Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/jpwm5fGVuWjfTXvzEHZzY1ASlaA.roa
File: jpwm5fGVuWjfTXvzEHZzY1ASlaA.roa (raw, json)
Hash identifier: y+Zm4f38rZEVB1PsHo+oBRFirQmLyRY/Rzr9T/DjzBQ=
Subject key identifier: 8E:9C:26:E5:F1:95:B9:68:DF:4D:7B:F3:10:76:73:63:50:12:95:A0
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01884778468BAC54BAAF1CC89A1791198656
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/jpwm5fGVuWjfTXvzEHZzY1ASlaA.roa
Signing time: Tue 23 May 2023 07:17:24 +0000
ROA not before: Tue 23 May 2023 07:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35444
IP address blocks: 80.90.83.0/24 maxlen: 24
80.90.80.0/20 maxlen: 20
80.90.87.0/24 maxlen: 24
80.90.89.0/24 maxlen: 24
80.90.90.0/24 maxlen: 24
80.90.91.0/24 maxlen: 24
80.90.92.0/24 maxlen: 24
45.93.220.0/22 maxlen: 22
93.93.168.0/23 maxlen: 23
93.93.168.0/22 maxlen: 22
93.93.170.0/23 maxlen: 23
81.26.200.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.11.0/24 maxlen: 24
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.158.0.0/24 maxlen: 24
185.158.0.0/23 maxlen: 23
185.158.0.0/22 maxlen: 22
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.187.0.0/24 maxlen: 24
185.187.0.0/22 maxlen: 23
185.187.1.0/24 maxlen: 24
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.212.189.0/24 maxlen: 24
185.212.190.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.191.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:78:46:8b:ac:54:ba:af:1c:c8:9a:17:91:19:86:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: May 23 07:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e9c26e5f195b968df4d7bf310767363501295a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:d8:e8:63:99:3b:e4:86:97:11:4b:54:47:
6a:d3:cc:73:79:9c:b1:92:5d:54:36:54:f0:7d:4b:
df:52:70:8f:6f:63:e9:1d:f3:9d:a3:a7:43:e4:85:
38:e3:99:ef:76:f4:cd:12:34:ce:88:84:69:b9:aa:
e8:d9:25:8b:ca:65:cc:3b:65:89:5d:0e:4d:ba:b1:
74:ad:e6:b9:3c:49:ce:8f:03:ca:ad:ed:59:43:23:
2b:25:e8:8d:19:ed:6e:bf:3c:cf:ac:c8:cb:10:41:
82:a5:cb:58:8d:49:d0:82:64:1a:75:95:9f:03:1c:
3f:63:a8:d0:eb:0a:74:5d:4b:0f:c4:e5:5d:6a:1e:
70:51:0c:f7:cf:c4:84:71:bc:11:6e:d2:7a:20:62:
c8:e0:d0:22:1f:67:ce:51:d3:a5:60:ab:d7:ab:46:
8f:a8:92:89:32:e3:43:83:03:07:f2:13:53:02:b1:
99:01:5a:5c:ca:17:dc:e1:9a:6e:f6:b3:71:e0:d3:
99:20:39:f6:9b:73:4f:86:48:17:2f:a8:92:02:4c:
22:fe:05:37:c4:29:72:31:0a:ea:22:f6:2b:21:f4:
1f:7c:b4:4f:c3:bf:19:b5:15:1b:90:14:0a:e3:69:
40:ac:0a:56:17:f6:8a:c8:77:22:80:6a:38:02:83:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:26:E5:F1:95:B9:68:DF:4D:7B:F3:10:76:73:63:50:12:95:A0
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/jpwm5fGVuWjfTXvzEHZzY1ASlaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
59:9a:7d:73:8e:54:a2:1f:58:7a:47:c9:a6:0b:8b:0a:e6:db:
59:39:88:cd:04:cf:46:91:aa:7a:af:72:be:7e:78:55:21:eb:
63:81:b3:16:0f:38:c3:4a:94:3e:ee:35:b3:d0:31:13:a0:f7:
bd:92:f5:c1:cb:ae:b8:b1:3a:d5:73:cc:88:c6:a5:4f:64:e9:
63:75:3e:4e:f9:be:6a:b0:37:fe:b4:36:63:35:20:94:90:0c:
33:60:02:66:62:fa:fa:6d:58:92:06:bf:bb:8c:1e:dc:c9:47:
4a:c3:52:20:db:2e:9c:dd:4a:e9:33:ce:74:dc:56:f2:0b:62:
eb:08:5e:f5:4b:72:14:f1:02:44:e5:11:2a:0f:b2:85:24:80:
74:0f:df:54:2a:86:75:ae:aa:47:42:c5:86:0e:cb:67:fd:3e:
90:ad:a1:be:5a:9e:9c:42:5f:33:3d:f6:50:58:3d:4b:50:0a:
79:d9:ba:98:ab:94:f3:f2:11:40:64:73:15:d0:dd:dd:69:1c:
4b:09:ed:e0:0f:55:c3:e4:19:67:e8:21:f3:c3:e5:92:64:c2:
ee:dd:eb:59:1c:09:a3:ab:c7:b5:63:14:eb:60:ca:40:47:14:
c3:67:60:e5:db:3c:5a:4d:f1:13:c4:f1:09:38:64:81:34:e1:
da:23:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:14 2024 by rpki-client on console-ams.rpki-client.org