Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4BnnAnvdOBeLZGPC0ZDH6uDbLj4.roa
File: 4BnnAnvdOBeLZGPC0ZDH6uDbLj4.roa (raw, json)
Hash identifier: MugPbHxzYWp3McZ5p8SkvPSSlliyUADYu8dFH3cVaCc=
Subject key identifier: E0:19:E7:02:7B:DD:38:17:8B:64:63:C2:D1:90:C7:EA:E0:DB:2E:3E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E3243C354408A116B51857F93FA5A3157
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4BnnAnvdOBeLZGPC0ZDH6uDbLj4.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 12 Mar 2024 15:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c3:54:40:8a:11:6b:51:85:7f:93:fa:5a:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e019e7027bdd38178b6463c2d190c7eae0db2e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:ab:0f:0e:cb:0c:2b:41:3c:7a:7e:09:34:
b0:cc:67:06:a2:aa:4b:eb:d5:f4:26:1d:7e:b3:3c:
80:4f:df:e1:b7:6f:ac:a2:0b:5c:8f:b0:61:02:5f:
72:0f:63:59:56:48:19:9c:86:6d:c1:6a:65:3d:88:
22:b8:bc:59:31:7e:47:a9:4a:1f:64:78:77:7c:5d:
72:d5:c1:24:24:9c:34:04:11:59:5a:09:95:9e:46:
51:1a:c5:ed:a5:fd:ea:59:fc:b0:b0:90:46:60:c2:
b1:f0:6d:d4:08:7c:c5:c7:24:86:be:c4:db:bf:75:
6a:bd:d7:a6:28:06:60:eb:2d:37:a6:40:bb:67:56:
70:c7:98:7c:16:35:7c:5c:9e:ef:b0:38:1a:fc:93:
1f:c7:3e:48:08:76:c0:aa:dc:28:1c:db:7e:6c:9e:
a9:fc:ca:73:b5:21:21:01:a0:ed:1c:31:d1:18:3a:
e4:50:f8:34:db:7a:5c:d3:ee:9d:37:0b:91:13:6b:
34:58:6b:0c:35:2e:ac:eb:c7:c9:29:97:1a:65:71:
be:14:61:84:8a:2a:3e:4d:35:ce:c5:10:86:24:3a:
0e:33:b7:34:4d:a9:0c:21:2f:7d:ef:83:cb:f3:5a:
e1:fb:6f:eb:c5:68:7d:e8:28:96:8a:48:09:a1:10:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:19:E7:02:7B:DD:38:17:8B:64:63:C2:D1:90:C7:EA:E0:DB:2E:3E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4BnnAnvdOBeLZGPC0ZDH6uDbLj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.36.0-45.132.38.255
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.64.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.157.111.0/24
93.190.120.0/24
94.124.75.0/24
94.124.77.0/24
176.116.8.0/24
176.116.12.0/24
176.116.24.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
193.187.97.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:20:a9:81:98:3d:39:7f:42:65:6f:fc:dd:17:59:13:c6:29:
38:c1:cc:7c:64:c4:7e:c6:15:4b:18:62:38:97:18:0d:50:dc:
6b:08:8f:da:80:64:7f:86:2c:11:93:b5:b0:a6:f0:0d:0c:b5:
86:05:f6:9c:3f:8c:4b:6a:d2:4d:53:03:2e:e1:dc:8a:41:76:
e5:e7:7f:02:dd:be:a8:34:44:24:10:46:7d:59:f9:79:bd:4b:
57:1e:31:52:b9:bf:9d:10:17:25:16:ce:fb:9e:f2:b4:cf:36:
d4:19:b3:7e:31:97:7c:4c:2d:54:ac:6a:35:9f:00:fd:02:81:
cb:79:f9:72:04:23:fe:30:7c:69:5e:76:e1:e1:29:7e:49:e0:
72:70:73:81:fd:d9:0c:14:7f:ae:62:bf:54:31:19:ec:a4:96:
2f:72:c4:6d:07:f7:4c:40:b0:78:61:cc:b8:e7:72:13:08:fe:
32:fa:34:e6:10:45:55:40:ae:c6:d0:2a:c7:a0:d4:36:97:6d:
bb:0e:cf:46:4a:d7:e9:e1:b1:c1:b3:76:7b:52:08:c2:a3:6d:
92:55:ea:02:11:c9:7e:36:33:3f:9c:40:14:16:c7:d2:73:7b:
c4:64:66:33:ca:57:2a:f9:7e:5c:64:31:69:84:be:e7:df:82:
fb:48:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org