Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C406WqBeSIpQDjD3WhyY88nFT3o.roa
File: C406WqBeSIpQDjD3WhyY88nFT3o.roa (raw, json)
Hash identifier: +ch06flpKCstA8aKFmw3Ll7zPZIKCCKC6/sdtCZsiY0=
Subject key identifier: 0B:8D:3A:5A:A0:5E:48:8A:50:0E:30:F7:5A:1C:98:F3:C9:C5:4F:7A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E2E3679D4301F58231C34AFA9D863498F
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C406WqBeSIpQDjD3WhyY88nFT3o.roa
Signing time: Mon 11 Mar 2024 15:51:45 +0000
ROA not before: Mon 11 Mar 2024 15:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
146.19.194.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.198.153.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.106.0/24 maxlen: 24
195.64.109.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.64.117.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 15:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:36:79:d4:30:1f:58:23:1c:34:af:a9:d8:63:49:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 11 15:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8d3a5aa05e488a500e30f75a1c98f3c9c54f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:0d:ea:54:db:c5:5a:87:fe:2f:f9:44:8b:
b7:16:ff:8d:92:8f:24:24:f3:ca:28:8b:3a:68:6e:
73:4f:49:c9:6c:99:fc:d6:1a:d0:53:5e:7c:4c:cb:
8d:eb:0e:66:77:d7:a0:23:16:ef:8a:4e:c2:40:ef:
7b:3c:cf:be:1e:1a:25:ed:ad:b2:b4:47:d0:51:f9:
4a:fa:ac:a2:15:24:1f:1e:9d:b1:40:c5:dc:a0:48:
20:e0:11:87:fc:21:cc:83:8f:fe:d4:1d:e3:3c:ff:
44:e2:f1:d7:61:d8:91:1a:ff:07:19:f3:e3:18:92:
eb:7a:5a:ed:b4:41:fa:c9:4c:e8:05:26:81:29:62:
ac:e5:7e:14:48:d7:44:f8:9b:08:4a:19:ae:3b:5f:
f5:35:0d:b2:7c:ae:9b:78:b4:7c:72:36:ec:7c:18:
17:3c:50:55:c0:ce:17:ed:49:70:8c:70:63:eb:bc:
0a:74:61:23:dd:e4:40:0c:d8:2b:0e:6f:6c:62:23:
94:34:f6:96:01:a7:09:df:09:f0:3a:cf:fc:81:89:
c5:3a:55:be:88:2b:d7:e0:fe:28:ca:8d:1b:8b:7e:
68:0d:99:c0:fc:4d:40:b0:86:54:f7:f7:27:08:31:
b9:41:70:53:44:ff:b6:fb:07:38:24:4c:df:4c:70:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:3A:5A:A0:5E:48:8A:50:0E:30:F7:5A:1C:98:F3:C9:C5:4F:7A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/C406WqBeSIpQDjD3WhyY88nFT3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
62.68.83.0/24
62.68.86.0/24
62.204.36.0/24
62.204.57.0/24
62.233.35.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.91.209.0-80.91.210.255
91.213.117.0/24
91.226.247.0/24
91.242.225.0/24
91.242.238.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.152.0/24
146.19.185.0/24
146.19.187.0/24
146.19.194.0/24
176.56.38.0/24
178.211.140.0/24
185.122.206.0/24
185.198.153.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
194.26.216.0/24
194.26.221.0/24
194.32.243.0/24
195.64.106.0/24
195.64.109.0-195.64.110.255
195.64.112.0/24
195.64.114.0/24
195.64.117.0/24
195.93.249.0/24
195.96.136.0/24
195.96.146.0/24
195.96.155.0/24
195.96.157.0/24
212.18.103.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
36:58:66:d1:d4:38:fe:e5:49:b4:24:11:92:98:bf:ca:62:4c:
b6:44:0a:c1:47:13:31:d8:d6:8e:cd:53:ca:c5:51:2e:ff:55:
24:7f:2b:46:ed:c8:24:15:3e:8d:5f:7b:6e:3f:a6:e1:49:46:
b9:c5:1e:8c:6e:39:b4:72:a5:4a:30:be:74:b2:41:2d:31:ea:
5a:c6:4e:fa:45:19:f9:8a:dc:00:5b:9d:77:77:fe:86:1f:ca:
d5:e2:08:14:97:71:7b:37:29:9a:c1:32:05:c4:30:1f:56:ff:
29:95:20:5c:c7:49:71:fe:eb:e2:83:a5:8b:f0:c1:9d:5f:18:
0d:67:eb:16:8f:ab:5c:7c:0b:37:c6:a9:c2:2a:22:e7:b4:e9:
e9:fd:b8:6c:26:b0:45:c1:40:62:3a:b5:63:fa:41:ec:1e:02:
74:55:a8:fc:fc:93:b2:00:56:7e:87:40:81:6a:e0:4e:42:95:
f7:c0:0e:70:34:4b:6f:b6:de:52:eb:ed:af:d5:18:78:75:b3:
c1:c5:77:76:2b:9a:42:ff:af:17:9e:26:6a:09:d6:38:d1:03:
88:2e:22:18:d1:50:07:22:d0:b4:8a:9d:39:76:df:7a:6b:da:
92:56:d3:e2:5d:70:80:4c:f9:89:cb:e8:55:b0:b0:8d:5c:6f:
ef:76:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org