d2:05:f3:8a:85:13:1a:9e:73:2c:bf:
46:99:2b:2e:e2:38:bf:94:25:eb:a3:66:e5:94:3f:
bd:47:9a:6f:3c:e5:d9:81:33:81:f1:54:4b:ca:f4:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:CC:F8:70:95:42:0C:40:CC:6F:09:69:E4:82:38:27:8B:BC:23
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/NBrM-HCVQgxAzG8JaeSCOCeLvCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.200.0/22
77.242.128.0/20
85.208.200.0/22
89.37.70.0/23
178.23.8.0/21
185.56.156.0/22
185.171.232.0/22
185.191.104.0/22
185.215.144.0/22
185.219.116.0/22
185.248.227.0/24
185.255.29.0/24
188.191.56.0/22
217.28.64.0/22
IPv6:
2a02:53e0::/32
2a0b:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
58:13:91:0b:c3:a3:85:60:84:15:eb:d8:6e:a7:1f:13:86:14:
cb:fc:c4:ce:8f:ae:4a:50:6b:28:77:47:b3:79:85:12:4f:57:
39:96:d4:d4:8d:59:d6:21:af:72:2a:ca:ca:e7:26:e8:71:1c:
0f:f4:3e:d9:cc:63:78:66:5f:32:0b:29:af:d4:dd:ca:39:23:
e0:e0:ab:85:b2:22:85:79:25:71:9c:86:0f:a8:ee:bf:62:ee:
81:09:09:c0:70:93:fb:71:2b:8b:f6:f2:5a:fc:16:10:92:f7:
62:b6:a3:12:f1:55:c6:36:58:b3:fc:8b:09:c7:29:c1:89:a9:
e0:19:a7:ca:d8:cf:5c:f0:83:ea:c6:80:e7:fa:42:9f:a7:1c:
7c:f8:0d:46:58:58:26:c8:1c:e4:05:7b:5e:4a:4f:9d:6b:f0:
9a:a5:36:29:25:da:9d:01:6a:c8:11:c9:82:97:dd:ef:a5:33:
59:1f:79:f6:ad:ab:89:5e:1b:63:fd:9c:d1:a8:b1:c3:ab:3e:
7c:00:5b:ec:e6:9c:47:17:22:d5:b0:64:55:b8:be:92:23:bc:
8c:b4:1c:6c:27:dc:4c:8d:c4:21:80:d9:6b:84:f2:0d:2d:00:
2c:4e:a2:af:97:cf:39:a7:bb:74:d1:b9:20:9a:5a:11:b2:3b:
7e:8f:94:4f
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAY0So2LcMhCI1R27gmq2beVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3
OTE5NTQwHhcNMjQwMTE2MTQxODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDFhY2NmODcwOTU0MjBjNDBjYzZmMDk2OWU0ODIzODI3OGJiYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsltEqZNbMZgeqJVunXaweWum3XE
LQQbZz+dirkawyMtRhlX5vJbrPTYV3UteNl0MwsI5nyP1uvn4PohiRHfDFgqXadh
KFWsnP6aLiAZyqSxfeou5kGKTPuWCZOlL0nBCfMzsaDLUUI00+3kA/qUdtA4iWMR
w91VAJA+/XVk+81PFOoq7uQr4aZGm+XFa23STor3YH9A66l98SZ4aFQaCVQwNTkj
M1en7T7UKyBKbNya0k4EP5ksCTMa9x6KdqDPY886bqZrCztxr4jDHrEB4APt0tEU
0gXzioUTGp5zLL9GmSsu4ji/lCXro2bllD+9R5pvPOXZgTOB8VRLyvS83QIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFDQazPhwlUIMQMxvCWnkgjgni7wjMB8GA1UdIwQY
MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt
NDVlYTM4ZGEyMjE4LzEvTkJyTS1IQ1ZRZ3hBekc4SmFlU0NPQ2VMdkNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4
LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwWgQCAAEwVAMEAi2RyAME
BE3ygAMEAlXQyAMEAVklRgMEA7IXCAMEArk4nAMEArmr6AMEArm/aAMEArnXkAME
ArnbdAMEALn44wMEALn/HQMEAry/OAMEAtkcQDAUBAIAAjAOAwUAKgJT4AMFAyoL
e4AwDQYJKoZIhvcNAQELBQADggEBAFgTkQvDo4VghBXr2G6nHxOGFMv8xM6PrkpQ
ayh3R7N5hRJPVzmW1NSNWdYhr3IqysrnJuhxHA/0PtnMY3hmXzILKa/U3co5I+Dg
q4WyIoV5JXGchg+o7r9i7oEJCcBwk/txK4v28lr8FhCS92K2oxLxVcY2WLP8iwnH
KcGJqeAZp8rYz1zwg+rGgOf6Qp+nHHz4DUZYWCbIHOQFe15KT51r8JqlNikl2p0B
asgRyYKX3e+lM1kfefatq4leG2P9nNGoscOrPnwAW+zmnEcXItWwZFW4vpIjvIy0
HGwn3EyNxCGA2WuE8g0tACxOoq+Xzzmnu3TRuSCaWhGyO36PlE8=
-----END CERTIFICATE-----
Generated at Tue Jan 30 13:50:32 2024 by rpki-client on console-fra.rpki-client.org