Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/NSBrv6b0DZ8kcz7dAwUluZO4rTc.roa
File: NSBrv6b0DZ8kcz7dAwUluZO4rTc.roa (raw, json)
Hash identifier: /rimUSwqqfD57qlgKtAcV9jTUOu9rzNZsI9ij7EztJw=
Subject key identifier: 35:20:6B:BF:A6:F4:0D:9F:24:73:3E:DD:03:05:25:B9:93:B8:AD:37
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01910B2ED7D31F15C9F63E44F410F8A3BEEF
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/NSBrv6b0DZ8kcz7dAwUluZO4rTc.roa
Signing time: Wed 31 Jul 2024 23:45:04 +0000
ROA not before: Wed 31 Jul 2024 23:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.186.0/24 maxlen: 24
5.182.187.0/24 maxlen: 24
5.182.193.0/24 maxlen: 24
5.182.194.0/24 maxlen: 24
5.182.195.0/24 maxlen: 24
5.182.198.0/24 maxlen: 24
31.132.54.0/23 maxlen: 23
63.246.129.0/24 maxlen: 24
63.246.130.0/24 maxlen: 24
63.246.131.0/24 maxlen: 24
63.246.132.0/24 maxlen: 24
63.246.133.0/24 maxlen: 24
63.246.137.0/24 maxlen: 24
63.246.144.0/24 maxlen: 24
63.246.148.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
63.246.151.0/24 maxlen: 24
63.246.152.0/24 maxlen: 24
63.246.158.0/24 maxlen: 24
63.246.159.0/24 maxlen: 24
78.31.204.0/24 maxlen: 24
78.31.206.0/24 maxlen: 24
94.154.170.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
162.218.89.0/24 maxlen: 24
185.52.137.0/24 maxlen: 24
185.201.40.0/24 maxlen: 24
185.201.41.0/24 maxlen: 24
185.201.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 14:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0b:2e:d7:d3:1f:15:c9:f6:3e:44:f4:10:f8:a3:be:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jul 31 23:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35206bbfa6f40d9f24733edd030525b993b8ad37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:06:38:59:0c:b0:9f:ae:d3:7e:8f:b5:fa:
99:a0:1e:93:82:fd:ed:93:25:f6:bd:98:fe:85:44:
5b:da:c6:a6:f0:7e:c2:66:1e:71:9f:cd:1a:4d:cf:
2c:91:bc:22:79:89:48:1b:bc:ab:e5:48:3b:4f:1b:
12:81:1b:6f:a9:8f:18:73:06:c9:53:0b:0f:8a:1b:
32:85:70:af:15:97:a6:ce:19:e3:02:63:94:39:f4:
13:35:b4:1a:3b:11:3d:50:f9:8c:2d:e3:f5:2e:98:
f5:e1:66:c4:c0:5b:55:55:ed:c5:1d:68:d6:e7:a8:
20:bb:d1:54:44:8a:7e:08:67:1c:c9:63:a2:6d:94:
4b:03:23:6c:43:ec:e2:ab:94:ab:ba:33:68:a4:d6:
04:e9:20:87:40:43:b2:a9:ac:47:a0:27:80:6c:69:
f3:ac:c4:dd:fd:8a:c3:d5:c4:2e:f9:a3:c2:b5:d1:
27:18:65:3c:4f:42:59:fd:92:6e:c7:ca:d2:f6:32:
20:1e:cc:ec:fa:35:5c:3d:ae:19:4a:37:76:b6:78:
78:60:59:32:86:a2:14:52:15:54:3d:43:fa:23:81:
02:c2:ca:76:9a:61:9d:46:a8:57:e2:c7:b1:d1:72:
3f:8f:d2:d5:a6:6f:6d:5e:96:a1:3b:13:db:43:d7:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:6B:BF:A6:F4:0D:9F:24:73:3E:DD:03:05:25:B9:93:B8:AD:37
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/NSBrv6b0DZ8kcz7dAwUluZO4rTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.186.0/23
5.182.193.0-5.182.195.255
5.182.198.0/24
31.132.54.0/23
63.246.129.0-63.246.133.255
63.246.137.0/24
63.246.144.0/24
63.246.148.0/24
63.246.150.0-63.246.152.255
63.246.158.0/23
78.31.204.0/24
78.31.206.0/24
94.154.170.0/24
149.126.13.0/24
162.218.88.0/23
185.52.137.0/24
185.201.40.0/23
185.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ab:93:65:a5:d0:0f:c3:96:bd:44:34:92:34:b3:85:ac:98:
82:72:48:e6:2c:f5:19:e1:06:da:47:d0:2e:06:4e:1f:f7:90:
b1:1a:7c:0c:8b:36:6c:9f:08:b0:ed:3c:f2:15:f2:65:b6:3f:
77:ad:dd:cb:eb:11:71:82:33:ce:d9:ec:7e:0a:71:6f:1e:c5:
83:16:88:99:8d:33:65:ce:0f:5a:c1:14:73:1a:a9:9f:e0:13:
84:e8:bb:22:b1:0b:84:4d:10:e8:63:25:f6:1e:c5:58:49:9c:
b1:02:98:4b:6a:9d:75:57:cc:54:63:16:12:f3:04:33:79:81:
fd:b4:6d:84:29:7b:b6:b9:03:3e:e0:d4:63:db:1a:11:75:ef:
fc:d2:89:40:f0:50:9b:69:e9:62:8b:f6:10:1f:17:a7:7c:49:
75:0b:0b:24:87:27:ed:e6:06:a0:90:24:15:fe:54:18:bd:ec:
36:3e:84:16:5f:ea:34:be:f6:0f:df:23:66:cb:da:c4:a6:82:
93:35:dc:69:4e:46:64:66:74:0e:98:fa:43:00:39:bd:e2:8a:
78:25:81:e7:04:f7:a3:fa:95:ef:f8:7a:54:b3:80:71:37:34:
05:24:1f:49:ab:00:ef:04:c4:85:4a:5e:3d:b5:45:7e:36:02:
fe:0d:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:34 2024 by rpki-client on console-ams.rpki-client.org