Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ng8MhDje-N5oJ6urop0uUc9DfBM.roa
File: ng8MhDje-N5oJ6urop0uUc9DfBM.roa (raw, json)
Hash identifier: +u8vWZmhSvOAuZWgOFyyiSiEv+9Wr6uhVsBqbdlE2Dg=
Subject key identifier: 9E:0F:0C:84:38:DE:F8:DE:68:27:AB:AB:A2:9D:2E:51:CF:43:7C:13
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019275A9222D192261B0F7008C24C750EE86
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ng8MhDje-N5oJ6urop0uUc9DfBM.roa
Signing time: Thu 10 Oct 2024 09:01:11 +0000
ROA not before: Thu 10 Oct 2024 09:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 45.12.68.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 24 Oct 2024 10:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:a9:22:2d:19:22:61:b0:f7:00:8c:24:c7:50:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 10 09:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e0f0c8438def8de6827ababa29d2e51cf437c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:2d:0f:e9:3c:d7:3b:42:65:02:34:d2:03:
29:70:ad:07:59:76:0f:0c:21:ad:da:37:b7:91:72:
ef:63:82:ed:7a:66:c3:66:5a:0e:33:4e:70:71:0c:
dd:b3:cd:29:6a:00:2c:3d:96:dc:29:46:77:bf:f3:
03:b8:49:1c:c3:eb:c4:62:88:23:de:56:e4:15:f5:
83:37:18:93:a5:d2:2f:c2:f2:cf:00:84:44:df:95:
67:2e:e9:b1:c9:c7:3b:19:90:e7:d6:f4:6b:14:00:
2d:94:9f:49:90:2b:f8:d8:b2:ac:e1:4a:d8:21:2c:
cb:bd:43:e8:1e:1b:fd:e6:3f:53:50:07:9c:8b:4a:
9f:2b:4a:88:39:86:3a:8f:4c:78:05:77:6e:1f:4a:
a5:16:29:7d:67:52:82:9f:dc:c2:7c:81:2a:38:d4:
ec:23:11:1f:3a:be:0c:67:db:d3:97:81:0d:a5:11:
bf:84:ce:d4:b2:22:af:5c:02:43:b4:f7:6f:a8:06:
c4:ce:95:79:9b:f0:4a:8b:f6:ad:6f:2b:e3:8b:3f:
79:ab:e4:54:b7:ad:be:a0:9f:76:78:af:c4:08:11:
a9:8d:22:7a:1b:7a:68:44:fe:5a:8e:fd:e3:74:91:
02:97:10:e4:28:34:b3:14:d5:6b:98:45:29:3d:12:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:0C:84:38:DE:F8:DE:68:27:AB:AB:A2:9D:2E:51:CF:43:7C:13
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ng8MhDje-N5oJ6urop0uUc9DfBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/22
45.136.136.0/22
77.81.50.0/23
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
5f:8e:0f:00:f5:68:a4:e7:77:62:ee:2f:df:d6:24:6d:c8:18:
1f:30:eb:f4:db:59:d0:da:66:a3:11:b6:3e:7c:10:e3:99:e6:
e3:5d:06:b4:c7:d7:c8:8f:43:39:15:38:7c:3c:15:e8:5f:41:
67:fe:f2:5c:48:27:0b:ae:76:8b:87:cb:79:46:29:f3:0a:15:
b7:5a:03:7c:3a:cf:68:45:3a:0f:a8:d9:d6:92:c0:85:5c:7d:
8b:b4:59:03:95:e5:9d:65:b2:be:60:e1:3e:86:3b:6e:e4:dc:
f6:57:2e:fb:cd:16:18:d7:8f:66:eb:c6:0e:d4:e8:b5:af:f0:
0f:8d:c7:19:d8:43:cf:67:79:84:48:69:d1:07:b2:22:a3:09:
77:06:6f:a9:28:a2:31:de:47:90:a7:0e:96:54:35:c3:c6:ef:
87:57:3a:6a:c2:86:c4:af:7b:c0:f6:a7:0a:71:8f:26:2d:5d:
5c:04:74:ef:c2:fc:cc:63:94:c1:1a:aa:8b:c8:77:65:9b:2c:
ea:1c:89:85:bf:1e:2b:1d:64:c5:5a:7f:b2:84:19:04:7a:9a:
7c:60:db:fe:29:01:0f:79:8f:91:3e:5a:8e:83:59:0d:9a:4f:
4b:89:56:4e:f6:ad:8a:9a:c9:1d:27:3f:e4:21:a6:19:5f:f3:
21:3b:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 12:46:46 2024 by rpki-client on console-fra.rpki-client.org