Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/nsCGydp5Vug3YHZeaXXKHqunUFo.roa
File: nsCGydp5Vug3YHZeaXXKHqunUFo.roa (raw, json)
Hash identifier: kAFavQpFr3di3iN/1iRB5nc+XPd1siYS5z6J+ADwSvc=
Subject key identifier: 9E:C0:86:C9:DA:79:56:E8:37:60:76:5E:69:75:CA:1E:AB:A7:50:5A
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DABD737E72B3B9146CC7D11919BAD5
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/nsCGydp5Vug3YHZeaXXKHqunUFo.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 193.39.216.0/22 maxlen: 24
185.44.28.0/22 maxlen: 24
45.146.224.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
5.182.72.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.230.0.0/22 maxlen: 24
185.150.80.0/22 maxlen: 24
141.98.36.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 15:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bd:73:7e:72:b3:b9:14:6c:c7:d1:19:19:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec086c9da7956e83760765e6975ca1eaba7505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:05:30:f0:b6:5a:94:7a:ec:bf:0e:39:66:
1d:64:d4:86:7f:1a:51:a7:31:99:ad:c8:72:8a:c6:
f3:20:66:b9:18:1b:1f:cf:78:33:60:50:6d:4e:65:
fc:ca:f9:df:89:8a:c6:89:45:f2:b7:86:72:79:d7:
d9:9b:99:5c:ad:d1:2e:d5:fe:48:45:04:62:f3:20:
73:43:10:d8:73:47:50:32:30:bd:13:f7:e7:1d:82:
72:67:aa:48:e4:3d:f9:76:0b:5a:90:c5:64:0b:35:
0b:9e:70:91:e5:7d:f4:84:80:1c:01:84:75:57:49:
46:0c:ea:13:11:d1:b8:89:1c:b3:11:be:75:92:58:
2a:ab:b3:c4:a4:11:af:af:bc:e4:1d:ec:74:04:ba:
62:1b:d4:55:c0:6a:f6:89:96:f3:35:4e:79:7a:56:
16:ae:4f:01:66:88:b3:5f:e9:89:ec:ff:cf:97:ea:
e5:9f:a0:4e:0c:92:80:d3:f0:d2:eb:5b:09:31:41:
bd:02:ad:66:ff:cb:5f:59:82:68:5b:70:fc:40:69:
a0:5c:5f:02:93:9c:94:e2:b7:43:f1:aa:ad:e0:68:
53:42:1f:6e:f1:7a:a0:e3:28:d2:c0:3a:62:3f:c2:
c9:4d:5c:88:e0:53:ca:1f:d1:03:5a:81:58:be:ba:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:86:C9:DA:79:56:E8:37:60:76:5E:69:75:CA:1E:AB:A7:50:5A
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/nsCGydp5Vug3YHZeaXXKHqunUFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.136.32.0/22
45.146.224.0/22
141.98.36.0/22
141.98.52.0/22
185.44.28.0/22
185.114.64.0/22
185.123.136.0/22
185.126.232.0/22
185.150.80.0/22
185.151.176.0/22
185.198.108.0/22
185.230.0.0/22
185.248.208.0/22
193.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
51:89:d6:e3:8e:e3:1f:9c:55:a8:42:5d:dc:d6:f5:59:16:93:
b1:ca:8e:41:80:b6:71:ca:96:6a:e9:56:01:84:d0:31:ed:55:
ed:55:b3:74:a9:55:64:75:7e:db:0d:d7:ea:37:6c:df:d0:eb:
17:ea:e9:ed:3a:d9:70:94:54:56:8d:57:0f:60:e3:a7:29:e8:
0f:19:78:54:50:23:21:0a:fb:ff:41:63:9a:7e:97:7c:08:d7:
71:71:f5:89:c1:2a:db:d5:f3:bd:1e:64:b9:e6:c0:15:bf:67:
e9:50:fc:2e:f5:b3:b5:d9:5b:6b:d8:d3:ed:74:4d:5d:10:40:
c7:d4:96:23:63:98:14:67:55:50:82:f0:9c:ea:e4:71:0f:fa:
f9:b6:90:ae:be:94:80:45:44:c3:94:ee:83:ab:0e:6a:a7:37:
f1:51:7b:ee:73:8a:77:03:8c:6a:ea:62:2b:55:95:23:a6:32:
f2:dd:fc:51:1a:1e:d1:b9:d6:0f:82:86:86:4b:fa:6a:17:45:
e2:bb:56:1a:68:aa:0e:72:76:03:1f:8f:dc:91:52:4f:cb:99:
2f:25:6f:b3:8a:0e:e4:a4:de:fd:e6:fa:da:a7:f5:27:6e:1b:
a1:15:09:8a:71:7d:3b:0e:d4:58:b3:af:13:be:6d:76:09:1a:
4a:c6:8e:46
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYzC2r1zfnKzuRRsx9EZGbrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjQwMTAxMDIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWMwODZjOWRhNzk1NmU4Mzc2MDc2NWU2OTc1Y2ExZWFiYTc1MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNsFMPC2WpR67L8OOWYdZNSGfxpR
pzGZrchyisbzIGa5GBsfz3gzYFBtTmX8yvnfiYrGiUXyt4ZyedfZm5lcrdEu1f5I
RQRi8yBzQxDYc0dQMjC9E/fnHYJyZ6pI5D35dgtakMVkCzULnnCR5X30hIAcAYR1
V0lGDOoTEdG4iRyzEb51klgqq7PEpBGvr7zkHex0BLpiG9RVwGr2iZbzNU55elYW
rk8BZoizX+mJ7P/Pl+rln6BODJKA0/DS61sJMUG9Aq1m/8tfWYJoW3D8QGmgXF8C
k5yU4rdD8aqt4GhTQh9u8Xqg4yjSwDpiP8LJTVyI4FPKH9EDWoFYvrrHVQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFJ7AhsnaeVboN2B2Xml1yh6rp1BaMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvbnNDR3lkcDVWdWczWUhaZWFYWEtIcXVuVUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCBbZIAwQC
LYggAwQCLZLgAwQCjWIkAwQCjWI0AwQCuSwcAwQCuXJAAwQCuXuIAwQCuX7oAwQC
uZZQAwQCuZewAwQCucZsAwQCueYAAwQCufjQAwQCwSfYMA0GCSqGSIb3DQEBCwUA
A4IBAQBRidbjjuMfnFWoQl3c1vVZFpOxyo5BgLZxypZq6VYBhNAx7VXtVbN0qVVk
dX7bDdfqN2zf0OsX6untOtlwlFRWjVcPYOOnKegPGXhUUCMhCvv/QWOafpd8CNdx
cfWJwSrb1fO9HmS55sAVv2fpUPwu9bO12Vtr2NPtdE1dEEDH1JYjY5gUZ1VQgvCc
6uRxD/r5tpCuvpSARUTDlO6Dqw5qpzfxUXvuc4p3A4xq6mIrVZUjpjLy3fxRGh7R
udYPgoaGS/pqF0Xiu1YaaKoOcnYDH4/ckVJPy5kvJW+zig7kpN795vrap/Unbhuh
FQmKcX07DtRYs68Tvm12CRpKxo5G
-----END CERTIFICATE-----
Generated at Tue Jun 11 19:46:37 2024 by rpki-client on console-fra.rpki-client.org