Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NgW5NF8-5_1oX_2JIBTJvuYc_nU.roa
File: NgW5NF8-5_1oX_2JIBTJvuYc_nU.roa (raw, json)
Hash identifier: nfDgZQk2WlNCfZZxgrucgPZx91HHRFT/kqJabuSmVDc=
Subject key identifier: 36:05:B9:34:5F:3E:E7:FD:68:5F:FD:89:20:14:C9:BE:E6:1C:FE:75
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188B0AB1B3C115E54A64773D2A787FCE1FC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NgW5NF8-5_1oX_2JIBTJvuYc_nU.roa
Signing time: Mon 12 Jun 2023 17:33:03 +0000
ROA not before: Mon 12 Jun 2023 17:33:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.19.106.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
193.42.52.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
185.9.54.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
185.115.146.0/24 maxlen: 24
77.75.62.0/24 maxlen: 24
77.75.60.0/24 maxlen: 24
77.75.63.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.115.144.0/24 maxlen: 24
185.115.144.0/23 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.210.0/23 maxlen: 24
185.245.238.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
185.121.228.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
178.239.192.0/23 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:ab:1b:3c:11:5e:54:a6:47:73:d2:a7:87:fc:e1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 12 17:33:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3605b9345f3ee7fd685ffd892014c9bee61cfe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:e0:79:c3:68:b6:94:af:9c:81:28:7c:52:
91:44:2f:93:73:ce:4b:f6:97:86:8b:e7:30:4f:37:
3c:0d:d9:96:13:a3:66:91:66:b6:41:03:38:60:43:
dc:65:16:ab:24:40:4d:e0:2c:a7:d0:06:45:72:ef:
c6:7b:f0:fb:88:f2:ff:f2:2f:b3:09:db:e3:d3:63:
e3:2e:af:95:58:7e:44:8d:a0:8a:61:bb:b5:86:80:
bf:8e:a5:ae:7f:a2:23:b6:46:f0:c4:3d:16:84:7b:
08:51:20:3d:85:d8:4d:87:e4:96:38:94:9d:86:46:
84:79:dd:b5:ea:f6:90:d7:56:0c:21:c2:e5:80:8c:
97:4e:25:57:0c:85:83:0c:7b:7a:c8:6f:55:c9:3e:
98:42:09:d6:cf:b8:6c:85:e5:40:2a:25:dc:e3:ff:
94:01:74:9a:85:73:1b:7a:65:37:40:a8:fd:4e:d1:
79:25:55:3d:80:88:f4:93:6b:a6:8f:9e:61:ad:7d:
84:f8:8a:99:52:8c:01:e0:c9:7b:ce:6c:49:45:00:
d5:2b:e5:e1:af:5f:5b:c7:d0:46:4e:bc:4f:0d:5f:
44:4b:4e:84:3b:59:43:c2:5b:b9:48:24:53:77:15:
31:a6:5a:4a:ae:cc:e0:14:c7:28:44:aa:19:87:32:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:B9:34:5F:3E:E7:FD:68:5F:FD:89:20:14:C9:BE:E6:1C:FE:75
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NgW5NF8-5_1oX_2JIBTJvuYc_nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.132.0/24
62.197.135.0/24
77.75.60.0/24
77.75.62.0/23
78.142.242.0/23
89.43.208.0/24
89.43.210.0/23
103.205.25.0/24
103.205.27.0/24
178.239.192.0-178.239.194.255
178.239.200.0/23
178.239.203.0/24
185.9.54.0/24
185.103.73.0/24
185.103.75.0/24
185.115.144.0-185.115.146.255
185.121.228.0/24
185.121.230.0/23
185.229.104.0/22
185.230.248.0-185.230.250.255
185.236.62.0/23
185.245.236.0-185.245.238.255
192.166.212.0/22
193.19.106.0/24
193.42.52.0/24
193.42.54.0/23
194.4.156.0/23
194.4.159.0/24
203.0.8.0/24
213.32.249.0/24
223.27.112.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e2:57:6e:21:77:c1:73:bd:8b:04:90:e1:bd:13:8e:36:85:
1d:28:1d:c4:5e:b1:1a:4a:37:65:b9:95:4f:fc:1a:52:b6:10:
e2:e4:90:45:47:20:19:d0:20:52:e6:91:23:29:a5:af:21:91:
51:f9:ec:fe:24:0d:63:25:8c:c7:a4:b9:09:02:a9:98:4e:60:
da:3e:d4:7d:43:9c:05:a1:42:29:56:dd:95:5c:5a:5a:52:16:
62:31:a8:a9:4e:76:c7:e5:de:17:33:bd:2b:d1:12:52:45:da:
59:43:11:7e:e8:6a:8e:ef:dd:a0:d6:b1:b1:8a:2c:b2:ec:da:
a4:af:cf:61:8c:53:b9:c4:52:29:7b:6c:61:d5:bd:47:2a:7c:
55:ae:04:28:ba:8c:56:e3:7a:8d:47:7c:dd:43:76:d7:bf:a5:
0b:5f:31:4e:6b:35:e3:6f:e5:0d:52:09:b2:d8:f6:7d:ae:1a:
9d:d1:24:1d:da:77:77:15:e5:3b:8b:b9:2e:d5:c4:96:26:14:
61:be:52:4d:f8:4d:c8:5e:31:f2:f6:e5:f4:d5:fd:48:19:31:
56:f1:53:f3:b1:23:95:28:b2:1c:67:1d:9b:44:ab:8b:c1:b5:
5e:fe:8b:85:89:ae:c1:69:be:d4:7f:a4:9e:a4:b5:cc:80:16:
3d:b7:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org