Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/SvgNIm8rdDj9BP0YFwsPBwd6d8E.roa
File: SvgNIm8rdDj9BP0YFwsPBwd6d8E.roa (raw, json)
Hash identifier: J9nd+0ay+m8OlxZkTdYLHw5lLYeahWPlcCkZzkxAIbg=
Subject key identifier: 4A:F8:0D:22:6F:2B:74:38:FD:04:FD:18:17:0B:0F:07:07:7A:77:C1
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 018DD08D0F56106394F66693C144341B830A
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/SvgNIm8rdDj9BP0YFwsPBwd6d8E.roa
Signing time: Thu 22 Feb 2024 11:22:01 +0000
ROA not before: Thu 22 Feb 2024 11:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30860
IP address blocks: 31.42.184.0/23 maxlen: 23
31.42.186.0/24 maxlen: 24
31.42.187.0/24 maxlen: 24
45.11.56.0/24 maxlen: 24
45.11.57.0/24 maxlen: 24
45.11.58.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
62.182.80.0/23 maxlen: 23
62.182.82.0/23 maxlen: 23
62.182.84.0/24 maxlen: 24
62.182.85.0/24 maxlen: 24
62.182.86.0/24 maxlen: 24
62.182.87.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
95.214.232.0/24 maxlen: 24
95.214.233.0/24 maxlen: 24
95.214.234.0/23 maxlen: 23
152.89.60.0/24 maxlen: 24
152.89.61.0/24 maxlen: 24
152.89.62.0/24 maxlen: 24
152.89.63.0/24 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.114.0/24 maxlen: 24
176.119.24.0/24 maxlen: 24
176.119.25.0/24 maxlen: 24
176.119.26.0/23 maxlen: 23
176.119.26.0/24 maxlen: 24
176.119.27.0/24 maxlen: 24
176.119.28.0/24 maxlen: 24
176.119.29.0/24 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/23 maxlen: 23
185.66.90.0/24 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/23 maxlen: 23
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
195.66.210.0/24 maxlen: 24
2a09:2dc0::/29 maxlen: 29
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 May 2024 15:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:8d:0f:56:10:63:94:f6:66:93:c1:44:34:1b:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Feb 22 11:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4af80d226f2b7438fd04fd18170b0f07077a77c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:00:fe:0e:90:e0:54:71:aa:c0:11:02:7b:
f3:0a:f8:dd:fe:0c:81:99:27:9e:91:78:67:cf:f9:
20:7a:15:09:a0:b0:95:8d:78:2e:73:d9:f9:8d:8e:
3b:36:4b:d4:ce:ce:fc:58:4a:37:b2:97:d7:61:3a:
47:30:35:3a:6c:f1:b4:8c:d9:6d:a2:fd:ef:a9:62:
2d:12:ff:47:e3:e0:fc:7d:d5:5d:5a:6c:7b:ff:45:
ad:ba:47:70:81:46:e9:c0:4f:bf:a9:05:4d:11:2a:
29:3b:19:32:57:de:4d:d7:ce:90:75:0a:d2:5b:85:
f5:36:b7:76:27:6f:b8:24:b9:b7:9a:c6:70:b9:c4:
5e:f5:24:ae:22:78:64:4d:ba:ed:ed:e2:4f:70:a1:
21:f7:2a:bb:05:0f:15:53:8a:0d:4e:e3:af:06:4d:
6c:d1:be:8d:87:c4:90:bb:f2:bc:b4:ea:9e:0c:8c:
b6:49:43:45:ea:49:91:4b:7d:f3:0e:c3:7b:e0:e5:
9b:f6:e1:df:e6:4a:de:68:9c:1d:c8:92:4f:61:71:
e8:c9:8d:3d:f9:78:71:43:df:f3:98:2b:f6:a0:ef:
fb:8a:f9:fb:57:51:a3:31:b4:93:6e:fa:1f:f1:cf:
8d:86:56:e1:71:e1:fe:75:7f:b8:27:36:09:0d:02:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:0D:22:6F:2B:74:38:FD:04:FD:18:17:0B:0F:07:07:7A:77:C1
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/SvgNIm8rdDj9BP0YFwsPBwd6d8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
91.208.115.0/24
95.214.232.0/22
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.66.210.0/24
IPv6:
2a09:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:eb:c5:29:66:84:a6:44:bf:94:62:0f:30:e5:95:63:a1:ea:
ae:a9:0a:2a:59:cb:7f:37:da:4b:2c:e7:79:c7:2e:d2:99:72:
7d:13:ea:fd:89:88:b4:e5:2d:78:b0:a7:9d:22:0d:13:2d:27:
8b:cf:01:da:a2:1d:a7:35:d6:28:24:0e:f3:b5:00:ab:7a:95:
76:6b:7f:da:fb:bc:a7:7a:7a:0f:3b:7e:40:14:75:ca:f3:d0:
21:61:e0:5a:aa:7c:39:50:92:fe:33:6a:a8:d5:99:0a:6f:14:
07:07:13:04:da:e7:b4:c6:02:b2:9e:d3:a0:57:e8:71:c2:1d:
3b:bf:06:20:3e:63:1e:66:a6:03:7d:06:5f:fe:b8:84:46:cf:
92:c4:4a:00:6d:b0:eb:fe:76:32:b3:ee:77:d5:e9:96:3c:d6:
4c:fd:f7:2a:16:57:f4:72:96:8b:fd:8a:be:53:af:d4:d9:47:
43:15:07:cd:17:71:44:e2:f2:88:0d:e8:b9:03:4a:1a:ea:70:
a3:8d:73:08:db:0a:43:6e:f8:6a:6a:ea:45:d5:9a:84:04:88:
ee:3c:eb:d4:0e:27:e1:7d:30:64:59:35:3c:4d:92:e1:a4:5b:
6d:85:ed:22:2b:0b:09:4b:25:fb:0b:67:5d:61:98:3a:d8:78:
0c:2b:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:21 2024 by rpki-client on console-fra.rpki-client.org