Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Sg1OPtlFmXD3xWB5Kf_CX4I6bQw.roa
File: Sg1OPtlFmXD3xWB5Kf_CX4I6bQw.roa (raw, json)
Hash identifier: CjKwn1mMbRv0oxuFNYkn8ubRNPxsFGWg9n4jb2p5feM=
Subject key identifier: 4A:0D:4E:3E:D9:45:99:70:F7:C5:60:79:29:FF:C2:5F:82:3A:6D:0C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DF412CD0680B21398772EC2BB0EF613F4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Sg1OPtlFmXD3xWB5Kf_CX4I6bQw.roa
Signing time: Thu 29 Feb 2024 08:54:49 +0000
ROA not before: Thu 29 Feb 2024 08:54:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:12:cd:06:80:b2:13:98:77:2e:c2:bb:0e:f6:13:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 29 08:54:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a0d4e3ed9459970f7c5607929ffc25f823a6d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:db:10:cb:74:48:a4:ea:30:73:16:0c:1f:
4c:c2:76:ff:3e:ac:8e:58:ec:d7:a2:65:86:95:43:
df:00:6c:8d:fe:8c:2e:17:80:d4:85:32:19:59:1d:
04:e6:b1:0e:6f:66:82:16:a7:74:59:d9:ea:32:f3:
76:46:b0:cf:85:89:fb:0d:19:f4:12:87:f6:72:8f:
74:15:f9:74:c3:31:37:94:1e:d8:04:b6:6c:05:e5:
37:51:0d:85:3c:22:c5:8b:dc:8d:0a:d4:8e:ee:d1:
ad:6b:f9:2e:6f:22:13:bc:3f:09:77:8a:ef:9f:c3:
1c:91:f4:fa:f0:f8:66:1b:34:5d:0a:3a:54:14:f0:
49:10:a0:87:55:6a:31:e7:e3:f0:e4:64:d3:6e:fa:
f9:76:1d:13:15:b3:54:4e:41:2f:01:d5:4a:aa:2d:
9e:c7:23:2c:7e:68:0f:c4:76:6e:fa:58:ae:f7:89:
96:c5:7a:b8:f7:d8:b1:2f:d1:01:1c:62:18:cf:ee:
72:a0:dc:39:29:f3:55:0f:fd:43:50:d5:cc:81:99:
b0:ab:56:13:83:24:e0:74:4b:25:53:4b:f8:23:ea:
9d:a2:a9:2f:ef:e0:47:ef:c1:5f:c7:91:d1:e1:7e:
41:35:33:12:cb:ef:97:ee:4e:e4:0c:37:08:f9:d0:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:4E:3E:D9:45:99:70:F7:C5:60:79:29:FF:C2:5F:82:3A:6D:0C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Sg1OPtlFmXD3xWB5Kf_CX4I6bQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
62.68.83.0/24
62.233.49.0/24
91.242.238.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
176.56.38.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.239.209.0/24
194.32.243.0/24
195.64.112.0/24
195.96.146.0/24
195.96.157.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
56:dc:4f:93:24:cd:3e:79:05:f2:1a:82:15:15:77:e6:fd:58:
c4:71:b1:e7:c7:01:9f:65:38:0d:3f:25:1b:73:67:ca:08:4d:
a4:d7:23:63:7c:ca:d1:27:e1:ed:ff:7d:17:85:c1:c7:3a:26:
50:b4:b8:15:bc:29:f5:79:cc:58:69:ed:42:8d:73:8e:a3:39:
8f:e5:65:91:9c:53:de:7a:24:78:a3:77:49:27:a8:c4:b2:77:
e2:24:79:16:23:23:f4:df:ce:28:b2:eb:5a:93:61:98:5b:65:
7c:a5:01:b7:53:17:bf:ac:78:0d:4d:8f:87:89:77:d0:67:21:
73:7c:d5:72:0f:b5:3c:09:e2:50:23:3b:38:b2:29:9d:41:55:
82:17:d9:21:47:78:81:c0:c0:f0:b9:69:d4:3b:09:55:ff:b2:
07:ce:e9:27:bb:7c:51:a8:49:dd:4f:5c:6f:af:84:dc:16:6f:
26:b1:c0:ab:8a:20:02:8d:bf:97:60:00:13:0a:dc:1c:6e:6a:
a3:15:e9:32:f0:f3:39:74:e0:73:a6:14:cd:2b:5a:5e:9a:0a:
e7:c0:e9:e5:78:12:db:e6:11:03:de:75:b6:9e:fe:0d:f8:19:
33:e8:c6:ff:22:25:7d:32:25:fb:6c:e6:be:f8:75:79:23:4f:
6c:e1:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org