Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/B26Lf3PcD2_dNbWjVHwTZ2-bKCE.roa
File: B26Lf3PcD2_dNbWjVHwTZ2-bKCE.roa (raw, json)
Hash identifier: dIwcHLCMfyVPfHSm6x7rAO+UGb3yhjB3rMsrxceZ7PI=
Subject key identifier: 07:6E:8B:7F:73:DC:0F:6F:DD:35:B5:A3:54:7C:13:67:6F:9B:28:21
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 01856EEFF1DAC6C119435CCBD5EFC3DA3094
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/B26Lf3PcD2_dNbWjVHwTZ2-bKCE.roa
Signing time: Sun 01 Jan 2023 20:04:56 +0000
ROA not before: Sun 01 Jan 2023 20:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50583
IP address blocks: 212.114.0.0/21 maxlen: 21
212.114.0.0/20 maxlen: 20
212.114.7.0/24 maxlen: 24
212.114.8.0/21 maxlen: 21
46.33.190.51/32 maxlen: 32
46.33.160.0/24 maxlen: 24
46.33.160.0/19 maxlen: 19
46.33.162.0/24 maxlen: 24
46.33.161.0/24 maxlen: 24
46.33.164.0/24 maxlen: 24
46.33.163.0/24 maxlen: 24
46.33.166.0/24 maxlen: 24
46.33.165.0/24 maxlen: 24
46.33.172.0/24 maxlen: 24
46.33.167.0/24 maxlen: 24
46.33.169.0/24 maxlen: 24
46.33.168.0/24 maxlen: 24
46.33.171.0/24 maxlen: 24
46.33.170.0/24 maxlen: 24
195.191.172.0/24 maxlen: 24
195.191.172.0/23 maxlen: 23
195.191.173.0/24 maxlen: 24
46.30.184.0/22 maxlen: 22
46.33.175.0/24 maxlen: 24
46.33.173.0/24 maxlen: 24
46.33.174.0/24 maxlen: 24
46.33.176.0/24 maxlen: 24
46.33.178.0/24 maxlen: 24
185.173.125.0/24 maxlen: 24
185.173.124.0/22 maxlen: 22
185.173.124.0/24 maxlen: 24
46.33.177.0/24 maxlen: 24
46.33.179.0/24 maxlen: 24
46.33.186.0/24 maxlen: 24
185.173.126.0/24 maxlen: 24
46.33.180.0/24 maxlen: 24
46.33.181.0/24 maxlen: 24
185.173.127.0/24 maxlen: 24
46.33.183.0/24 maxlen: 24
46.33.182.0/24 maxlen: 24
46.33.185.0/24 maxlen: 24
46.33.184.0/24 maxlen: 24
46.33.187.0/24 maxlen: 24
46.33.188.0/24 maxlen: 24
46.33.190.0/24 maxlen: 24
46.33.189.0/24 maxlen: 24
46.33.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:f1:da:c6:c1:19:43:5c:cb:d5:ef:c3:da:30:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Jan 1 20:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=076e8b7f73dc0f6fdd35b5a3547c13676f9b2821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:86:bb:c4:0a:64:73:33:c2:89:25:42:2f:
a6:05:20:37:b2:31:8a:fb:d5:ed:6e:87:fc:54:fd:
f7:3c:10:8f:23:c2:be:9f:ac:b7:31:e7:86:07:7e:
79:f3:60:4d:df:39:e5:21:37:e8:f3:06:31:05:25:
a4:0a:c1:ac:dd:32:a8:61:91:8a:c7:ed:4c:d8:a8:
69:b0:de:5c:b1:d9:48:29:a1:4d:bd:ed:49:7f:a1:
8a:d9:e2:bc:2e:84:f9:81:58:eb:af:e3:d1:a1:da:
76:f4:1c:18:cf:48:71:ea:27:88:ff:44:cc:fd:42:
59:4d:00:90:eb:58:cc:58:4a:25:4b:20:1e:24:f0:
f8:44:98:8b:a4:90:fe:9a:36:6d:87:9c:9c:0c:fe:
87:df:04:64:e5:fc:08:bc:d1:f6:1b:e9:3f:8c:fd:
62:05:a6:5b:bd:c5:dd:82:fd:23:7b:f8:3a:8b:44:
df:6c:73:5f:28:47:00:b9:93:0d:f9:84:0f:76:67:
9f:ea:53:3d:5c:9e:63:36:19:5f:04:21:d4:c7:1f:
66:ff:3c:b9:71:49:04:9b:95:59:6a:c5:1d:95:94:
9b:92:d9:b8:90:2c:34:48:94:4d:08:aa:4c:97:80:
f0:23:69:b3:0f:d8:12:fa:ea:f7:7c:e7:1a:46:40:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:8B:7F:73:DC:0F:6F:DD:35:B5:A3:54:7C:13:67:6F:9B:28:21
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/B26Lf3PcD2_dNbWjVHwTZ2-bKCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.184.0/22
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:c1:cb:19:32:75:d8:64:77:f9:6a:20:0e:4e:70:9a:fa:44:
db:2e:a8:8f:b9:94:b1:e0:78:8d:3b:c5:8c:a1:0a:40:0b:7b:
1d:ef:52:02:4a:ae:75:db:94:dd:55:b8:1b:60:7a:ee:72:93:
e2:86:36:b2:e7:7d:db:68:99:96:fc:72:e0:32:48:ed:4a:3d:
02:94:31:d5:b0:96:d9:6b:e4:f2:a6:15:27:9c:91:99:5c:14:
84:88:0a:09:c9:e2:10:9b:53:02:1a:06:75:06:41:01:12:78:
58:7b:a0:38:7c:26:78:1e:8d:0a:7d:14:fe:03:41:9f:f1:2e:
f4:61:df:81:b5:90:e8:f9:32:fc:33:79:f0:5e:bc:4d:b6:56:
66:a0:0d:26:39:00:ff:22:d5:7b:05:ed:2c:12:43:6e:36:fc:
b4:f2:7c:3b:34:a7:35:7e:6f:bf:85:7a:d8:06:7e:29:5a:51:
98:9d:12:23:0a:ca:de:c4:3a:94:b2:f6:b7:83:1e:7a:af:5e:
cf:a9:c4:51:b1:3e:96:e4:00:55:ca:ff:05:75:91:78:57:4f:
2d:a6:e7:2a:67:69:41:9b:2a:f8:6f:8a:10:05:1c:8a:2b:e5:
d1:e0:00:6a:9c:08:8a:42:a9:cb:4a:06:59:7f:ad:40:b1:98:
58:6c:46:3d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVu7/HaxsEZQ1zL1e/D2jCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWQ1MTc3MDc3YjkwODE4YzZmOTBhZTRlNDQzMzJkOGNh
Y2JiNzQwHhcNMjMwMTAxMjAwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzZlOGI3ZjczZGMwZjZmZGQzNWI1YTM1NDdjMTM2NzZmOWIyODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiyGu8QKZHMzwoklQi+mBSA3sjGK
+9Xtbof8VP33PBCPI8K+n6y3MeeGB35582BN3znlITfo8wYxBSWkCsGs3TKoYZGK
x+1M2KhpsN5csdlIKaFNve1Jf6GK2eK8LoT5gVjrr+PRodp29BwYz0hx6ieI/0TM
/UJZTQCQ61jMWEolSyAeJPD4RJiLpJD+mjZth5ycDP6H3wRk5fwIvNH2G+k/jP1i
BaZbvcXdgv0je/g6i0TfbHNfKEcAuZMN+YQPdmef6lM9XJ5jNhlfBCHUxx9m/zy5
cUkEm5VZasUdlZSbktm4kCw0SJRNCKpMl4DwI2mzD9gS+ur3fOcaRkAzLwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAdui39z3A9v3TW1o1R8E2dvmyghMB8GA1UdIwQY
MBaAFIWdUXcHe5CBjG+Qrk5EMy2MrLt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFoxUmR3ZDdrSUdNYjVDdVRrUXpMWXlzdTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYWVhNDMtZjMzMy00NTA5LWE2ZGIt
M2FjOTZiZTI4NWUwLzEvQjI2TGYzUGNEMl9kTmJXalZId1RaMi1iS0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYWVhNDMtZjMzMy00NTA5LWE2ZGItM2FjOTZiZTI4NWUw
LzEvaFoxUmR3ZDdrSUdNYjVDdVRrUXpMWXlzdTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLh64AwQF
LiGgAwQCua18AwQBw7+sAwQE1HIAMA0GCSqGSIb3DQEBCwUAA4IBAQAuwcsZMnXY
ZHf5aiAOTnCa+kTbLqiPuZSx4HiNO8WMoQpAC3sd71ICSq5125TdVbgbYHrucpPi
hjay533baJmW/HLgMkjtSj0ClDHVsJbZa+TyphUnnJGZXBSEiAoJyeIQm1MCGgZ1
BkEBEnhYe6A4fCZ4Ho0KfRT+A0Gf8S70Yd+BtZDo+TL8M3nwXrxNtlZmoA0mOQD/
ItV7Be0sEkNuNvy08nw7NKc1fm+/hXrYBn4pWlGYnRIjCsrexDqUsva3gx56r17P
qcRRsT6W5ABVyv8FdZF4V08tpucqZ2lBmyr4b4oQBRyKK+XR4ABqnAiKQqnLSgZZ
f61AsZhYbEY9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:34 2024 by rpki-client on console-ams.rpki-client.org