Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Io5Q8bxQYsJJgzF95Gx3gV2N0K0.roa
File: Io5Q8bxQYsJJgzF95Gx3gV2N0K0.roa (raw, json)
Hash identifier: GN16Ccq+SnUlp4epbTuee/NsR2/0f9QSWkzay6V8c1s=
Subject key identifier: 22:8E:50:F1:BC:50:62:C2:49:83:31:7D:E4:6C:77:81:5D:8D:D0:AD
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E2D6DFACE953A73B1F8000A4A433EAC60
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Io5Q8bxQYsJJgzF95Gx3gV2N0K0.roa
Signing time: Mon 11 Mar 2024 12:12:46 +0000
ROA not before: Mon 11 Mar 2024 12:12:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.187.0/24 maxlen: 24
146.19.194.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.106.0/24 maxlen: 24
195.64.109.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.64.117.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:6d:fa:ce:95:3a:73:b1:f8:00:0a:4a:43:3e:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 11 12:12:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228e50f1bc5062c24983317de46c77815d8dd0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:69:68:0f:6a:b5:e5:4d:70:3b:29:6c:a5:
b1:76:6e:b4:fb:3d:c9:22:c8:ba:a3:3b:b2:24:e2:
a9:72:2d:c0:73:33:06:43:74:10:e5:8c:e9:33:c1:
d2:3e:4a:35:f0:be:d3:76:4c:0e:52:af:8e:4d:5e:
a8:57:16:36:e7:a1:66:23:58:19:0d:51:d9:01:b2:
e5:a2:e7:b2:27:6c:8a:25:a6:5b:92:00:19:64:57:
1d:e9:a9:2e:e1:ca:57:a3:11:ef:44:b5:e0:3a:40:
b7:36:f2:2d:48:90:23:90:0b:3e:ef:9b:a5:0e:1c:
3a:8c:9e:f9:1a:0d:19:4b:58:4b:fa:72:b5:b0:74:
b2:9e:a5:58:a7:18:24:a8:6a:1b:0e:20:6a:61:d1:
03:9c:83:23:50:96:11:cb:84:51:eb:5a:30:00:b5:
c2:e6:a7:3a:6c:36:b3:7a:f9:38:48:15:00:94:70:
79:ee:4a:0c:47:84:ba:63:5b:b3:2b:08:b0:75:60:
29:bd:66:c6:73:65:65:f4:0d:fc:c3:1a:48:05:a2:
68:cc:32:58:5b:70:59:47:c9:0e:7e:89:14:d8:ef:
e0:28:aa:d9:33:46:1a:a7:87:c1:ef:bb:3c:d8:b1:
c6:e5:b9:f6:7a:d8:b1:e7:90:64:5c:16:8b:8b:de:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:50:F1:BC:50:62:C2:49:83:31:7D:E4:6C:77:81:5D:8D:D0:AD
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Io5Q8bxQYsJJgzF95Gx3gV2N0K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
62.68.83.0/24
62.68.86.0/24
62.204.36.0/24
62.204.57.0/24
62.233.35.0/24
62.233.49.0/24
62.233.60.0/24
80.91.209.0-80.91.210.255
91.213.117.0/24
91.242.225.0/24
91.242.238.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.185.0/24
146.19.187.0/24
146.19.194.0/24
176.56.38.0/24
178.211.140.0/24
185.122.206.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
194.26.216.0/24
194.26.221.0/24
194.32.243.0/24
195.64.106.0/24
195.64.109.0-195.64.110.255
195.64.112.0/24
195.64.114.0/24
195.64.117.0/24
195.93.249.0/24
195.96.136.0/24
195.96.146.0/24
195.96.155.0/24
195.96.157.0/24
212.18.103.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4a:23:04:c0:06:5e:ee:f5:65:3e:c6:02:1d:10:79:7d:af:
06:cb:0a:f0:39:2f:28:22:87:d8:a5:a0:30:83:01:2d:81:0d:
65:41:6b:b6:cd:42:6a:61:07:30:61:4b:a2:e8:b1:13:f3:5b:
cc:2e:58:3b:e7:3c:8f:b4:01:ac:da:6f:07:05:5c:df:ec:8e:
69:57:ca:c0:cc:06:83:e8:00:c7:6e:bd:a2:d2:62:ae:a3:5e:
91:cd:c6:dd:39:5a:c1:e3:8d:3b:2a:f2:5d:79:ff:46:d7:ac:
f5:b4:54:d6:20:19:57:1a:13:9c:47:e6:a2:1a:19:3b:83:9d:
56:a6:a8:ae:de:29:39:ac:91:8c:43:e3:1e:1b:72:90:05:50:
09:a2:e6:bb:e3:d1:08:e9:33:a2:ca:c4:fc:c8:fd:15:aa:cd:
26:45:5a:65:74:19:6b:9f:5b:96:7b:4b:d9:e9:0f:fd:b0:f8:
c1:ef:1f:84:75:1c:15:42:1d:a1:9a:4d:10:ff:31:e2:15:b1:
76:23:f3:cf:80:95:02:1c:0a:a3:17:1b:4f:c0:94:25:fb:b4:
75:c6:e2:67:a2:22:ad:e1:07:15:26:0a:0a:76:83:41:55:6f:
c7:0f:8c:35:0e:c2:cb:fa:1d:26:50:9d:c8:af:f1:34:13:fc:
43:33:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 20:24:02 2024 by rpki-client on console-fra.rpki-client.org