Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/NQJzGmoCXrjCFNsUFNXVlOu97GE.roa
File: NQJzGmoCXrjCFNsUFNXVlOu97GE.roa (raw, json)
Hash identifier: /EyakEVAR+4h8Bz3WONN10t2I8mRqqNBcPyl+nDoQQk=
Subject key identifier: 35:02:73:1A:6A:02:5E:B8:C2:14:DB:14:14:D5:D5:94:EB:BD:EC:61
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018CC3B6D49CAC24DD5D7252691507A70D4E
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/NQJzGmoCXrjCFNsUFNXVlOu97GE.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 178.171.50.0/23 maxlen: 24
178.171.48.0/23 maxlen: 24
158.46.149.0/24 maxlen: 24
158.46.148.0/24 maxlen: 24
178.171.62.0/23 maxlen: 24
178.171.60.0/23 maxlen: 24
178.171.70.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
158.46.162.0/23 maxlen: 23
158.46.160.0/23 maxlen: 23
178.171.84.0/22 maxlen: 24
158.46.177.0/24 maxlen: 24
158.46.176.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.0.0/20 maxlen: 24
178.171.20.0/22 maxlen: 24
178.171.32.0/22 maxlen: 22
178.171.36.0/24 maxlen: 24
178.171.37.0/24 maxlen: 24
158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
158.46.192.0/22 maxlen: 22
158.46.188.0/22 maxlen: 24
178.171.94.0/24 maxlen: 24
158.46.196.0/22 maxlen: 24
178.171.104.0/24 maxlen: 24
178.171.101.0/24 maxlen: 24
178.171.102.0/24 maxlen: 24
178.171.100.0/24 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.200.0/21 maxlen: 24
178.171.110.0/23 maxlen: 24
158.46.207.0/24 maxlen: 24
178.171.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d4:9c:ac:24:dd:5d:72:52:69:15:07:a7:0d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3502731a6a025eb8c214db1414d5d594ebbdec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:7b:85:fe:fc:1d:a5:f8:d1:a7:00:d6:11:
67:55:32:62:02:6a:ae:29:f6:f1:17:5f:fd:8c:0d:
ad:ce:38:11:7e:5c:c4:76:90:83:50:64:6c:8d:02:
96:6c:ee:a1:02:90:37:a3:68:e5:f8:1e:84:95:d0:
03:09:cf:96:e9:e3:ea:e6:d7:79:b5:89:01:c1:1d:
93:a8:97:05:8b:8f:60:ca:88:7f:e5:be:df:c8:53:
f8:56:f6:17:19:8b:16:bb:36:ea:21:9d:06:a9:c9:
32:f5:b8:f8:aa:bd:83:cc:e1:e6:20:95:98:b4:8a:
87:83:13:8a:78:cd:3c:de:22:c3:22:6b:e7:f9:13:
9d:f7:41:08:6b:1f:19:f0:e6:19:1d:ef:e1:26:ad:
83:54:8c:c3:db:55:34:a2:74:7b:6b:78:6c:2c:47:
dc:7f:30:b2:c1:b5:ee:30:66:d5:00:c5:d2:4a:d7:
9a:8f:33:30:4e:b9:f8:38:19:ec:52:39:7d:ec:31:
3e:97:ec:32:30:b4:38:7b:16:44:69:6c:b7:0d:95:
bf:af:6b:c9:24:23:3f:b0:3e:af:2a:14:62:f3:ba:
64:16:b3:e5:37:3a:2e:2f:c3:d6:74:26:65:b9:c3:
a8:f0:ba:50:f8:03:d6:69:06:a7:4e:1c:05:23:50:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:73:1A:6A:02:5E:B8:C2:14:DB:14:14:D5:D5:94:EB:BD:EC:61
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/NQJzGmoCXrjCFNsUFNXVlOu97GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.148.0/23
158.46.160.0/22
158.46.176.0/23
158.46.188.0-158.46.207.255
158.46.250.0/23
178.171.0.0/20
178.171.20.0/22
178.171.32.0-178.171.37.255
178.171.48.0/22
178.171.60.0/22
178.171.69.0-178.171.70.255
178.171.84.0-178.171.89.255
178.171.94.0/24
178.171.100.0-178.171.102.255
178.171.104.0/24
178.171.110.0/23
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ea:e3:8a:0f:21:58:f5:53:54:b1:2a:c0:78:7c:3c:91:af:
2d:49:a7:5d:0c:11:c3:3e:fa:a3:e6:61:d7:7e:af:9c:98:80:
19:af:c0:42:43:03:07:f7:c4:c9:b3:64:70:29:af:27:04:3a:
17:81:7d:24:59:f7:d5:4b:97:ab:77:4d:ac:d5:89:f9:ad:7b:
00:c2:01:ea:ba:f5:cf:1c:a4:81:fe:1b:f2:ba:ff:0c:6c:f3:
7c:87:57:fd:10:5c:89:ed:d8:9c:55:cd:5f:f8:63:e9:b3:99:
56:10:78:85:75:ad:52:60:c0:24:4c:e8:6b:0f:c5:5a:5e:9c:
01:ed:ac:5d:39:19:f6:14:61:aa:ba:01:02:b9:96:44:ae:58:
a8:4c:87:82:48:66:10:90:4d:94:41:13:76:d8:cc:d9:58:99:
0a:89:0d:44:87:89:2a:0b:04:e9:88:e7:77:ac:2b:32:f5:4f:
79:d8:1d:3d:3a:65:8b:03:b0:9f:9d:41:89:04:33:57:02:86:
21:7f:5d:0b:e4:83:56:37:aa:8d:50:ee:83:8d:a5:e3:64:f1:
82:ce:c2:40:85:8e:a8:fa:52:9e:fd:64:1d:57:a8:ee:37:3c:
48:7d:68:71:53:b8:77:c9:7d:a4:fb:28:65:a3:f5:5f:24:d4:
d3:46:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 06:52:47 2024 by rpki-client on console-ams.rpki-client.org