Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/pizuwoAOeTbVHYpRbUQFaZS3b14.roa
File: pizuwoAOeTbVHYpRbUQFaZS3b14.roa (raw, json)
Hash identifier: C5gLgGkDDfFtcZWqfKYurLM9c/dSkB5k5nHMxybObJs=
Subject key identifier: A6:2C:EE:C2:80:0E:79:36:D5:1D:8A:51:6D:44:05:69:94:B7:6F:5E
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 018BB86FA12AA16CCD30F3126A3330361CED
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/pizuwoAOeTbVHYpRbUQFaZS3b14.roa
Signing time: Fri 10 Nov 2023 08:53:25 +0000
ROA not before: Fri 10 Nov 2023 08:53:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30860
IP address blocks: 45.11.58.0/24 maxlen: 24
45.11.57.0/24 maxlen: 24
45.11.56.0/24 maxlen: 24
195.66.210.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
176.119.24.0/24 maxlen: 24
176.119.25.0/24 maxlen: 24
176.119.26.0/24 maxlen: 24
176.119.26.0/23 maxlen: 23
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
176.119.29.0/24 maxlen: 24
176.119.27.0/24 maxlen: 24
176.119.28.0/24 maxlen: 24
95.214.233.0/24 maxlen: 24
95.214.232.0/24 maxlen: 24
95.214.234.0/23 maxlen: 23
45.134.172.0/22 maxlen: 24
152.89.63.0/24 maxlen: 24
152.89.61.0/24 maxlen: 24
152.89.62.0/24 maxlen: 24
152.89.60.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
176.97.112.0/20 maxlen: 24
45.12.3.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.1.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
31.42.187.0/24 maxlen: 24
185.66.88.0/23 maxlen: 23
185.66.90.0/24 maxlen: 24
185.66.91.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
62.182.80.0/23 maxlen: 23
62.182.85.0/24 maxlen: 24
62.182.84.0/24 maxlen: 24
62.182.82.0/23 maxlen: 23
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
185.254.196.0/23 maxlen: 23
62.182.87.0/24 maxlen: 24
62.182.86.0/24 maxlen: 24
31.42.186.0/24 maxlen: 24
31.42.184.0/23 maxlen: 23
2a09:2dc0::/29 maxlen: 29
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:6f:a1:2a:a1:6c:cd:30:f3:12:6a:33:30:36:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Nov 10 08:53:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a62ceec2800e7936d51d8a516d44056994b76f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:3e:94:47:42:7c:cc:34:9e:6c:5d:32:ff:
52:71:25:98:8d:b7:c8:d8:9f:19:f8:a7:d0:1d:01:
98:38:e3:bf:42:c1:50:2c:6e:e2:70:06:02:ba:1e:
21:77:34:a6:eb:ed:af:49:64:a7:59:e3:7d:5b:9e:
4d:11:8d:f4:50:12:33:c4:61:db:50:61:91:1c:94:
76:af:24:0c:9e:d0:0c:b9:1e:c2:cc:09:b3:5a:cb:
18:a5:54:d1:02:37:7b:b1:90:85:10:c7:32:22:c5:
10:70:19:87:1f:38:ac:e6:db:0c:b8:55:fa:b5:59:
67:cc:fd:7d:11:99:c8:dd:55:90:30:9f:ce:cb:01:
6e:0f:ab:4b:f3:49:ab:25:5f:53:e4:bd:67:86:f8:
9b:6c:85:76:8f:7a:7d:62:02:79:27:75:b3:30:42:
da:36:ae:be:ac:49:b4:59:66:3d:10:a0:8e:b9:2e:
56:48:09:c3:22:9c:2d:bd:cf:e3:05:5a:dc:e2:2e:
f4:ed:b9:4c:d4:ea:11:af:9e:c4:5a:92:bf:ca:18:
70:9b:cf:e1:8c:a8:12:69:fb:80:9b:5a:34:7b:17:
27:fa:b2:8d:3e:3f:7c:61:c6:7d:68:ef:62:6a:72:
e7:cf:f4:0d:c0:dc:1f:3f:de:5f:76:4f:73:5f:8e:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:EE:C2:80:0E:79:36:D5:1D:8A:51:6D:44:05:69:94:B7:6F:5E
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/pizuwoAOeTbVHYpRbUQFaZS3b14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
91.208.115.0/24
95.214.232.0/22
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.66.210.0/24
IPv6:
2a09:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:00:e2:54:6e:87:c1:93:6e:72:41:0e:2b:22:f5:dc:ae:60:
ca:c8:ae:2f:19:61:c0:a4:2c:92:5f:08:7b:cf:7c:6b:41:ab:
45:b8:e9:a7:a2:07:b1:a6:28:d3:bc:c2:97:1d:a6:e5:f5:2f:
7e:e0:c0:47:c4:7f:71:35:aa:2b:0b:d7:c9:23:9c:ca:fd:26:
13:a2:90:76:c0:c8:42:16:26:af:69:fb:8a:55:a5:38:30:98:
bc:45:e5:16:ea:28:6c:8d:14:10:6a:b6:78:5c:b5:19:e0:00:
a4:d9:07:bf:cd:ae:28:91:85:97:30:68:e1:b5:9b:7e:cb:6d:
04:40:56:4a:b8:30:38:5a:78:f0:76:83:80:74:77:6d:0c:c7:
0a:7e:2a:7f:94:b3:6d:05:b4:ed:74:0f:55:fb:4d:3c:59:16:
28:4b:d9:47:8b:3b:53:87:6c:c2:8f:49:05:c8:9e:fb:7f:22:
60:a6:80:7e:c9:21:b5:ab:f9:5b:48:53:92:cf:ef:b4:57:f1:
1d:b3:3a:be:45:08:bc:71:96:80:eb:b8:aa:2a:63:2c:38:de:
c5:f2:e9:1f:79:df:66:38:48:da:fb:da:4f:9b:e1:fd:ed:3e:
70:d9:be:6b:29:6a:c8:09:7b:77:7a:df:0b:00:e5:58:52:fb:
6a:a6:43:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:53 2024 by rpki-client on console-ams.rpki-client.org