Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inbal-Ltm5tC11uxEpVHhcQbr38.roa
File: inbal-Ltm5tC11uxEpVHhcQbr38.roa (raw, json)
Hash identifier: gibr9pXZ/d8vv9/CWEovCkI7HV2gkz3vdw8wB/4BxC4=
Subject key identifier: 8A:76:DA:97:E2:ED:9B:9B:42:D7:5B:B1:12:95:47:85:C4:1B:AF:7F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01869227373651ED5A2834AC56230765A3CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inbal-Ltm5tC11uxEpVHhcQbr38.roa
Signing time: Mon 27 Feb 2023 09:14:48 +0000
ROA not before: Mon 27 Feb 2023 09:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 11:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:27:37:36:51:ed:5a:28:34:ac:56:23:07:65:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 27 09:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a76da97e2ed9b9b42d75bb112954785c41baf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:98:9d:6e:f1:dd:c8:3a:76:40:37:44:d9:
7b:8a:53:20:0b:0a:48:ab:b3:81:42:ef:4b:40:f8:
0a:1e:06:37:1c:0c:c4:ea:db:c2:29:7c:d9:00:2b:
a4:fe:3b:c6:d8:20:73:18:fb:a8:86:a8:1a:f0:81:
af:38:2d:f6:16:b0:20:0a:cd:af:9b:41:94:20:06:
f6:7e:6a:49:dd:f7:6f:29:5a:88:61:f7:c9:56:ab:
b3:2d:ef:a6:06:16:80:7f:0a:4a:22:5a:d6:cc:b3:
36:d3:b7:94:0c:18:a8:84:ab:22:1d:96:74:21:e8:
15:f9:a1:f4:53:f1:53:db:84:25:a8:ff:df:13:72:
32:3f:4a:fc:21:5d:0f:54:77:35:b6:b2:d9:ac:10:
36:5d:dc:dd:c2:b5:23:09:5f:1d:c6:2a:41:58:56:
4f:d1:24:29:5a:fd:5b:8a:ec:a7:a3:8d:82:3b:55:
a0:14:98:3a:2b:37:48:77:f4:cc:91:19:7d:d8:64:
fe:82:62:df:27:71:ae:6f:31:68:a8:ed:8b:64:2a:
2d:a2:1b:38:0b:f4:d8:9b:5a:80:88:32:6a:71:2d:
97:b3:0b:e0:2f:3d:fd:9a:0f:9a:d8:d7:91:34:06:
62:a6:0f:02:48:46:f1:33:8b:dc:1f:2b:3d:a7:58:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:DA:97:E2:ED:9B:9B:42:D7:5B:B1:12:95:47:85:C4:1B:AF:7F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inbal-Ltm5tC11uxEpVHhcQbr38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.182.0/23
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.6.0/24
194.87.22.0/24
194.87.27.0/24
194.87.82.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.55.0/24
195.133.94.0/24
195.133.193.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.192.211.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8b:0c:ba:9c:68:ad:35:55:a2:2d:62:c6:97:41:53:e1:05:
30:1e:19:e2:7b:e8:7d:54:12:8d:32:0d:98:71:7e:ad:07:6d:
54:44:0e:9e:75:0f:e5:47:db:9f:d9:34:2a:5a:11:0c:f5:72:
91:40:b2:d1:64:ee:3a:e3:77:29:5c:e3:2c:05:31:93:a4:eb:
85:8f:57:49:22:33:c5:a0:e5:58:ad:4a:8a:3c:f3:f4:d5:1a:
78:d6:72:2b:f0:d6:7a:0e:20:03:3e:a5:d2:62:bf:03:98:6e:
34:7c:f0:12:3f:9e:23:b1:d2:b5:30:8f:9d:17:85:9f:6a:2e:
00:20:2e:b0:c9:79:2e:68:3b:10:62:f0:b5:3f:3f:d4:69:13:
94:ee:1d:74:aa:43:55:f0:9b:38:5d:5d:99:0b:9b:ae:99:d9:
7e:0b:ef:17:c3:38:ce:d5:1f:06:95:4b:d8:5d:c7:1a:4e:f0:
d6:1e:4e:cc:55:3a:3b:fb:9c:c0:b8:e5:da:89:d3:2b:76:41:
df:f6:c2:1a:c7:76:9d:75:39:04:f8:b3:44:a7:6d:ed:2f:0a:
88:ce:16:b9:75:63:08:07:2d:6c:f2:85:89:d3:1f:8a:0e:cc:
a8:09:8f:b3:bb:3d:9c:ad:a4:ca:e5:b3:57:8b:b1:74:ca:fd:
c6:58:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org