Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DeG6UkRWk63DNThy3aJTAj9HpMU.roa
File: DeG6UkRWk63DNThy3aJTAj9HpMU.roa (raw, json)
Hash identifier: 8qgiLgV6uGcfFVwQ0FaZMYRvqbw1HbXRZn2gVycpwaQ=
Subject key identifier: 0D:E1:BA:52:44:56:93:AD:C3:35:38:72:DD:A2:53:02:3F:47:A4:C5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0193BAF02DB084A8F1AE79615CA5495FC0D7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DeG6UkRWk63DNThy3aJTAj9HpMU.roa
Signing time: Thu 12 Dec 2024 12:55:22 +0000
ROA not before: Thu 12 Dec 2024 12:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 2.58.148.0/22 maxlen: 24
45.91.149.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.143.53.0/24 maxlen: 24
45.145.44.0/23 maxlen: 24
45.145.47.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.159.0/24 maxlen: 24
84.247.25.0/24 maxlen: 24
84.247.26.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
89.43.199.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
93.115.254.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
94.103.249.0/24 maxlen: 24
94.103.250.0/24 maxlen: 24
185.121.121.0/24 maxlen: 24
185.121.122.0/24 maxlen: 24
185.121.123.0/24 maxlen: 24
185.184.134.0/24 maxlen: 24
185.205.190.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
193.239.164.0/23 maxlen: 24
194.169.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:f0:2d:b0:84:a8:f1:ae:79:61:5c:a5:49:5f:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 12 12:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0de1ba52445693adc3353872dda253023f47a4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:5f:8d:dd:25:00:a7:52:97:27:20:2f:ac:
4b:8a:ef:e2:99:dd:40:49:d7:9d:51:36:45:59:bf:
46:a8:77:c1:2d:31:0a:4e:3f:a8:e4:99:17:e6:1f:
00:0c:29:7e:41:e6:e6:87:b0:d2:22:9b:91:6d:41:
2d:66:6a:a6:ba:45:6c:ff:e5:aa:bb:e5:9a:02:54:
c3:57:93:2c:e1:09:78:ba:da:ab:76:9b:13:33:83:
6c:c3:41:eb:c7:a2:02:b2:73:d6:9d:50:0d:94:42:
cf:82:b6:3f:23:e5:e0:55:99:bb:80:d6:2c:47:67:
5e:da:7b:f8:81:2d:b3:5e:b1:f8:2a:a9:43:d3:3f:
7f:10:9e:5b:65:56:27:73:ee:a2:d2:e4:76:ae:04:
68:a7:4a:9f:65:1b:11:d1:e8:b2:fb:aa:e4:3d:4f:
91:bc:52:f6:43:4d:d1:ef:62:0e:4c:77:55:cb:9f:
31:58:21:1e:e4:32:90:74:5e:8c:86:72:1c:b7:c3:
96:30:03:56:94:5b:d1:bf:9a:dc:cb:b2:9b:8c:4e:
d6:75:3e:2b:62:77:e3:f0:d0:31:69:bf:0c:09:bf:
e9:92:15:2c:29:3c:70:83:25:62:79:7f:10:01:20:
86:43:ca:c4:9e:4d:26:c7:1a:33:e6:45:e2:a3:2d:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:BA:52:44:56:93:AD:C3:35:38:72:DD:A2:53:02:3F:47:A4:C5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/DeG6UkRWk63DNThy3aJTAj9HpMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.148.0/22
45.91.149.0/24
45.135.187.0/24
45.143.53.0/24
45.145.44.0/23
45.145.47.0/24
62.197.144.0/24
62.197.147.0-62.197.148.255
62.197.150.0-62.197.152.255
62.197.159.0/24
84.247.25.0-84.247.26.255
89.33.84.0/24
89.36.22.0/24
89.37.62.0/23
89.43.199.0/24
92.62.121.0/24
93.115.254.0/23
94.103.249.0-94.103.250.255
185.121.121.0-185.121.123.255
185.184.134.0/24
185.205.190.0/24
185.239.241.0/24
185.239.243.0/24
185.244.137.0/24
185.245.5.0/24
188.212.132.0/24
188.240.68.0/24
188.240.74.0/24
193.19.108.0/24
193.218.32.0/24
193.239.164.0/23
194.169.169.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d5:41:e7:27:fc:e0:b9:31:8f:af:bd:41:73:0c:ac:b9:93:
3c:ca:a0:48:38:db:2f:e0:26:40:0e:d0:8d:09:ff:57:aa:05:
45:55:9f:ca:8c:0f:23:c8:2a:26:9f:98:70:b9:64:e2:40:e8:
68:c4:26:a3:7e:24:cd:9f:83:28:30:e7:94:b2:0d:33:31:c3:
1f:ab:ab:fe:48:1c:02:7a:d3:bd:78:d3:13:ae:d6:a3:c1:0f:
74:82:7d:67:c7:cd:47:9c:51:29:de:ef:48:6a:63:6d:5d:eb:
19:f6:1c:54:02:b5:6c:10:4c:85:a6:dc:7f:dd:11:31:50:aa:
82:ce:a9:cb:93:de:cc:1e:32:eb:8a:48:2b:79:e8:69:e0:68:
fe:11:a6:d8:e1:b3:2a:ca:51:92:f5:d1:e8:bf:dc:b1:ed:78:
ef:d3:05:e7:cf:90:60:90:02:24:2e:cb:6b:33:4e:6c:43:4e:
a9:0b:10:17:89:fc:f9:04:ca:ce:5a:a3:5f:cf:6a:27:53:8f:
1d:fe:84:b9:b7:76:09:4b:ed:89:ea:76:b3:68:ac:3c:95:e8:
fd:e8:9b:25:1b:8f:38:0d:1e:c6:79:6a:7d:9a:17:33:09:23:
e0:fa:36:69:3c:15:91:71:03:c6:59:b5:fb:53:5b:01:66:88:
17:77:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:40:18 2025 by rpki-client