Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/_HIrEJKUK_RUW-ITGNQ5oVGQNAc.roa
File: _HIrEJKUK_RUW-ITGNQ5oVGQNAc.roa (raw, json)
Hash identifier: 5EbxXxePjpYe17ddGljFsepbdcR7gwTHmQck+0QGKJU=
Subject key identifier: FC:72:2B:10:92:94:2B:F4:54:5B:E2:13:18:D4:39:A1:51:90:34:07
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 0186E01F35757526040AC72392F60AA74405
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/_HIrEJKUK_RUW-ITGNQ5oVGQNAc.roa
Signing time: Tue 14 Mar 2023 12:36:27 +0000
ROA not before: Tue 14 Mar 2023 12:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 185.107.44.0/22 maxlen: 22
109.201.128.0/19 maxlen: 19
185.107.45.0/24 maxlen: 24
185.107.56.0/22 maxlen: 22
185.107.68.0/22 maxlen: 22
185.107.80.0/22 maxlen: 22
185.107.37.0/24 maxlen: 24
185.107.36.0/24 maxlen: 24
185.107.38.0/24 maxlen: 24
212.92.112.0/21 maxlen: 21
212.92.120.0/22 maxlen: 22
212.92.124.0/23 maxlen: 23
92.114.100.0/24 maxlen: 24
92.114.100.0/22 maxlen: 22
89.38.160.0/22 maxlen: 22
85.159.232.0/21 maxlen: 24
46.166.176.0/20 maxlen: 21
37.143.32.0/21 maxlen: 24
185.107.92.0/22 maxlen: 22
185.107.100.0/22 maxlen: 24
185.107.116.0/22 maxlen: 24
46.166.128.0/19 maxlen: 24
212.92.104.0/21 maxlen: 21
185.11.144.0/24 maxlen: 24
37.156.228.0/24 maxlen: 24
188.209.57.0/24 maxlen: 24
188.209.56.0/24 maxlen: 24
37.153.168.0/22 maxlen: 22
77.247.176.0/24 maxlen: 24
77.247.176.0/21 maxlen: 21
5.104.136.0/21 maxlen: 24
185.7.76.0/22 maxlen: 24
176.126.232.0/24 maxlen: 24
176.126.233.0/24 maxlen: 24
2a00:1768::/32 maxlen: 36
Validation: Failed, certificate revoked on Tue 14 Mar 2023 14:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:1f:35:75:75:26:04:0a:c7:23:92:f6:0a:a7:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Mar 14 12:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc722b1092942bf4545be21318d439a151903407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:a7:e5:69:32:0b:f3:82:30:70:c3:86:07:
75:f4:c7:50:d8:e9:44:87:1d:6e:f4:c2:49:6d:f2:
40:3a:e1:c5:62:77:6b:6b:4c:2e:0d:89:88:cd:7b:
d7:16:a9:f9:bc:e2:92:68:9a:3b:e4:cf:8e:d9:75:
d9:73:57:cd:5c:34:40:c6:85:ab:ce:e6:b2:cb:69:
d0:b8:34:25:40:68:bf:3b:50:06:e8:f6:a3:74:10:
80:80:c8:99:c7:94:f6:51:6d:fd:dd:bc:08:a7:59:
17:7e:e9:e9:9a:b1:0f:35:1b:d8:6d:d0:1a:1b:8b:
6b:10:70:32:1c:98:dd:1c:f1:80:4a:10:90:09:03:
15:b5:73:0d:f8:6d:41:b5:32:31:3d:bc:70:1a:0c:
59:22:e1:ba:07:35:32:9f:07:90:3c:e0:56:4f:ac:
8c:fa:5a:4a:3a:28:9c:c8:8b:48:7f:63:c4:68:f4:
88:33:e3:c9:2f:4d:97:04:59:1c:5d:ad:5f:d4:91:
fa:61:3a:68:e8:6a:e2:a9:63:f5:5c:00:bd:dd:d7:
f1:d0:2e:3b:ae:b5:8d:da:ea:9c:ed:21:af:bc:be:
a7:ea:21:82:63:38:57:af:2d:ba:70:0c:30:23:30:
90:f6:61:45:18:57:32:27:d5:4e:07:85:0c:a8:57:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:2B:10:92:94:2B:F4:54:5B:E2:13:18:D4:39:A1:51:90:34:07
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/_HIrEJKUK_RUW-ITGNQ5oVGQNAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.136.0/21
37.143.32.0/21
37.153.168.0/22
37.156.228.0/24
46.166.128.0/19
46.166.176.0/20
77.247.176.0/21
85.159.232.0/21
89.38.160.0/22
92.114.100.0/22
109.201.128.0/19
176.126.232.0/23
185.7.76.0/22
185.11.144.0/24
185.107.36.0-185.107.38.255
185.107.44.0/22
185.107.56.0/22
185.107.68.0/22
185.107.80.0/22
185.107.92.0/22
185.107.100.0/22
185.107.116.0/22
188.209.56.0/23
212.92.104.0-212.92.125.255
IPv6:
2a00:1768::/32
Signature Algorithm: sha256WithRSAEncryption
31:e4:8c:12:a7:86:a5:91:9e:80:e1:b3:8b:5b:de:a1:4e:ec:
6b:c4:14:f4:06:0f:38:d6:a4:24:69:63:28:c9:ba:ca:ad:7e:
2e:a6:52:4f:a6:99:ff:87:7b:f9:5e:01:0a:af:d7:8b:26:3c:
30:c9:54:2f:85:52:74:81:ef:5e:bf:66:f9:31:10:8f:26:f8:
99:7a:23:a9:c6:91:7b:1a:6c:a1:24:b7:0f:e6:b9:f1:fe:43:
64:f9:b3:8e:b7:41:63:d4:cc:44:87:ee:94:80:81:e9:9e:51:
ed:1f:d5:77:7c:78:ec:97:a8:e6:cb:f7:e9:9b:cc:bb:6a:e9:
ff:5f:d6:88:4c:e0:09:fa:93:4b:dd:20:f9:39:22:96:ad:f4:
07:77:52:28:64:7e:c2:a5:c5:d6:fb:96:f9:c2:13:d8:8b:6d:
97:43:38:a9:00:83:f5:ee:9b:a4:ac:7b:fc:34:04:9f:56:dc:
2c:72:3c:f4:82:a3:3f:57:12:23:78:b3:ac:6e:e6:13:0d:b4:
e2:49:8f:09:5f:f0:cf:cc:ea:d4:14:92:ee:7d:32:96:ea:cf:
92:a7:94:7c:6e:1a:ed:39:9a:80:2b:df:f4:3b:eb:39:32:98:
b2:7d:63:80:4b:7a:35:96:00:99:93:f8:fe:3f:be:0f:7c:79:
36:bd:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:11 2024 by rpki-client on console-ams.rpki-client.org