Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/Ncwove2xje3t-5Z7viN_1yLzLC4.roa
File: Ncwove2xje3t-5Z7viN_1yLzLC4.roa (raw, json)
Hash identifier: NxdoxtIXst9Cm6QHOu2TNNyZp1lDKJHs5hrZ2piw/fY=
Subject key identifier: 35:CC:28:BD:ED:B1:8D:ED:ED:FB:96:7B:BE:23:7F:D7:22:F3:2C:2E
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01856FF96EF5BC60085ED890DBA587BFCCEF
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/Ncwove2xje3t-5Z7viN_1yLzLC4.roa
Signing time: Mon 02 Jan 2023 00:54:55 +0000
ROA not before: Mon 02 Jan 2023 00:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12897
IP address blocks: 185.117.68.0/22 maxlen: 22
195.80.52.0/22 maxlen: 22
94.16.64.0/19 maxlen: 19
92.119.8.0/22 maxlen: 22
185.189.140.0/22 maxlen: 22
5.182.236.0/22 maxlen: 22
185.238.252.0/22 maxlen: 22
212.232.80.0/20 maxlen: 20
45.14.188.0/22 maxlen: 22
85.132.192.0/19 maxlen: 19
213.188.96.0/19 maxlen: 19
45.131.36.0/22 maxlen: 22
45.136.168.0/22 maxlen: 22
149.249.128.0/19 maxlen: 19
213.157.0.0/19 maxlen: 19
134.101.16.0/20 maxlen: 20
95.131.96.0/21 maxlen: 21
45.143.76.0/22 maxlen: 22
45.10.60.0/22 maxlen: 22
185.9.28.0/22 maxlen: 22
45.128.180.0/22 maxlen: 22
94.46.64.0/19 maxlen: 19
45.93.108.0/22 maxlen: 22
46.243.80.0/21 maxlen: 21
185.194.64.0/22 maxlen: 22
2a02:b98::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:6e:f5:bc:60:08:5e:d8:90:db:a5:87:bf:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jan 2 00:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35cc28bdedb18dededfb967bbe237fd722f32c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:72:73:d9:ef:41:55:30:8e:99:77:15:f4:
e5:c3:10:bf:28:b7:37:c7:c1:0f:46:3f:d2:d1:41:
4b:fa:b0:b7:0b:af:c1:4e:d0:10:47:50:ad:9f:bf:
87:62:c1:72:09:fb:08:dd:af:84:32:d6:84:d8:9f:
65:dd:cf:be:77:c4:1d:01:8c:8c:5c:00:79:b9:e1:
ed:c5:e6:16:e4:b6:c8:3c:71:c4:2a:51:71:7c:bb:
e2:f9:03:cf:66:52:5b:b8:53:23:42:0b:1f:f8:23:
81:21:a7:b6:cf:fb:65:7a:7a:45:b5:aa:0b:45:f5:
af:53:94:6f:b0:46:af:b7:e5:7a:d0:e5:2d:50:e4:
18:f7:d5:15:78:f8:98:4e:16:1f:17:c0:5e:10:41:
b1:50:e6:d5:ba:db:b9:37:b9:13:b6:ac:15:ce:52:
f6:18:29:f3:8e:20:a2:00:da:c0:3e:78:d7:cc:25:
78:53:92:91:35:64:a5:ec:0e:b5:60:5d:f7:c5:4b:
15:7b:e9:39:1c:10:0d:2d:84:61:02:09:8a:cd:aa:
60:dd:a8:2a:51:7a:3a:3e:67:60:0b:04:f1:f6:ce:
7c:14:95:43:21:b2:f7:cc:bc:0f:64:4b:57:80:81:
0e:b5:c7:5b:48:dd:a5:cf:ab:21:2d:05:45:92:c7:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:28:BD:ED:B1:8D:ED:ED:FB:96:7B:BE:23:7F:D7:22:F3:2C:2E
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/Ncwove2xje3t-5Z7viN_1yLzLC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.236.0/22
45.10.60.0/22
45.14.188.0/22
45.93.108.0/22
45.128.180.0/22
45.131.36.0/22
45.136.168.0/22
45.143.76.0/22
46.243.80.0/21
85.132.192.0/19
92.119.8.0/22
94.16.64.0/19
94.46.64.0/19
95.131.96.0/21
134.101.16.0/20
149.249.128.0/19
185.9.28.0/22
185.117.68.0/22
185.189.140.0/22
185.194.64.0/22
185.238.252.0/22
195.80.52.0/22
212.232.80.0/20
213.157.0.0/19
213.188.96.0/19
IPv6:
2a02:b98::/32
Signature Algorithm: sha256WithRSAEncryption
3a:70:e6:5d:c1:1d:74:80:ce:3c:91:77:ff:86:87:52:c5:4e:
e5:b8:1b:17:1c:2d:24:a2:fd:da:15:b1:c7:b2:3a:f8:19:33:
ca:8a:6a:8f:5f:64:89:c7:36:33:e4:d7:86:cf:62:81:db:26:
4c:61:4a:e2:94:b0:2d:b5:60:8c:58:34:8d:44:0d:f4:ef:14:
bf:5c:5e:fd:b0:53:53:78:a5:64:68:67:72:6e:e5:af:ef:d6:
51:86:84:5a:cb:6c:9f:a0:ff:b9:1c:83:20:16:16:ae:23:f1:
34:53:4b:0a:ec:f4:6c:c7:b1:2c:d1:22:17:5c:e5:50:1d:1c:
4f:25:6f:3f:4c:d1:ac:18:e5:cf:bf:67:94:c5:af:67:d6:90:
58:18:55:31:86:16:a3:b0:e1:88:52:5c:3b:30:b8:05:b8:3d:
45:1a:e5:72:d2:5d:53:53:b1:08:c1:53:b8:f3:1b:e6:fe:36:
cd:82:87:3f:e5:dd:59:f1:b0:2b:e2:1e:fe:2e:a9:a3:ad:2b:
19:83:09:96:2e:2a:31:ec:63:58:69:2b:dd:34:0d:d7:b7:c0:
4a:ba:1f:2e:3d:3e:65:4f:57:4c:74:9a:f3:bf:ea:77:3c:21:
9b:e3:22:54:81:3d:c7:bf:25:d8:eb:48:98:59:d2:ae:d7:94:
50:fa:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org