Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/j5vF0OsM4VD7vHi1mqVx0IXeySs.roa
File: j5vF0OsM4VD7vHi1mqVx0IXeySs.roa (raw, json)
Hash identifier: ngT+E1AYBTIifNpH87kL8ze8ntCiJWBJkcIKsVF+zKE=
Subject key identifier: 8F:9B:C5:D0:EB:0C:E1:50:FB:BC:78:B5:9A:A5:71:D0:85:DE:C9:2B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018FFC54D1038D582CA7C01E827B0D95B07E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/j5vF0OsM4VD7vHi1mqVx0IXeySs.roa
Signing time: Sun 09 Jun 2024 09:29:27 +0000
ROA not before: Sun 09 Jun 2024 09:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 37.46.149.0/24 maxlen: 24
45.83.29.0/24 maxlen: 24
45.88.20.0/24 maxlen: 24
45.88.22.0/24 maxlen: 24
45.89.36.0/24 maxlen: 24
45.89.38.0/24 maxlen: 24
45.92.2.0/24 maxlen: 24
45.134.138.0/24 maxlen: 24
45.143.54.0/24 maxlen: 24
45.145.46.0/24 maxlen: 24
45.146.187.0/24 maxlen: 24
87.247.148.0/22 maxlen: 24
91.190.96.0/24 maxlen: 24
91.190.99.0/24 maxlen: 24
91.190.104.0/24 maxlen: 24
91.217.250.0/24 maxlen: 24
185.184.135.0/24 maxlen: 24
185.205.189.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.240.75.0/24 maxlen: 24
193.84.132.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
2a0b:64c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Jun 2024 07:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fc:54:d1:03:8d:58:2c:a7:c0:1e:82:7b:0d:95:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 9 09:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f9bc5d0eb0ce150fbbc78b59aa571d085dec92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:02:fd:33:10:4b:66:47:19:83:7a:19:a4:
13:7e:c0:fd:e9:00:96:08:52:a2:8b:53:a0:48:0f:
55:88:36:7a:62:25:d2:6a:69:06:a0:01:ee:75:46:
ce:6a:fe:35:d1:a7:ce:32:a1:58:4a:85:7d:0c:13:
be:46:22:b8:77:74:f9:15:cc:38:9f:a5:97:4f:d9:
ac:46:7c:27:d0:64:06:7c:f9:7d:8c:99:77:d8:f7:
90:3d:2d:e0:bc:f9:04:00:54:65:bc:1a:1a:cc:5e:
7c:7d:0f:92:04:ad:f7:ef:30:d6:e7:c6:5d:a8:68:
3e:63:0e:4a:8b:ec:8a:47:a6:19:b6:3d:96:89:a6:
ed:8e:45:63:55:c3:f3:5e:ef:92:78:90:2f:c0:84:
9c:32:8f:c4:89:f0:3d:05:86:be:06:7e:c8:2e:f2:
e5:75:cc:ea:a3:70:a0:c8:ec:8d:b6:bc:d8:13:04:
a9:d8:16:50:4a:e7:0c:3d:41:24:bd:20:77:40:00:
e6:d7:d8:11:72:5e:7e:49:6f:06:b2:1c:1c:d4:2a:
f8:c7:29:8a:cc:55:e5:d9:1a:56:6d:92:99:a7:d8:
10:47:22:00:f5:ad:9b:2d:f6:9a:7f:8f:64:16:65:
60:54:86:a5:03:a4:e6:e4:7b:7d:08:bf:94:42:91:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9B:C5:D0:EB:0C:E1:50:FB:BC:78:B5:9A:A5:71:D0:85:DE:C9:2B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/j5vF0OsM4VD7vHi1mqVx0IXeySs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.149.0/24
45.83.29.0/24
45.88.20.0/24
45.88.22.0/24
45.89.36.0/24
45.89.38.0/24
45.92.2.0/24
45.134.138.0/24
45.143.54.0/24
45.145.46.0/24
45.146.187.0/24
87.247.148.0/22
91.190.96.0/24
91.190.99.0/24
91.190.104.0/24
91.217.250.0/24
185.184.135.0/24
185.205.189.0/24
185.239.241.0/24
185.244.137.0/24
185.245.5.0/24
185.245.7.0/24
188.240.75.0/24
193.84.132.0/24
193.218.32.0/24
217.74.16.0/24
IPv6:
2a0b:64c1::/32
Signature Algorithm: sha256WithRSAEncryption
8d:66:db:67:29:7f:8d:7a:00:63:e2:8d:f6:9c:b7:c0:de:e7:
00:81:09:81:10:e4:01:7c:cb:fe:83:c1:b7:e9:46:16:bf:36:
dd:3f:db:35:c9:f7:3c:b3:f8:cb:a0:70:08:08:51:ff:39:7a:
65:cf:36:f2:b0:2f:41:cc:67:98:7f:2c:37:61:c2:07:0b:7a:
3e:f3:cb:5f:fe:1f:5c:41:6e:3c:8c:3c:21:a9:0c:88:21:e3:
1c:c9:13:8c:cd:6a:f0:c6:84:6a:12:14:4c:b3:49:a7:01:7a:
e4:e8:3b:58:6e:31:88:e4:09:65:97:fc:5d:1c:57:b9:78:96:
7f:0f:30:6c:49:d2:40:77:b6:1f:ba:8e:0c:89:62:dc:c5:bc:
d4:0d:a0:f3:07:37:eb:43:c7:09:40:f8:97:de:5b:18:86:b4:
ed:39:e3:c8:04:3f:73:89:52:6b:a4:c2:f4:4f:cc:82:06:9a:
3d:84:e9:fb:94:2c:79:9f:cc:79:a8:25:6f:64:f5:00:ec:17:
a2:79:00:f2:e9:3f:54:6b:9e:9c:39:03:84:ba:4c:94:fb:77:
82:b7:00:7c:d6:52:09:63:d7:ee:48:1a:5c:b2:39:5e:14:86:
4c:94:ba:25:b7:26:85:3d:e2:00:54:e0:34:a7:9a:95:f0:b4:
4c:30:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:28 2024 by rpki-client on console-ams.rpki-client.org