Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/VzoMVs3BG2D1fftgpHvu_JTWatI.roa
File: VzoMVs3BG2D1fftgpHvu_JTWatI.roa (raw, json)
Hash identifier: cmiEq3xmnLwf+pNF87A5t7Wrh+0JD2QGCNc6iGRDuXI=
Subject key identifier: 57:3A:0C:56:CD:C1:1B:60:F5:7D:FB:60:A4:7B:EE:FC:94:D6:6A:D2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 018C866EA1DE99380A4637F9118DB5593CBE
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/VzoMVs3BG2D1fftgpHvu_JTWatI.roa
Signing time: Wed 20 Dec 2023 08:54:06 +0000
ROA not before: Wed 20 Dec 2023 08:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41897
IP address blocks: 94.248.184.0/21 maxlen: 21
46.40.56.0/22 maxlen: 22
46.40.63.0/24 maxlen: 24
46.40.60.0/23 maxlen: 23
46.40.62.0/24 maxlen: 24
46.40.0.0/18 maxlen: 18
46.40.1.0/24 maxlen: 24
46.40.8.0/22 maxlen: 22
46.40.6.0/24 maxlen: 24
94.248.233.0/24 maxlen: 24
94.248.232.0/24 maxlen: 24
46.40.16.0/21 maxlen: 21
94.248.232.0/21 maxlen: 21
94.248.232.0/22 maxlen: 22
46.40.15.0/24 maxlen: 24
46.40.12.0/23 maxlen: 23
94.248.238.0/24 maxlen: 24
94.248.239.0/24 maxlen: 24
94.248.237.0/24 maxlen: 24
94.248.235.0/24 maxlen: 24
94.248.236.0/24 maxlen: 24
94.248.234.0/24 maxlen: 24
46.40.26.0/24 maxlen: 24
46.40.27.0/24 maxlen: 24
46.40.31.0/24 maxlen: 24
46.40.30.0/24 maxlen: 24
46.40.30.0/23 maxlen: 23
46.40.29.0/24 maxlen: 24
46.40.37.0/24 maxlen: 24
46.40.35.0/24 maxlen: 24
46.40.33.0/24 maxlen: 24
46.40.34.0/24 maxlen: 24
46.40.32.0/24 maxlen: 24
91.147.244.0/22 maxlen: 22
46.40.40.0/21 maxlen: 21
46.40.48.0/21 maxlen: 21
89.147.84.0/22 maxlen: 22
89.147.82.0/24 maxlen: 24
89.147.83.0/24 maxlen: 24
89.147.80.0/20 maxlen: 20
89.147.80.0/22 maxlen: 22
89.147.80.0/24 maxlen: 24
89.147.81.0/24 maxlen: 24
89.147.89.0/24 maxlen: 24
89.147.88.0/24 maxlen: 24
195.192.244.0/22 maxlen: 22
95.85.173.0/24 maxlen: 24
95.85.176.0/22 maxlen: 22
95.85.184.0/23 maxlen: 23
95.85.186.0/23 maxlen: 23
95.85.128.0/22 maxlen: 22
95.85.128.0/18 maxlen: 18
95.85.136.0/22 maxlen: 22
95.85.135.0/24 maxlen: 24
95.85.144.0/21 maxlen: 21
95.85.152.0/24 maxlen: 24
95.85.152.0/23 maxlen: 23
81.24.240.0/21 maxlen: 21
95.85.156.0/22 maxlen: 22
95.85.154.0/24 maxlen: 24
95.85.155.0/24 maxlen: 24
81.24.247.0/24 maxlen: 24
95.85.153.0/24 maxlen: 24
95.85.154.0/23 maxlen: 23
95.85.172.0/24 maxlen: 24
185.10.204.0/22 maxlen: 22
185.10.204.0/24 maxlen: 24
217.17.97.0/24 maxlen: 24
217.17.98.0/24 maxlen: 24
217.17.96.0/24 maxlen: 24
217.17.96.0/20 maxlen: 24
217.17.100.0/24 maxlen: 24
217.17.111.0/24 maxlen: 24
217.17.110.0/24 maxlen: 24
217.17.107.0/24 maxlen: 24
217.17.108.0/24 maxlen: 24
185.37.170.0/24 maxlen: 24
185.37.169.0/24 maxlen: 24
185.37.168.0/22 maxlen: 22
80.245.96.0/22 maxlen: 22
45.158.16.0/22 maxlen: 22
46.251.8.0/22 maxlen: 22
91.102.224.0/21 maxlen: 21
91.102.229.0/24 maxlen: 24
185.231.128.0/22 maxlen: 22
185.169.248.0/22 maxlen: 22
185.169.248.0/24 maxlen: 24
185.169.249.0/24 maxlen: 24
185.169.250.0/23 maxlen: 23
185.156.152.0/22 maxlen: 22
185.141.198.0/24 maxlen: 24
185.141.199.0/24 maxlen: 24
185.141.196.0/22 maxlen: 22
185.141.196.0/23 maxlen: 23
85.222.178.0/24 maxlen: 24
85.222.179.0/24 maxlen: 24
85.222.177.0/24 maxlen: 24
85.222.176.0/21 maxlen: 21
85.222.176.0/20 maxlen: 20
85.222.176.0/24 maxlen: 24
85.222.180.0/22 maxlen: 22
185.6.190.0/24 maxlen: 24
185.6.191.0/24 maxlen: 24
185.6.189.0/24 maxlen: 24
185.6.188.0/24 maxlen: 24
185.6.188.0/22 maxlen: 22
178.20.200.0/24 maxlen: 24
178.20.202.0/23 maxlen: 23
178.20.201.0/24 maxlen: 24
2a04:f040::/29 maxlen: 29
2a00:ad07:3000::/36 maxlen: 36
2a0c:6300::/30 maxlen: 30
2a00:ad00::/29 maxlen: 29
2a00:ad03::/32 maxlen: 32
2a00:ad00:2010::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 20 Dec 2023 10:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:6e:a1:de:99:38:0a:46:37:f9:11:8d:b5:59:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Dec 20 08:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=573a0c56cdc11b60f57dfb60a47beefc94d66ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:85:37:66:af:bb:87:d2:e0:1f:d6:97:71:
0c:ff:cc:8a:32:dc:70:bb:06:42:42:fe:b5:fe:6e:
df:d8:f6:a8:b1:5e:9f:1a:66:0b:7f:7a:df:ef:66:
d0:b5:4a:4d:cf:34:f7:45:3a:5e:6b:c8:d9:11:44:
15:bc:25:8f:24:72:88:bc:e4:74:83:66:f7:19:94:
fe:b7:b0:2f:da:a0:6f:fe:1b:86:67:78:83:c8:8f:
16:46:25:80:de:3f:04:cc:eb:37:fe:67:d2:e4:3e:
90:98:19:06:9a:c2:27:eb:49:c6:b0:b4:02:ae:ea:
de:7b:58:6e:88:39:eb:20:51:fd:40:38:37:42:a6:
c5:4c:2b:d4:08:e0:5d:30:97:f6:9d:b9:d6:bf:54:
4c:58:be:88:7f:08:29:58:eb:25:ce:30:14:ed:70:
bc:56:8d:05:ec:04:76:f5:ff:fa:15:e2:56:c3:16:
5a:aa:dc:ed:52:a5:5c:de:b3:b1:cc:9d:48:6d:1c:
b6:90:72:c3:50:cb:e7:14:58:59:ae:a3:4a:d0:9f:
8c:fd:a9:86:4f:10:14:ab:bc:d2:86:5a:d2:20:29:
cd:aa:b9:c8:95:ac:ca:08:f2:59:25:83:95:ac:db:
ba:3f:3f:89:3e:ae:19:c9:fb:b5:88:87:a5:bb:db:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:0C:56:CD:C1:1B:60:F5:7D:FB:60:A4:7B:EE:FC:94:D6:6A:D2
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/VzoMVs3BG2D1fftgpHvu_JTWatI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.16.0/22
46.40.0.0/18
46.251.8.0/22
80.245.96.0/22
81.24.240.0/21
85.222.176.0/20
89.147.80.0/20
91.102.224.0/21
91.147.244.0/22
94.248.184.0/21
94.248.232.0/21
95.85.128.0/18
178.20.200.0/22
185.6.188.0/22
185.10.204.0/22
185.37.168.0/22
185.141.196.0/22
185.156.152.0/22
185.169.248.0/22
185.231.128.0/22
195.192.244.0/22
217.17.96.0/20
IPv6:
2a00:ad00::/29
2a04:f040::/29
2a0c:6300::/30
Signature Algorithm: sha256WithRSAEncryption
b0:9f:db:e4:bd:32:06:3e:b6:a9:b1:61:cb:00:ed:23:31:a8:
86:4b:70:94:bb:f9:d4:60:80:79:a5:de:f3:eb:e7:bb:c8:5f:
8f:fb:f7:78:98:63:bf:6f:82:63:11:1a:73:5b:5f:4c:38:e2:
cf:27:3b:78:3d:8f:5f:a8:69:cb:4b:00:1c:c4:bf:bd:64:80:
fe:0d:6d:e4:cc:0d:48:2c:3b:00:d8:67:94:be:32:25:29:79:
2e:d1:df:2d:bf:d5:94:42:3a:b6:da:f9:ce:28:be:e9:1e:fa:
f1:22:1f:7f:53:a8:2b:f4:38:b0:cc:76:28:d1:85:01:86:47:
23:56:f1:2b:b4:10:8c:8e:cf:0f:c2:ab:cb:7c:51:a5:79:48:
16:8d:1c:c0:74:da:a6:79:f1:1b:12:96:ad:d8:33:0d:75:98:
12:12:0e:1b:d3:6c:c4:59:ca:db:96:1d:54:d3:b5:ac:9d:44:
ef:46:3d:21:39:6d:c3:0e:c8:68:48:8d:6c:e4:17:54:e8:c0:
4a:2f:3a:71:de:37:99:5c:a6:72:2d:2f:2f:7d:68:f4:b9:1b:
fa:5b:ea:f2:54:c2:2f:0c:ae:8b:c7:41:88:6d:1b:7d:ea:3c:
4b:6f:07:e0:f1:5f:a2:83:38:1a:0f:80:ac:28:e3:23:42:59:
19:0a:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:31 2024 by rpki-client on console-ams.rpki-client.org