Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gNoB6Bs6VbDemMdPhRV8fdJlRWg.roa
File: gNoB6Bs6VbDemMdPhRV8fdJlRWg.roa (raw, json)
Hash identifier: sJ7/2pbt5DgcMx0sjClYgr8ZRxc1NZy+gcs6TWsIH+s=
Subject key identifier: 80:DA:01:E8:1B:3A:55:B0:DE:98:C7:4F:85:15:7C:7D:D2:65:45:68
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E1EACE3914CB81B24DAA076B230357044
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gNoB6Bs6VbDemMdPhRV8fdJlRWg.roa
Signing time: Fri 08 Mar 2024 15:27:10 +0000
ROA not before: Fri 08 Mar 2024 15:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
2.56.113.0/24 maxlen: 24
5.183.128.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
62.68.83.0/24 maxlen: 24
62.204.57.0/24 maxlen: 24
62.233.35.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.213.117.0/24 maxlen: 24
91.242.225.0/24 maxlen: 24
91.242.238.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.185.0/24 maxlen: 24
146.19.194.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
178.211.140.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
185.232.47.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.141.53.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
194.26.216.0/24 maxlen: 24
194.26.221.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
195.64.106.0/24 maxlen: 24
195.64.109.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.64.117.0/24 maxlen: 24
195.93.249.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
217.119.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 12:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:ac:e3:91:4c:b8:1b:24:da:a0:76:b2:30:35:70:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 8 15:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80da01e81b3a55b0de98c74f85157c7dd2654568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:57:74:48:e2:9a:dd:77:bb:68:89:8d:fc:
df:ab:60:96:27:e7:03:c1:b1:ce:5d:af:69:bd:63:
fc:e8:5b:1a:98:7e:db:07:12:2b:70:ff:6e:4a:04:
f2:dc:ab:20:5d:f7:f2:ca:66:46:7f:e8:7a:74:9d:
aa:b8:17:13:4e:c5:83:e8:b0:b5:ca:28:0a:d4:e6:
93:f7:c0:96:b9:60:e3:9f:fb:2b:28:c7:50:b8:28:
f4:73:cc:00:bd:03:d7:19:f5:e9:47:e7:3e:74:58:
d6:8f:2a:9d:10:05:e0:1a:df:30:10:60:41:5f:b0:
66:0a:d8:61:ec:2f:9a:39:67:3a:95:4a:ea:71:8e:
9a:08:20:aa:f6:8e:63:13:16:af:a9:6c:df:2f:bb:
fd:89:df:44:33:d9:f1:d5:4f:22:8d:e7:89:aa:9f:
f2:62:e9:09:f2:0d:58:07:ee:6c:ec:88:f6:4c:bb:
f2:32:cd:43:cf:c5:e8:ef:e3:94:9d:06:6e:6c:c7:
2c:77:82:79:35:36:cb:b5:86:3f:8a:55:b1:2d:62:
88:34:29:85:2c:77:62:01:7e:26:70:22:7c:f4:e9:
5c:f5:4c:c2:7f:e2:79:7d:34:df:ac:af:08:98:0a:
63:62:13:fa:20:1a:82:48:f9:4c:be:fd:13:78:1b:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DA:01:E8:1B:3A:55:B0:DE:98:C7:4F:85:15:7C:7D:D2:65:45:68
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gNoB6Bs6VbDemMdPhRV8fdJlRWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/23
5.183.128.0/24
31.222.248.0/24
62.68.83.0/24
62.204.57.0/24
62.233.35.0/24
62.233.49.0/24
62.233.60.0/24
80.91.210.0/24
91.213.117.0/24
91.242.225.0/24
91.242.238.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.185.0/24
146.19.194.0/24
176.56.38.0/24
178.211.140.0/24
185.122.206.0/24
185.218.1.0/24
185.232.47.0/24
193.3.22.0/24
193.141.53.0/24
193.239.209.0/24
194.26.216.0/24
194.26.221.0/24
194.32.243.0/24
195.64.106.0/24
195.64.109.0/24
195.64.112.0/24
195.64.114.0/24
195.64.117.0/24
195.93.249.0/24
195.96.146.0/24
195.96.155.0/24
195.96.157.0/24
212.18.103.0/24
212.52.5.0/24
217.114.32.0/24
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
04:47:4b:f6:6c:84:2c:c9:77:3c:1b:27:4f:f5:33:99:d9:81:
de:2b:a2:f4:ed:13:80:c4:ff:af:88:f6:b6:6c:a7:84:24:45:
14:66:ec:3c:06:5b:98:89:1a:5b:80:14:9a:b8:97:43:ca:75:
21:97:fc:f2:9f:3b:44:10:fa:23:cc:fd:8d:aa:c6:f5:bd:f4:
40:4b:cb:5d:f5:9e:15:31:76:b4:a3:73:45:e1:42:d2:e0:be:
de:a6:f9:30:9d:be:c7:bf:2c:6e:b3:d5:67:f9:77:ce:72:df:
e4:6e:7a:c1:6d:42:cb:6a:30:ca:78:b4:d1:66:0e:3a:ee:06:
a1:c8:73:8d:71:77:fa:ec:ac:74:24:95:c5:36:38:ad:62:04:
a0:c5:17:6f:62:78:b0:e6:be:87:f7:b1:bb:02:da:21:26:45:
8e:8b:25:6e:48:6f:13:0e:92:53:48:39:7e:ed:12:09:25:41:
f8:47:ba:a3:5d:d2:ff:c0:91:0f:fc:e9:84:75:3e:40:0a:5c:
77:39:eb:fc:dd:53:f5:e1:4e:cf:28:06:8a:41:6b:fb:cc:3c:
72:e5:2c:d6:d8:46:94:a9:98:2a:b6:ee:d6:91:cc:21:1a:d1:
c1:18:58:5e:0c:50:4b:07:bc:fd:81:ad:ae:2c:6e:73:13:d6:
50:01:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:49 2024 by rpki-client on console-ams.rpki-client.org