Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/OpWrGDuThqYAbk-Dua5rMH2Lr_4.roa
File: OpWrGDuThqYAbk-Dua5rMH2Lr_4.roa (raw, json)
Hash identifier: QEmB+H4bYVF5zHMSMpWeZMHDCgso64mNxhdPbr3QmD4=
Subject key identifier: 3A:95:AB:18:3B:93:86:A6:00:6E:4F:83:B9:AE:6B:30:7D:8B:AF:FE
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC2804356BE35F4B7CC80D579A3AA7B79
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/OpWrGDuThqYAbk-Dua5rMH2Lr_4.roa
Signing time: Mon 19 Feb 2024 17:53:22 +0000
ROA not before: Mon 19 Feb 2024 17:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:80:43:56:be:35:f4:b7:cc:80:d5:79:a3:aa:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 19 17:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a95ab183b9386a6006e4f83b9ae6b307d8baffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:3b:69:6e:2b:e5:9a:47:93:ba:68:c0:d4:
7d:b6:b7:38:68:04:5e:da:8e:71:5f:b2:a2:56:97:
23:55:39:de:5e:90:db:e6:a1:9b:5d:68:c3:97:30:
b5:b1:71:b3:08:ce:24:d8:c5:c6:5d:b2:86:79:35:
98:43:8a:60:e1:c9:2c:15:39:53:97:b3:e2:1b:72:
df:9a:9c:61:e1:b8:45:d2:3d:82:50:0b:6d:bb:aa:
8f:0c:f9:d1:a4:05:a8:ee:d2:0f:08:4e:ea:5d:04:
7f:d2:96:0a:59:f4:86:1e:05:23:f8:6d:9e:88:a7:
64:bf:b0:31:46:ba:d5:cf:dd:97:4c:50:b0:dd:e8:
37:16:31:8f:7c:6a:44:d0:d9:0c:20:33:8b:a7:bb:
48:53:6b:0d:e7:e3:8a:c6:8a:77:e8:3a:d9:e4:80:
a3:b1:7e:e9:0a:56:01:d2:eb:c2:42:7a:02:28:97:
82:05:d6:9c:d5:b1:f2:40:13:cd:9c:80:e7:cc:fe:
0f:19:e3:67:5a:d8:a4:a3:2b:6b:d6:8e:09:d8:f4:
4e:e6:85:41:1f:c7:72:96:6b:fc:e2:28:c5:5f:aa:
6f:a8:97:b8:c5:cf:d8:fd:3c:60:a2:da:eb:9f:01:
90:ff:cd:af:43:29:f0:a9:23:02:3d:58:eb:9b:e5:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:95:AB:18:3B:93:86:A6:00:6E:4F:83:B9:AE:6B:30:7D:8B:AF:FE
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/OpWrGDuThqYAbk-Dua5rMH2Lr_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
91.206.68.0/24
91.236.121.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a5:92:7b:d1:1c:85:6d:5a:29:1e:6b:ff:bc:eb:68:dd:8e:
2c:e6:1b:dc:d4:ce:21:81:3a:0d:14:53:5f:aa:ff:b9:ab:ab:
3c:d7:e0:bc:30:3f:25:b8:0a:1b:b1:66:dd:55:a4:71:84:94:
40:b1:4f:bf:10:1e:2e:0f:1b:c7:6d:7c:34:da:da:c2:fe:12:
ac:05:7e:f8:d4:30:56:77:ef:37:ac:ea:37:10:3e:ad:1e:6a:
c0:10:c9:25:26:bd:fe:47:9a:06:03:13:97:34:d9:e1:5a:5d:
f3:f3:6d:b8:35:b0:35:79:df:26:ae:c9:60:43:cd:76:d0:b9:
1f:3f:88:93:e4:46:36:ed:de:4d:79:9d:18:87:07:a1:75:62:
d6:c0:b0:91:27:be:b5:77:31:a6:5f:d7:5e:b9:fd:02:d5:09:
41:73:d8:bd:2b:ce:61:10:48:a4:99:68:c8:b6:1d:1d:19:62:
43:8d:cd:fd:f9:66:62:ef:64:3b:e1:a9:8f:72:94:6e:f6:ba:
40:df:9e:0f:cd:69:b0:14:be:0c:c6:9f:06:f2:7f:b4:3f:86:
85:d2:2c:17:92:d3:c7:ad:89:01:3c:69:ed:43:fb:ab:12:21:
97:24:6c:e8:10:16:96:8e:9d:86:b0:ba:73:c7:7c:e4:ec:47:
ed:7e:cf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org