Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/M3HI2PtDUnNCaYKcVbZC_pAdM1g.roa
File: M3HI2PtDUnNCaYKcVbZC_pAdM1g.roa (raw, json)
Hash identifier: YTUq4F2DjOAjR8fp/Wn79idrDRiRlezeOiDdIgXpfbM=
Subject key identifier: 33:71:C8:D8:FB:43:52:73:42:69:82:9C:55:B6:42:FE:90:1D:33:58
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DCC6504306C59828AC6CBB737B945DE62
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/M3HI2PtDUnNCaYKcVbZC_pAdM1g.roa
Signing time: Wed 21 Feb 2024 15:59:48 +0000
ROA not before: Wed 21 Feb 2024 15:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35048
IP address blocks: 2.59.50.0/24 maxlen: 24
5.183.130.0/24 maxlen: 24
45.11.20.0/24 maxlen: 24
45.11.21.0/24 maxlen: 24
45.15.236.0/24 maxlen: 24
45.15.237.0/24 maxlen: 24
45.84.176.0/24 maxlen: 24
45.84.177.0/24 maxlen: 24
45.135.32.0/24 maxlen: 24
45.135.33.0/24 maxlen: 24
92.119.193.0/24 maxlen: 24
94.158.190.0/24 maxlen: 24
193.53.168.0/24 maxlen: 24
193.58.168.0/24 maxlen: 24
193.58.169.0/24 maxlen: 24
194.32.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:65:04:30:6c:59:82:8a:c6:cb:b7:37:b9:45:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 15:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3371c8d8fb4352734269829c55b642fe901d3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:3e:c5:86:27:c0:08:c1:72:70:36:2c:db:
ca:fb:df:cc:bf:1f:5e:23:5a:9c:ae:72:5d:a3:66:
8e:a9:d8:15:fd:45:76:ff:46:80:3c:78:7e:36:e1:
1d:fc:ab:d9:0d:65:d2:35:8f:83:f2:6b:a1:81:ec:
ea:0d:63:9f:3a:cc:c9:55:c8:69:39:dc:f5:b0:6e:
3d:b5:9f:ea:66:17:bd:3e:7c:a3:57:91:49:b3:dc:
00:0e:96:f6:7e:d6:30:fa:34:bb:87:db:2b:c1:1c:
16:88:0b:ea:cc:bb:74:42:b3:1e:c3:7b:cd:99:16:
59:61:ab:ff:35:2d:f5:02:16:71:13:9d:2a:f9:0c:
4a:a0:a3:48:4f:42:0f:31:78:68:e2:49:cc:0f:b8:
8a:8f:82:95:16:23:f7:56:10:a4:c8:00:19:51:81:
dd:c1:50:c6:33:bd:ab:a0:6c:fd:e0:6e:aa:6e:75:
a1:52:e4:9f:79:af:dc:a5:de:6b:2b:b8:ab:1a:d3:
08:2b:cb:63:27:5f:26:ff:b7:18:5f:4b:2d:15:30:
20:57:31:b5:2b:b0:53:8f:ba:f9:89:20:7c:3e:af:
d3:2d:ef:a5:13:4c:3c:82:99:71:fd:80:2b:0a:e7:
4b:30:5e:a5:d7:e4:0c:e5:58:d7:69:26:3b:72:ae:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:C8:D8:FB:43:52:73:42:69:82:9C:55:B6:42:FE:90:1D:33:58
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/M3HI2PtDUnNCaYKcVbZC_pAdM1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.50.0/24
5.183.130.0/24
45.11.20.0/23
45.15.236.0/23
45.84.176.0/23
45.135.32.0/23
92.119.193.0/24
94.158.190.0/24
193.53.168.0/24
193.58.168.0/23
194.32.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7d:e0:47:03:32:93:9e:51:27:1a:f7:60:76:36:da:f0:13:
6f:01:21:58:72:63:43:ad:7d:18:79:4c:e3:0a:62:96:48:ca:
e8:c2:61:34:78:64:85:c1:90:b8:5c:c3:08:8b:88:8d:0e:4d:
b6:58:8b:4f:ff:96:49:9d:c7:c5:f4:e3:fb:65:86:39:8b:6d:
4f:e7:25:9c:a1:eb:f3:fb:5b:1c:ce:fe:b1:50:c5:29:f8:ab:
86:10:b4:48:7e:cc:53:2b:a7:32:f9:8c:c7:d9:53:c4:78:27:
94:58:0f:74:d4:d9:6c:89:d4:f2:05:17:e0:f8:02:33:c7:7c:
a8:42:38:84:aa:f6:6d:80:73:b4:ea:0a:1b:6a:6a:ce:dc:5e:
d5:b6:43:28:d6:b4:50:d2:45:82:e9:78:44:c5:26:f3:c0:12:
1f:82:d3:47:ba:06:c8:7f:f1:96:fe:5e:3c:b3:7d:ad:b5:0b:
9c:88:0d:65:dd:f7:a7:54:f5:80:44:ce:cb:80:fc:5e:9c:3b:
46:92:5a:4f:09:f1:e2:50:b5:01:2a:9f:79:fd:97:7d:42:aa:
ff:05:26:51:18:57:f6:8d:7b:fc:bd:87:10:ba:32:2e:a2:32:
7f:79:8d:02:ac:b2:ed:f2:63:12:ea:0a:e1:4f:d2:f8:4a:45:
c0:de:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org