Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/7RmwTc9eTzJKs61Il-qpOHqtXy0.roa
File: 7RmwTc9eTzJKs61Il-qpOHqtXy0.roa (raw, json)
Hash identifier: CniHwF3DxcL/lnK6MKZQIdUs80oSql3sf/OSwwtr7ZA=
Subject key identifier: ED:19:B0:4D:CF:5E:4F:32:4A:B3:AD:48:97:EA:A9:38:7A:AD:5F:2D
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DF53503FAE010A1D55AFA9C4F525F4091
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/7RmwTc9eTzJKs61Il-qpOHqtXy0.roa
Signing time: Thu 29 Feb 2024 14:11:48 +0000
ROA not before: Thu 29 Feb 2024 14:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:35:03:fa:e0:10:a1:d5:5a:fa:9c:4f:52:5f:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 29 14:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed19b04dcf5e4f324ab3ad4897eaa9387aad5f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:72:4b:3b:6b:1b:be:04:fe:4d:67:a8:15:
08:8e:d7:f9:fb:70:e9:58:9a:12:f3:66:be:88:2d:
9a:fb:80:27:3a:90:fa:e5:00:e2:9f:59:ff:69:4e:
63:f2:ab:1e:db:57:30:6f:b0:79:fd:23:d7:8e:47:
fb:32:c9:bf:eb:0a:f7:22:86:8a:6c:ac:c0:c8:a9:
1c:10:c7:80:7f:7c:11:7f:ca:b3:62:f1:77:38:5f:
31:5e:62:33:56:80:e9:b9:2d:f1:e7:22:b4:34:17:
70:f1:28:42:54:2c:c1:52:29:d4:3f:f4:1f:1f:90:
19:45:bd:89:b6:79:ab:5d:70:70:70:4e:ce:95:45:
78:ba:b2:ed:67:6f:c8:c7:34:18:19:e3:67:cd:ae:
0f:bc:ce:1a:a8:9b:86:83:d4:cc:d0:0a:ff:d1:ed:
b3:2b:c9:c4:b0:81:81:0d:00:64:d7:72:5c:8f:93:
e9:f4:b3:ce:7b:83:c5:24:ef:11:0d:ef:f3:5e:11:
85:d3:2b:9d:9d:01:49:99:b7:30:55:2f:66:b4:82:
ad:a2:91:d3:62:a1:47:34:a4:b9:4f:dc:27:67:41:
76:75:d4:36:bf:92:3a:f8:99:5f:4a:0a:70:18:44:
08:19:45:d9:2e:52:d4:4d:97:12:b5:c8:7e:2c:bd:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:19:B0:4D:CF:5E:4F:32:4A:B3:AD:48:97:EA:A9:38:7A:AD:5F:2D
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/7RmwTc9eTzJKs61Il-qpOHqtXy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.36.0-45.132.38.255
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.64.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.34.0/24
62.233.48.0/24
84.246.81.0/24
89.107.12.0/24
91.199.189.0/24
91.206.68.0/24
91.236.121.0/24
93.190.120.0/24
176.116.12.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
193.107.22.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
92:12:05:df:49:bf:a7:48:20:c2:bc:57:cc:ce:43:5c:c6:6e:
26:70:71:f5:80:1e:75:1d:bd:74:be:c1:dc:a4:be:cb:05:ef:
e6:b3:97:a9:ba:f6:76:10:2f:94:ac:7e:ac:5f:65:9a:bb:09:
a5:0c:d0:ea:46:b7:11:a0:72:48:e4:e0:f6:b2:e6:2e:c2:ef:
3c:32:c1:16:56:72:99:91:9b:1d:da:36:73:77:d0:0a:a0:6b:
53:07:39:94:b6:22:78:28:44:d0:bc:68:e8:bd:5f:8d:c4:1f:
b0:9e:b1:20:0e:8e:a5:08:2a:74:fb:b2:1f:20:32:a8:5a:28:
45:d3:0f:b4:86:a2:cf:35:56:54:c4:d2:33:25:b9:a2:a1:7f:
01:cf:76:2f:40:24:f0:d2:94:fe:22:cb:b1:05:82:f9:4a:20:
0d:04:46:9e:93:23:f5:1a:36:e8:4d:b9:f5:79:fd:f4:af:e3:
72:57:ef:e5:b8:7d:59:8c:88:d4:df:a7:45:2f:fe:4d:c6:31:
8b:90:98:ed:ea:e6:45:11:05:5f:c4:2f:6c:d9:92:2c:6c:59:
34:79:92:56:31:dc:f3:5c:f9:68:8d:c7:c7:ec:4d:e2:30:42:
a6:08:57:cf:9e:ae:d1:6d:7e:3a:32:c1:13:45:fc:80:86:90:
d3:44:88:d3
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISAY31NQP64BCh1Vr6nE9SX0CRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjI5MTQxMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDE5YjA0ZGNmNWU0ZjMyNGFiM2FkNDg5N2VhYTkzODdhYWQ1ZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiVySztrG74E/k1nqBUIjtf5+3Dp
WJoS82a+iC2a+4AnOpD65QDin1n/aU5j8qse21cwb7B5/SPXjkf7Msm/6wr3IoaK
bKzAyKkcEMeAf3wRf8qzYvF3OF8xXmIzVoDpuS3x5yK0NBdw8ShCVCzBUinUP/Qf
H5AZRb2JtnmrXXBwcE7OlUV4urLtZ2/IxzQYGeNnza4PvM4aqJuGg9TM0Ar/0e2z
K8nEsIGBDQBk13Jcj5Pp9LPOe4PFJO8RDe/zXhGF0yudnQFJmbcwVS9mtIKtopHT
YqFHNKS5T9wnZ0F2ddQ2v5I6+JlfSgpwGEQIGUXZLlLUTZcStch+LL1t+QIDAQAB
o4IDGTCCAxUwHQYDVR0OBBYEFO0ZsE3PXk8ySrOtSJfqqTh6rV8tMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvN1Jtd1RjOWVUekpLczYxSWwtcXBPSHF0WHkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCCARQEAgABMIIB
DAMEAAI7MQMEAB/YPAMEASXdUgMEAi0KQAMEAi0KUAMEAC0LxAMEAC0P7gMEAC1d
UDAMAwQCLYQkAwQALYQmAwQBLYSAMAwDBAAtitUDBAAtitYDBAEtizQDBAAtizcD
BAAtjEADBAItjEgDBAEtkhgDBAAtkhsDBAItkwwDBAAtlYEDBAEtmHQDBAAtn1QD
BAAtn1cDBAA+6SIDBAA+6TADBABU9lEDBABZawwDBABbx70DBABbzkQDBABb7HkD
BABdvngDBACwdAwDBAGw3jgDBACw3jsDBAC5vCkDBADBBRwDBAHBHwQDBADBOqoD
BADBaxYDBADCaOQDBALD2IQDBADD4WMDBALVpkAwDQYJKoZIhvcNAQELBQADggEB
AJISBd9Jv6dIIMK8V8zOQ1zGbiZwcfWAHnUdvXS+wdykvssF7+azl6m69nYQL5Ss
fqxfZZq7CaUM0OpGtxGgckjk4Pay5i7C7zwywRZWcpmRmx3aNnN30Aqga1MHOZS2
IngoRNC8aOi9X43EH7CesSAOjqUIKnT7sh8gMqhaKEXTD7SGos81VlTE0jMluaKh
fwHPdi9AJPDSlP4iy7EFgvlKIA0ERp6TI/UaNuhNufV5/fSv43JX7+W4fVmMiNTf
p0Uv/k3GMYuQmO3q5kURBV/EL2zZkixsWTR5klYx3PNc+WiNx8fsTeIwQqYIV8+e
rtFtfjoywRNF/ICGkNNEiNM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org