Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EeIedcAx5tbkxiiwZMhoPkPREqM.roa
File: EeIedcAx5tbkxiiwZMhoPkPREqM.roa (raw, json)
Hash identifier: yUZwjedXfC7OJYxYikkjlatd48IStSotHxx0u0FRVLI=
Subject key identifier: 11:E2:1E:75:C0:31:E6:D6:E4:C6:28:B0:64:C8:68:3E:43:D1:12:A3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F797F69FDB09A2D047D64A7DA6481DF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EeIedcAx5tbkxiiwZMhoPkPREqM.roa
Signing time: Sun 01 Jan 2023 22:35:10 +0000
ROA not before: Sun 01 Jan 2023 22:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 89.38.38.0/24 maxlen: 24
45.87.22.0/24 maxlen: 24
45.87.20.0/24 maxlen: 24
45.83.188.0/22 maxlen: 24
185.51.194.0/23 maxlen: 23
185.51.193.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.24.0/22 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
136.144.32.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
45.148.24.0/24 maxlen: 24
45.159.244.0/22 maxlen: 24
45.154.139.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.146.52.0/24 maxlen: 24
185.114.60.0/22 maxlen: 22
185.243.246.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.227.32.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
89.251.3.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
45.157.96.0/22 maxlen: 24
89.36.36.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.157.114.0/23 maxlen: 24
45.157.113.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:7f:69:fd:b0:9a:2d:04:7d:64:a7:da:64:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e21e75c031e6d6e4c628b064c8683e43d112a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:53:46:e3:e1:5a:20:a6:a3:5e:17:57:67:
3f:51:97:48:cc:8c:c9:db:8b:f6:5d:9f:18:2c:66:
f9:19:fe:34:1a:5d:fd:36:35:a4:2f:01:65:1a:3a:
db:6e:c2:17:be:da:6c:4c:e7:b9:a6:84:55:82:71:
4d:39:13:45:9c:a3:6f:11:a8:79:a5:ea:06:84:3b:
f6:47:51:a0:a4:85:0c:71:a1:b2:7c:0d:ff:37:1f:
39:62:a8:26:46:d2:2e:77:f6:d2:64:8c:5d:8c:2a:
0d:06:f5:e6:8c:67:84:34:d5:b1:72:61:45:ec:32:
26:87:2b:85:3e:06:4d:f7:10:9d:01:2b:2b:ae:ef:
0d:f6:34:c9:2d:a9:fb:7e:e9:98:5a:eb:67:79:4e:
18:09:dc:e7:68:55:ff:67:22:09:10:e3:6f:6a:55:
9e:f1:cd:f2:43:55:10:4c:40:4e:a0:8b:95:65:b9:
05:fb:ef:7d:36:81:7e:b1:54:a2:c8:d5:90:59:81:
11:71:00:9a:87:4c:b7:15:51:3c:56:35:de:b7:aa:
1b:ca:41:b7:b2:cf:fa:b2:2f:51:d9:d1:1e:68:13:
2f:f9:6c:81:cc:bc:5f:b8:b8:b3:72:a0:5f:ad:13:
fa:05:84:0e:cb:f8:53:ce:77:c9:9a:cb:7e:86:3a:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:1E:75:C0:31:E6:D6:E4:C6:28:B0:64:C8:68:3E:43:D1:12:A3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EeIedcAx5tbkxiiwZMhoPkPREqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.87.20.0/24
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.130.143.0/24
45.133.252.0/24
45.133.254.0/24
45.143.192.0/24
45.143.194.0/24
45.146.52.0/24
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/22
45.157.113.0-45.157.115.255
45.159.244.0/22
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.24.0/22
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
97:22:b7:b5:75:9c:3d:97:27:23:8b:1b:48:10:f6:ae:2c:7c:
3c:a5:9b:2a:75:26:9e:a7:dc:66:21:af:7f:30:d8:ec:1c:31:
bf:ad:ea:0e:07:b7:50:75:83:5f:08:e6:b3:17:7f:d3:20:7a:
89:aa:36:5a:7f:55:e4:b0:97:bf:67:76:aa:47:b2:fd:9e:63:
38:1b:eb:03:65:ad:18:45:da:f2:d6:f8:de:b7:d1:ef:fc:19:
56:f9:f5:b9:52:73:7a:e9:30:fa:bd:8f:ab:1a:99:69:19:d1:
70:61:56:4a:07:d6:0a:f6:51:d4:48:e6:29:34:6d:bf:02:7a:
c6:43:7a:91:6f:23:8b:fc:96:9e:3e:4b:b3:7e:90:c3:f7:5c:
80:30:cf:e8:29:41:81:13:ae:79:d1:e6:53:36:62:45:a4:60:
d8:f0:f9:64:26:f5:cd:45:34:da:fa:ea:81:8d:1d:73:f3:87:
ca:71:e3:14:a8:6c:99:08:6d:bf:3e:ff:ae:d4:81:ff:2b:5a:
23:d5:10:50:a3:f3:2b:82:b9:c6:8b:21:5e:27:40:ef:6b:fc:
02:b9:b2:58:a1:e9:35:cd:17:2a:81:44:4f:f1:07:30:06:f6:
ef:79:ab:b6:6a:4a:e3:4a:84:4c:a9:df:58:35:9e:63:79:46:
7d:8c:ec:ff
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAYVveX9p/bCaLQR9ZKfaZIHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWUyMWU3NWMwMzFlNmQ2ZTRjNjI4YjA2NGM4NjgzZTQzZDExMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3JTRuPhWiCmo14XV2c/UZdIzIzJ
24v2XZ8YLGb5Gf40Gl39NjWkLwFlGjrbbsIXvtpsTOe5poRVgnFNORNFnKNvEah5
peoGhDv2R1GgpIUMcaGyfA3/Nx85YqgmRtIud/bSZIxdjCoNBvXmjGeENNWxcmFF
7DImhyuFPgZN9xCdASsrru8N9jTJLan7fumYWutneU4YCdznaFX/ZyIJEONvalWe
8c3yQ1UQTEBOoIuVZbkF++99NoF+sVSiyNWQWYERcQCah0y3FVE8VjXet6obykG3
ss/6si9R2dEeaBMv+WyBzLxfuLizcqBfrRP6BYQOy/hTznfJmst+hjpIfwIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFBHiHnXAMebW5MYosGTIaD5D0RKjMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvRWVJZWRjQXg1dGJreGlpd1pNaG9Qa1BSRXFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQC
LVO8AwQALVcUAwQALVcWAwQALVh4AwQALVh6AwQCLYHoAwQALYKPAwQALYX8AwQA
LYX+AwQALY/AAwQALY/CAwQALZI0AwQALZQYAwQALZUAAwQALZZcAwQALZZeAwQA
LZqIAwQALZqLAwQCLZ1gMAwDBAAtnXEDBAItnXADBAItn/QDBABZJCQDBABZJiYD
BABZLi4DBABZ+wEDBABZ+wMDBACIkBADBACIkBIDBAKIkBgDBACIkCADBACIkCIw
DAMEALkzwQMEArkzwAMEArlyPAMEALnjIAMEALnz9AMEALnz9gMEAbzQJjANBgkq
hkiG9w0BAQsFAAOCAQEAlyK3tXWcPZcnI4sbSBD2rix8PKWbKnUmnqfcZiGvfzDY
7Bwxv63qDge3UHWDXwjmsxd/0yB6iao2Wn9V5LCXv2d2qkey/Z5jOBvrA2WtGEXa
8tb43rfR7/wZVvn1uVJzeukw+r2PqxqZaRnRcGFWSgfWCvZR1EjmKTRtvwJ6xkN6
kW8ji/yWnj5Ls36Qw/dcgDDP6ClBgROuedHmUzZiRaRg2PD5ZCb1zUU02vrqgY0d
c/OHynHjFKhsmQhtvz7/rtSB/ytaI9UQUKPzK4K5xoshXidA72v8ArmyWKHpNc0X
KoFET/EHMAb273mrtmpK40qETKnfWDWeY3lGfYzs/w==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org