Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/NEyV0u2UCpqsfQWCJeGEsF0IKl0.roa
File: NEyV0u2UCpqsfQWCJeGEsF0IKl0.roa (raw, json)
Hash identifier: lGXmo7YlgUNfAKpRTYLqw/utC0yIPsE0lZ9ca/9WKGg=
Subject key identifier: 34:4C:95:D2:ED:94:0A:9A:AC:7D:05:82:25:E1:84:B0:5D:08:2A:5D
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DE6B3AB4D5EA054C1631593B36B276084
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/NEyV0u2UCpqsfQWCJeGEsF0IKl0.roa
Signing time: Mon 26 Feb 2024 18:35:50 +0000
ROA not before: Mon 26 Feb 2024 18:35:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
91.188.220.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.56.35.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
185.212.112.0/24 maxlen: 24
185.234.8.0/24 maxlen: 24
188.95.71.0/24 maxlen: 24
193.3.18.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.18.26.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 14:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:b3:ab:4d:5e:a0:54:c1:63:15:93:b3:6b:27:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 26 18:35:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=344c95d2ed940a9aac7d058225e184b05d082a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:ac:59:b0:2b:1f:78:6e:23:a0:19:0e:96:
63:78:00:e7:fe:03:88:87:06:ba:69:fe:e1:72:e9:
a8:f6:32:c1:05:df:12:e6:47:5f:e3:6b:24:ca:c2:
6a:16:67:2b:29:4f:63:aa:06:69:7a:6f:cd:0f:95:
fe:c7:2d:9b:5a:7c:48:b6:0c:46:1e:58:68:1e:36:
b9:b9:a8:7a:a4:00:65:97:55:66:e5:fc:ed:94:d6:
f6:5f:0d:1b:3a:14:60:71:88:55:52:cb:c3:24:f1:
8b:91:10:ad:49:71:8d:a3:60:6c:9d:98:a6:86:12:
cf:83:84:e5:bd:e6:49:9b:e4:96:79:ba:9c:18:98:
91:12:99:2b:b8:5c:db:2f:18:ff:1b:fc:47:68:6e:
7f:7b:46:de:9a:c0:9c:f9:6e:eb:de:b2:0b:8f:94:
5c:45:75:d7:e3:6e:d6:94:21:ad:66:f2:5d:86:31:
a5:53:33:b9:24:10:8d:16:4e:31:3e:d5:6b:a0:e0:
9b:ff:ca:b3:a0:eb:7a:6c:85:37:1e:a6:34:ab:8f:
fd:45:25:3e:7a:a5:c1:fd:8e:f3:c1:31:c3:8e:1b:
0a:ac:b2:7e:bd:af:e5:f3:e1:d8:5a:98:2b:5e:5d:
b4:63:7f:30:14:d5:fe:36:a6:38:ce:90:22:03:e0:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:95:D2:ED:94:0A:9A:AC:7D:05:82:25:E1:84:B0:5D:08:2A:5D
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/NEyV0u2UCpqsfQWCJeGEsF0IKl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.221.0/24
45.89.68.0/24
45.89.71.0/24
91.188.220.0/24
94.158.188.0/24
176.56.35.0/24
176.124.34.0/24
185.212.112.0/24
185.234.8.0/24
188.95.71.0/24
193.3.18.0/24
193.201.114.0/24
194.32.240.0/24
195.18.26.0/24
195.69.148.0/24
195.69.150.0/24
195.225.96.0/24
212.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
28:5e:a1:f6:11:bb:76:8e:6c:9b:d5:9b:b2:30:14:3c:2e:a4:
66:a9:0f:f2:1c:42:17:48:f2:34:e8:6e:93:b5:18:3e:68:50:
52:7a:e1:1c:16:01:f2:76:8d:81:e9:07:74:ce:e2:7b:ac:fb:
99:a2:b0:cb:b6:82:c6:94:c2:16:5c:7b:ec:06:4a:12:cb:79:
b3:37:d9:f9:e7:58:02:67:ea:43:fa:b9:19:32:73:6b:6e:2c:
be:1b:a1:5d:2e:be:83:f2:83:67:d8:eb:85:72:3d:2f:59:40:
b5:5c:2e:f2:35:7a:46:79:b1:9b:c7:b7:ff:f5:41:1a:91:67:
89:45:77:43:fe:88:13:66:2c:11:87:8c:87:8b:50:e5:65:a6:
7e:aa:0e:e9:86:6a:af:e2:ef:14:ad:89:bf:0b:35:09:85:36:
4f:46:4d:60:a2:25:c6:33:9b:63:52:d3:5b:40:99:72:75:e6:
7c:26:27:8f:a9:22:7d:8b:9c:65:fe:b0:0d:2d:ee:b2:2b:6a:
22:0f:51:c3:a0:c4:04:bb:23:9b:af:a2:4d:15:fb:05:f4:5a:
3f:b9:ef:d5:60:2a:bb:e4:a1:47:07:0a:8d:54:96:cd:04:00:
70:f8:35:ba:8e:51:c6:43:48:ac:60:6e:64:c3:6c:32:d5:c7:
d2:2a:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:53:06 2024 by rpki-client on console-ams.rpki-client.org