Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Nw1jNnQCSZeIUcAutsFYv2cDG-M.roa
File: Nw1jNnQCSZeIUcAutsFYv2cDG-M.roa (raw, json)
Hash identifier: H/+wtCKrE+sTrXWSqKTP9ZP51BalhmhvYTSeYm1m6BA=
Subject key identifier: 37:0D:63:36:74:02:49:97:88:51:C0:2E:B6:C1:58:BF:67:03:1B:E3
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01927B5614D31230657D459D43B39C6447BD
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Nw1jNnQCSZeIUcAutsFYv2cDG-M.roa
Signing time: Fri 11 Oct 2024 11:28:11 +0000
ROA not before: Fri 11 Oct 2024 11:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43700
IP address blocks: 14.102.4.0/22 maxlen: 24
31.172.224.0/22 maxlen: 22
31.172.226.0/23 maxlen: 23
45.84.244.0/22 maxlen: 22
45.84.244.0/23 maxlen: 23
78.158.0.0/19 maxlen: 19
78.158.0.0/20 maxlen: 20
78.158.16.0/20 maxlen: 20
95.215.140.0/22 maxlen: 22
95.215.140.0/23 maxlen: 23
95.215.142.0/23 maxlen: 23
185.246.240.0/22 maxlen: 22
185.246.240.0/23 maxlen: 23
185.246.242.0/23 maxlen: 23
185.252.108.0/22 maxlen: 22
185.252.108.0/23 maxlen: 23
185.252.110.0/23 maxlen: 23
185.252.204.0/22 maxlen: 22
185.252.204.0/23 maxlen: 23
185.252.206.0/23 maxlen: 23
216.25.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 23 Oct 2024 10:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:56:14:d3:12:30:65:7d:45:9d:43:b3:9c:64:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 11 11:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=370d6336740249978851c02eb6c158bf67031be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:75:f5:e2:67:43:7b:45:28:39:23:27:68:
a7:f6:89:11:1c:f6:c0:7f:33:77:27:57:95:db:95:
13:6b:95:00:4e:97:7a:b3:5b:2f:63:23:04:06:c7:
25:61:16:82:89:5f:a5:cc:6d:79:7d:09:1b:25:ec:
71:3e:7d:a7:70:23:5f:9c:8e:af:f7:a6:e7:73:cd:
11:f9:cb:b6:a0:7c:19:1a:38:8f:d3:5a:ef:fe:ad:
db:61:10:41:22:0b:42:e4:a7:50:d2:bc:f4:b7:5b:
23:92:7e:27:d8:bf:37:7f:3e:b2:06:6b:c1:91:31:
60:5c:3e:c6:16:7d:03:8a:94:33:fa:85:76:ef:c5:
64:a9:bb:39:dd:c9:c9:40:81:87:b0:92:ff:db:4c:
6e:63:84:46:51:34:d4:5c:9c:d3:7d:83:5e:95:21:
65:8a:cd:c6:a3:70:7b:60:bc:62:73:6e:32:80:3c:
7e:a0:eb:73:bb:e8:b5:f6:76:93:fa:18:71:b5:82:
9b:32:70:10:c9:62:ce:2b:bc:0a:3c:3d:45:9b:5d:
8c:0e:20:5f:3e:3e:1d:70:47:2e:0b:1a:54:58:f2:
92:97:36:43:74:fa:1c:81:92:ae:43:18:f9:1b:e8:
b8:35:83:00:97:78:26:b9:2e:96:39:2d:3d:8a:1f:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0D:63:36:74:02:49:97:88:51:C0:2E:B6:C1:58:BF:67:03:1B:E3
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Nw1jNnQCSZeIUcAutsFYv2cDG-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.4.0/22
31.172.224.0/22
45.84.244.0/22
78.158.0.0/19
95.215.140.0/22
185.246.240.0/22
185.252.108.0/22
185.252.204.0/22
216.25.0.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b4:6d:9f:b7:60:e5:07:0b:7e:cb:fd:d4:58:a2:16:08:c8:
f5:aa:5d:07:4e:27:8b:b0:14:ce:df:4d:5c:3e:bc:59:b0:12:
60:75:5b:15:68:65:d3:e6:62:06:4b:4b:6a:7d:2e:40:c4:26:
88:72:ae:1a:70:62:e4:cf:ee:cc:00:77:96:48:6d:2a:5b:2b:
49:9a:d4:01:ae:1f:d0:fa:80:d9:24:6a:e1:cd:01:4f:8b:f0:
3f:59:25:fc:0a:c6:42:b3:71:82:e7:48:2b:06:88:31:b5:12:
cd:0b:70:f4:bf:7f:d9:0b:13:06:ba:dd:27:67:1a:02:22:3d:
df:74:b1:81:ba:fb:89:9c:ce:5e:8c:20:70:7f:fb:a0:2a:ca:
c9:67:c7:b2:4d:5f:2a:3b:f1:c2:b5:62:e3:8d:2f:2f:d2:12:
62:2f:80:ee:93:16:33:3f:55:f5:58:ab:1b:b0:e1:8c:57:ea:
6b:45:84:87:48:15:89:a9:40:93:1b:dd:b5:80:84:6b:bd:02:
f8:12:8d:11:ae:d3:99:bb:fb:12:91:bf:49:4a:3d:ae:29:9e:
a6:60:e2:38:a4:3f:45:13:32:9e:d8:98:4e:9e:25:a2:e8:e0:
fb:dd:37:3c:38:a0:62:1b:48:f9:cd:d8:6a:13:c5:fb:22:5d:
6b:9d:d7:bd
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZJ7VhTTEjBlfUWdQ7OcZEe9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx
ZWUyZDMwHhcNMjQxMDExMTEyODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzBkNjMzNjc0MDI0OTk3ODg1MWMwMmViNmMxNThiZjY3MDMxYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg519eJnQ3tFKDkjJ2in9okRHPbA
fzN3J1eV25UTa5UATpd6s1svYyMEBsclYRaCiV+lzG15fQkbJexxPn2ncCNfnI6v
96bnc80R+cu2oHwZGjiP01rv/q3bYRBBIgtC5KdQ0rz0t1sjkn4n2L83fz6yBmvB
kTFgXD7GFn0DipQz+oV278Vkqbs53cnJQIGHsJL/20xuY4RGUTTUXJzTfYNelSFl
is3Go3B7YLxic24ygDx+oOtzu+i19naT+hhxtYKbMnAQyWLOK7wKPD1Fm12MDiBf
Pj4dcEcuCxpUWPKSlzZDdPocgZKuQxj5G+i4NYMAl3gmuS6WOS09ih8EuwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFDcNYzZ0AkmXiFHALrbBWL9nAxvjMB8GA1UdIwQY
MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt
NTFmNWZmODFjMTE3LzEvTncxak5uUUNTWmVJVWNBdXRzRll2MmNERy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3
LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCDmYEAwQC
H6zgAwQCLVT0AwQFTp4AAwQCX9eMAwQCufbwAwQCufxsAwQCufzMAwQC2BkAMA0G
CSqGSIb3DQEBCwUAA4IBAQCQtG2ft2DlBwt+y/3UWKIWCMj1ql0HTieLsBTO301c
PrxZsBJgdVsVaGXT5mIGS0tqfS5AxCaIcq4acGLkz+7MAHeWSG0qWytJmtQBrh/Q
+oDZJGrhzQFPi/A/WSX8CsZCs3GC50grBogxtRLNC3D0v3/ZCxMGut0nZxoCIj3f
dLGBuvuJnM5ejCBwf/ugKsrJZ8eyTV8qO/HCtWLjjS8v0hJiL4DukxYzP1X1WKsb
sOGMV+prRYSHSBWJqUCTG921gIRrvQL4Eo0RrtOZu/sSkb9JSj2uKZ6mYOI4pD9F
EzKe2JhOniWi6OD73Tc8OKBiG0j5zdhqE8X7Il1rnde9
-----END CERTIFICATE-----
Generated at Wed Oct 23 14:05:13 2024 by rpki-client on console-fra.rpki-client.org