Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SNTlTcfCqbOnZCZpROmV_J2Qh5A.roa
File: SNTlTcfCqbOnZCZpROmV_J2Qh5A.roa (raw, json)
Hash identifier: +/3Ul+qOLNqappD97Wb3x4DPnpevrklqLre+NvHOYNw=
Subject key identifier: 48:D4:E5:4D:C7:C2:A9:B3:A7:64:26:69:44:E9:95:FC:9D:90:87:90
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191E4FFDD0131ED740982C366EF2CA55B13
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SNTlTcfCqbOnZCZpROmV_J2Qh5A.roa
Signing time: Thu 12 Sep 2024 06:50:59 +0000
ROA not before: Thu 12 Sep 2024 06:50:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 31.42.183.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 14 Sep 2024 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:ff:dd:01:31:ed:74:09:82:c3:66:ef:2c:a5:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 12 06:50:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48d4e54dc7c2a9b3a764266944e995fc9d908790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:a4:b5:02:21:98:4b:27:33:d1:22:f6:06:
b6:d5:bf:21:f3:b0:d1:12:f7:c0:ed:7a:62:ad:57:
22:c1:44:b4:98:94:cd:85:3a:65:93:59:40:b9:43:
4b:d8:2b:bf:a5:c7:08:98:78:25:41:f3:e3:63:e1:
23:dc:5c:34:42:c6:cd:5f:3a:48:5f:9e:c0:d4:4a:
56:0d:50:ba:93:6e:f4:f9:48:53:5d:25:31:9c:74:
34:48:5c:35:28:fc:3c:cf:89:cd:91:f4:c8:fe:dc:
10:73:98:99:01:2b:1e:1f:8f:73:f3:44:b5:4c:87:
45:57:c2:25:2b:06:50:21:14:87:6f:99:47:54:f8:
97:96:b8:f7:17:40:6a:8f:aa:5b:d6:5a:f4:e6:90:
ac:71:c5:d7:fb:9c:32:6d:f6:bb:77:3a:12:03:99:
05:99:4a:47:34:e3:db:ba:28:54:e3:86:6b:8e:d9:
58:7c:f5:7b:5a:2f:90:43:9f:ee:f7:75:11:5e:c7:
28:ac:bb:5a:86:2a:f1:5d:f4:d0:19:ce:b4:18:40:
3a:e8:a0:20:87:ff:9c:df:22:00:1d:56:14:06:e4:
1e:f9:72:55:ff:5e:ee:a1:7e:22:1b:cb:96:62:0f:
e3:3c:8b:45:4d:20:7c:96:4d:04:05:66:75:91:1a:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:E5:4D:C7:C2:A9:B3:A7:64:26:69:44:E9:95:FC:9D:90:87:90
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SNTlTcfCqbOnZCZpROmV_J2Qh5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.136.136.0/22
77.81.50.0/23
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
66:fe:ad:3b:91:69:04:da:eb:13:44:62:50:09:47:3f:7c:61:
23:c3:c4:52:71:12:6b:f9:ec:dd:18:8d:7b:2b:52:2b:8a:8f:
90:70:f7:c7:64:ef:a3:7a:fd:91:8d:c3:22:b3:fe:1f:2e:30:
47:6f:d1:5d:e9:51:86:45:21:95:fb:6a:b6:89:c5:c2:a7:d6:
98:75:19:ee:c7:b7:b2:08:0f:58:3e:78:a7:d9:8b:c0:7f:73:
39:d2:c1:47:29:7b:6a:50:80:8b:db:67:fe:a8:18:1c:c8:25:
5b:b8:d2:91:d7:e4:5a:9b:bf:65:12:59:78:35:9d:60:fa:08:
bb:4a:b0:55:24:1d:ce:5a:f3:bd:d7:57:de:40:f4:6b:7e:9a:
7d:42:ae:45:09:5a:c2:db:51:98:03:ec:96:47:75:4d:a8:ac:
ff:da:35:2d:f1:5b:a3:d8:f6:fd:52:0a:65:04:ac:15:31:bb:
e8:6e:7d:89:23:24:c9:cd:ec:60:31:c5:90:f4:13:b1:f1:22:
f4:32:98:cb:80:e3:a4:45:e3:6b:fa:bb:0a:3a:29:d0:aa:79:
73:f0:a9:2c:ef:35:b3:17:03:91:33:1d:56:ac:44:5e:9d:81:
5d:d5:13:63:0f:8c:85:a2:ef:b1:b7:12:8c:44:e1:38:6e:8a:
59:02:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 13:24:43 2024 by rpki-client on console-ams.rpki-client.org