Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/cNmufoLJ5hpXEa27Lu6C3s49Hv8.roa
File: cNmufoLJ5hpXEa27Lu6C3s49Hv8.roa (raw, json)
Hash identifier: cHpOja6OgQXEE06Bq8ocDFavfnIT7ihSt7zo2bX8SXA=
Subject key identifier: 70:D9:AE:7E:82:C9:E6:1A:57:11:AD:BB:2E:EE:82:DE:CE:3D:1E:FF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DE6B3A932ED914C2E9583A98A6AB3278A
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/cNmufoLJ5hpXEa27Lu6C3s49Hv8.roa
Signing time: Mon 26 Feb 2024 18:35:50 +0000
ROA not before: Mon 26 Feb 2024 18:35:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2.59.49.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
37.221.82.0/23 maxlen: 23
45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
45.11.196.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.36.0/24 maxlen: 24
45.132.37.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.140.72.0/22 maxlen: 22
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
195.225.99.0/24 maxlen: 24
213.166.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 27 Feb 2024 18:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:b3:a9:32:ed:91:4c:2e:95:83:a9:8a:6a:b3:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 26 18:35:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70d9ae7e82c9e61a5711adbb2eee82dece3d1eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:f3:12:8e:85:b6:75:6a:43:62:02:a1:bf:
4f:e3:2b:93:8b:10:16:33:c8:82:9a:8b:73:e6:8f:
d3:8e:d2:07:58:9b:e0:ea:9c:98:b5:e8:d1:c5:d8:
6c:f7:6e:fe:3f:24:b7:b9:bb:84:cc:bd:88:44:1a:
66:85:aa:8c:24:62:dd:44:c4:d7:7d:d9:ba:7b:09:
32:56:56:b3:58:fc:95:6b:d4:86:5c:88:47:3b:1c:
2d:a5:bf:04:6d:a9:ad:2f:f9:22:6d:fe:3e:18:1e:
11:93:c3:60:4a:23:bf:df:06:07:69:86:9e:81:35:
bd:4d:d6:28:cb:3d:9c:fb:ed:ac:fe:ca:cb:b2:68:
45:ec:c0:c5:83:36:5b:2e:bd:c5:e5:2d:96:7d:9a:
19:21:74:b8:51:0a:41:59:82:39:95:f8:85:a1:32:
a0:b6:8b:44:99:b9:83:4f:6f:dc:a1:3f:27:9a:38:
bc:4b:b4:2b:95:2c:51:ec:2f:06:f4:6b:70:69:79:
43:99:44:26:26:f2:ee:2e:78:2c:03:23:68:d4:ae:
39:28:cb:73:d8:de:2c:33:89:08:21:63:96:dd:32:
6a:e2:06:fb:81:79:88:63:4f:f3:60:17:dc:93:d8:
8f:75:2d:7b:7e:47:c7:c7:6b:d2:5e:b6:58:fe:0c:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:AE:7E:82:C9:E6:1A:57:11:AD:BB:2E:EE:82:DE:CE:3D:1E:FF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/cNmufoLJ5hpXEa27Lu6C3s49Hv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.216.60.0/24
37.221.82.0/23
45.10.64.0/22
45.10.80.0/22
45.11.196.0/24
45.15.238.0/24
45.93.80.0/24
45.132.36.0-45.132.38.255
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.140.64.0/24
45.140.72.0/22
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.233.48.0/24
84.246.81.0/24
89.107.12.0/24
91.206.68.0/24
91.236.121.0/24
176.116.12.0/24
176.222.56.0/23
176.222.59.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/23
193.58.170.0/24
194.104.228.0/24
195.216.132.0/22
195.225.99.0/24
213.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
33:cd:b1:c2:04:60:58:b5:cf:25:66:84:0f:8e:5d:56:0c:55:
45:da:aa:7e:3b:de:bf:13:55:67:4c:60:fc:b6:2a:2c:8f:6e:
4f:62:52:5c:24:78:7d:30:0b:f3:4b:00:1f:e8:a1:f1:8e:4f:
d7:08:8b:b3:04:61:13:5b:86:29:75:d0:f5:83:11:9e:ef:e6:
fd:22:ec:f4:0d:74:ed:03:4a:34:bd:b3:55:f8:79:99:5a:45:
24:b9:c5:59:2d:9e:21:96:96:9c:da:cf:36:56:91:76:46:bc:
0f:c8:d4:03:59:2b:5f:bb:97:f8:d3:46:ce:0f:7e:eb:33:e9:
01:59:4f:13:c1:99:80:75:f1:0b:07:17:dd:fc:a4:18:c7:a4:
33:f2:d4:1d:af:fa:f9:6b:4d:ca:90:49:cd:fd:bb:ca:71:7e:
8a:f6:cf:af:b8:54:4a:c8:6e:8e:c5:89:98:d7:f7:c3:5a:74:
f8:4d:9e:e6:d8:20:31:60:d3:a9:86:95:01:e6:26:a8:c5:73:
a5:72:34:0c:76:f8:ba:fb:4c:3b:7a:d6:9b:cc:6f:ac:a4:57:
53:d0:a9:1a:54:ba:11:73:34:b8:60:e5:08:82:bd:c8:e1:44:
9a:a6:6b:f4:71:f3:9d:7c:32:be:f2:d9:58:c8:60:35:c5:42:
aa:b6:90:70
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAY3ms6ky7ZFMLpWDqYpqsyeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjI2MTgzNTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGQ5YWU3ZTgyYzllNjFhNTcxMWFkYmIyZWVlODJkZWNlM2QxZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqzzEo6FtnVqQ2ICob9P4yuTixAW
M8iCmotz5o/TjtIHWJvg6pyYtejRxdhs927+PyS3ubuEzL2IRBpmhaqMJGLdRMTX
fdm6ewkyVlazWPyVa9SGXIhHOxwtpb8EbamtL/kibf4+GB4Rk8NgSiO/3wYHaYae
gTW9TdYoyz2c++2s/srLsmhF7MDFgzZbLr3F5S2WfZoZIXS4UQpBWYI5lfiFoTKg
totEmbmDT2/coT8nmji8S7QrlSxR7C8G9GtwaXlDmUQmJvLuLngsAyNo1K45KMtz
2N4sM4kIIWOW3TJq4gb7gXmIY0/zYBfck9iPdS17fkfHx2vSXrZY/gxBTwIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFHDZrn6CyeYaVxGtuy7ugt7OPR7/MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvY05tdWZvTEo1aHBYRWEyN0x1NkMzczQ5SHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME
AAI7MQMEAB/YPAMEASXdUgMEAi0KQAMEAi0KUAMEAC0LxAMEAC0P7gMEAC1dUDAM
AwQCLYQkAwQALYQmAwQBLYSAMAwDBAAtitUDBAAtitYDBAEtizQDBAAtizcDBAAt
jEADBAItjEgDBAEtkhgDBAAtkhsDBAItkwwDBAAtlYEDBAEtmHQDBAAtn1QDBAAt
n1cDBAA+6TADBABU9lEDBABZawwDBABbzkQDBABb7HkDBACwdAwDBAGw3jgDBACw
3jsDBAC5vCkDBADBBRwDBAHBHwQDBADBOqoDBADCaOQDBALD2IQDBADD4WMDBALV
pkAwDQYJKoZIhvcNAQELBQADggEBADPNscIEYFi1zyVmhA+OXVYMVUXaqn473r8T
VWdMYPy2KiyPbk9iUlwkeH0wC/NLAB/oofGOT9cIi7MEYRNbhil10PWDEZ7v5v0i
7PQNdO0DSjS9s1X4eZlaRSS5xVktniGWlpzazzZWkXZGvA/I1ANZK1+7l/jTRs4P
fusz6QFZTxPBmYB18QsHF938pBjHpDPy1B2v+vlrTcqQSc39u8pxfor2z6+4VErI
bo7FiZjX98NadPhNnubYIDFg06mGlQHmJqjFc6VyNAx2+Lr7TDt61pvMb6ykV1PQ
qRpUuhFzNLhg5QiCvcjhRJqma/Rx8518Mr7y2VjIYDXFQqq2kHA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org