Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dmLv2op2S4M5CARXEnruqluuHIE.roa
File: dmLv2op2S4M5CARXEnruqluuHIE.roa (raw, json)
Hash identifier: 5c7zCOsS/6Z5AaEPxu1qS5F2sg24d9Xqr3J4yc0tiF8=
Subject key identifier: 76:62:EF:DA:8A:76:4B:83:39:08:04:57:12:7A:EE:AA:5B:AE:1C:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A98290D2177D9CCE0984E426D67805C58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dmLv2op2S4M5CARXEnruqluuHIE.roa
Signing time: Fri 15 Sep 2023 09:25:41 +0000
ROA not before: Fri 15 Sep 2023 09:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 87.120.196.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
87.120.205.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
87.120.219.0/24 maxlen: 24
87.120.216.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
87.120.222.0/24 maxlen: 24
85.208.139.0/24 maxlen: 24
85.208.136.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
94.156.236.0/24 maxlen: 24
193.8.184.0/22 maxlen: 24
194.113.36.0/22 maxlen: 24
83.143.113.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
93.123.30.0/23 maxlen: 24
171.22.16.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
79.110.63.0/24 maxlen: 24
87.120.92.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
31.169.124.0/22 maxlen: 24
45.81.243.0/24 maxlen: 24
91.92.21.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
45.128.234.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
109.206.243.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
37.139.128.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
109.206.240.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
212.87.220.0/22 maxlen: 24
212.87.222.0/23 maxlen: 24
193.168.196.0/22 maxlen: 24
45.128.97.0/24 maxlen: 24
45.128.99.0/24 maxlen: 24
193.148.56.0/22 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
45.95.0.0/22 maxlen: 24
85.209.134.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
94.125.100.0/22 maxlen: 24
45.91.193.0/24 maxlen: 24
31.13.247.0/24 maxlen: 24
87.121.216.0/22 maxlen: 24
5.253.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:29:0d:21:77:d9:cc:e0:98:4e:42:6d:67:80:5c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 15 09:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7662efda8a764b8339080457127aeeaa5bae1c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:84:c4:e7:61:0b:0b:a4:be:a4:62:f5:ea:de:
a0:83:f3:3c:c1:fd:ef:1a:b1:dd:b9:3d:49:a5:12:
e4:f1:a4:c2:ed:20:d3:5b:08:5b:90:44:1e:fe:12:
7a:47:15:85:a6:5f:c7:be:d0:e1:06:66:ab:a5:62:
7d:4a:7c:6f:cc:13:c1:53:c7:53:e1:61:17:c5:b3:
b4:1a:8f:6f:5c:b9:3d:25:7a:a6:b2:4b:11:67:a2:
0c:c2:e4:8b:22:5d:8f:ba:00:92:2a:8c:ab:30:37:
c5:f7:15:ea:ef:79:00:50:24:cc:4b:98:97:2a:80:
c4:33:85:f5:8f:41:bc:11:07:28:1f:7a:00:77:81:
a7:ce:9b:76:56:e0:3f:9d:b8:96:65:79:f1:b8:6e:
7d:aa:cc:2f:85:cb:df:c7:22:b8:4e:d0:83:ca:23:
78:2c:4d:2c:a9:c0:ad:9a:42:35:53:ce:67:2e:44:
0c:e1:a9:ee:a7:24:32:cb:79:f9:fc:82:95:6a:69:
8b:2c:98:e3:98:e4:db:03:0e:d0:40:c9:0f:c8:2e:
29:49:46:62:4a:a6:49:26:a3:4b:62:96:76:cf:a6:
51:ba:c8:4a:0b:41:df:4b:d7:94:2f:16:a3:d3:64:
e5:17:41:33:cd:3f:b0:da:06:e4:4d:62:86:75:f6:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:EF:DA:8A:76:4B:83:39:08:04:57:12:7A:EE:AA:5B:AE:1C:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dmLv2op2S4M5CARXEnruqluuHIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
31.13.247.0/24
31.169.124.0/22
37.139.128.0/24
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.84.88.0/24
45.88.66.0/23
45.89.244.0/24
45.91.193.0/24
45.95.0.0/22
45.128.97.0/24
45.128.99.0/24
45.128.234.0/23
45.149.235.0/24
79.110.63.0/24
83.143.113.0/24
84.21.172.0/24
85.31.44.0/24
85.31.46.0/24
85.208.136.0/24
85.208.139.0/24
85.209.134.0/23
87.120.36.0/24
87.120.88.0/24
87.120.92.0/24
87.120.108.0/24
87.120.196.0/24
87.120.205.0/24
87.120.216.0/24
87.120.219.0/24
87.120.222.0/24
87.121.47.0/24
87.121.98.0/24
87.121.216.0/22
91.92.21.0/24
93.123.30.0/23
94.125.100.0/22
94.156.236.0/24
109.206.236.0/24
109.206.240.0/22
171.22.16.0/24
171.22.19.0/24
171.22.30.0/24
185.207.14.0/23
185.218.137.0-185.218.138.255
185.246.220.0-185.246.222.255
185.252.179.0/24
193.8.184.0/22
193.47.60.0/23
193.148.56.0/22
193.168.196.0/22
194.113.36.0/22
212.87.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:aa:d9:d0:2c:54:b1:c3:16:3d:19:f7:7d:01:47:46:02:c4:
06:a1:c1:75:45:7a:d2:b0:f8:1b:dc:ca:9d:b1:50:66:e1:80:
d0:35:8c:cb:74:1a:99:fd:15:bb:ec:2d:a1:19:66:4b:0d:da:
8b:01:2f:34:b0:61:18:ff:4f:9b:f8:ee:ca:4e:73:33:ed:82:
c0:bd:98:31:53:0b:12:2b:a2:84:a0:7f:4a:e4:7a:43:f4:cd:
ec:98:f5:72:55:aa:3e:0b:6e:a5:ab:97:a7:63:cd:1a:8e:0c:
9d:2e:ea:7e:69:aa:61:d5:39:10:d4:22:00:88:45:0b:53:0c:
e7:fe:79:c6:8d:61:d1:5f:f1:6a:3c:e0:dd:8b:fb:2a:6d:44:
76:7a:1b:cb:b4:68:a8:6b:e9:b1:d9:51:5e:79:8f:c5:88:d4:
0b:a8:51:05:c4:2c:8b:ca:6c:ba:82:af:b3:15:ae:99:ab:94:
4e:ba:cd:c4:83:9d:27:89:0b:b0:fb:a4:88:90:45:5b:53:4b:
94:aa:e4:ee:ab:60:9c:eb:4d:99:81:19:87:3d:f3:d9:cd:54:
6b:ba:a7:9f:de:48:d0:3e:f4:b4:ff:91:05:40:f8:2c:3c:24:
6d:e9:e1:c9:20:47:d7:d4:34:54:c3:cf:43:73:26:d5:fe:13:
c6:29:a2:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org