Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Vo_p-O1jB69IVXs718dpJre3TZE.roa
File: Vo_p-O1jB69IVXs718dpJre3TZE.roa (raw, json)
Hash identifier: ZhW3UReeUxUbV7ZvlF+VLu/OXs0hmWCje863j/Vy2Vw=
Subject key identifier: 56:8F:E9:F8:ED:63:07:AF:48:55:7B:3B:D7:C7:69:26:B7:B7:4D:91
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0185730CAF3C5D95EBB83E1D719C904A5040
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Vo_p-O1jB69IVXs718dpJre3TZE.roa
Signing time: Mon 02 Jan 2023 15:14:49 +0000
ROA not before: Mon 02 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51684
IP address blocks: 185.16.26.0/24 maxlen: 24
5.181.196.0/24 maxlen: 24
89.46.204.0/23 maxlen: 23
89.46.206.0/24 maxlen: 24
89.46.206.0/23 maxlen: 23
89.46.203.0/24 maxlen: 24
89.46.202.0/23 maxlen: 23
89.46.202.0/24 maxlen: 24
89.46.204.0/24 maxlen: 24
89.46.205.0/24 maxlen: 24
89.46.200.0/24 maxlen: 24
89.46.200.0/23 maxlen: 23
89.46.201.0/24 maxlen: 24
89.46.207.0/24 maxlen: 24
185.254.203.0/24 maxlen: 24
185.254.200.0/24 maxlen: 24
185.254.200.0/23 maxlen: 23
185.254.201.0/24 maxlen: 24
82.199.208.0/23 maxlen: 23
82.199.208.0/24 maxlen: 24
82.199.209.0/24 maxlen: 24
82.199.210.0/24 maxlen: 24
82.199.211.0/24 maxlen: 24
82.199.212.0/23 maxlen: 23
82.199.212.0/24 maxlen: 24
82.199.213.0/24 maxlen: 24
82.199.214.0/23 maxlen: 23
82.199.218.0/23 maxlen: 23
82.199.218.0/24 maxlen: 24
82.199.219.0/24 maxlen: 24
82.199.214.0/24 maxlen: 24
82.199.215.0/24 maxlen: 24
82.199.216.0/24 maxlen: 24
82.199.216.0/23 maxlen: 23
82.199.217.0/24 maxlen: 24
82.199.221.0/24 maxlen: 24
82.199.222.0/24 maxlen: 24
82.199.222.0/23 maxlen: 23
82.199.220.0/24 maxlen: 24
82.199.220.0/23 maxlen: 23
185.247.37.0/24 maxlen: 24
185.247.38.0/24 maxlen: 24
185.247.36.0/24 maxlen: 24
185.247.36.0/23 maxlen: 23
185.95.204.0/23 maxlen: 23
185.95.204.0/24 maxlen: 24
185.95.205.0/24 maxlen: 24
185.95.206.0/24 maxlen: 24
185.95.206.0/23 maxlen: 23
185.95.207.0/24 maxlen: 24
185.247.38.0/23 maxlen: 23
185.247.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 18:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:af:3c:5d:95:eb:b8:3e:1d:71:9c:90:4a:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jan 2 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568fe9f8ed6307af48557b3bd7c76926b7b74d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:21:c5:c6:f4:8d:17:c0:d3:3f:25:ff:09:
a0:51:ae:86:f8:16:0b:7b:b5:48:34:8d:6e:a0:ab:
c1:05:fe:25:5e:1f:1f:6d:39:5a:64:af:a6:87:1c:
09:b0:f6:ba:6f:54:3f:a5:01:7c:d6:22:8c:15:84:
11:f2:de:9d:ae:0c:8e:c7:64:34:50:c4:96:ce:28:
96:30:5f:fa:1c:83:be:bf:95:f9:3a:fc:09:24:33:
8d:9c:a9:d7:6f:84:0f:6a:c8:3c:2a:eb:a3:2f:bf:
cb:50:a1:61:dd:fe:2a:7f:31:ce:ea:d6:c3:54:fc:
98:19:1f:15:ea:f7:20:33:ee:80:9f:7d:c8:86:93:
97:ee:70:66:10:b0:12:59:b4:c8:81:84:b8:10:7e:
39:1c:f4:3c:2d:3d:ad:de:30:6a:b6:fa:fd:c3:72:
03:87:5b:95:17:55:81:fc:6f:0c:8a:35:c6:ac:1a:
17:a1:dc:81:79:28:1a:94:77:93:bd:3e:ea:6b:a3:
e4:b8:9b:35:9e:c8:1f:7d:53:54:50:59:24:38:6b:
da:ae:e3:25:da:c1:48:5d:57:47:6a:33:5b:73:d4:
8b:06:8e:02:73:4e:c3:e4:f2:a1:fc:d8:c9:eb:f5:
a0:df:e2:22:66:a8:d8:f8:b5:dc:3a:86:b1:13:3c:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:E9:F8:ED:63:07:AF:48:55:7B:3B:D7:C7:69:26:B7:B7:4D:91
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Vo_p-O1jB69IVXs718dpJre3TZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.196.0/24
82.199.208.0/20
89.46.200.0/21
185.16.26.0/24
185.95.204.0/22
185.247.36.0/22
185.254.200.0/23
185.254.203.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:73:b7:6a:23:12:69:00:cc:00:7b:3f:a4:4d:91:57:e4:dc:
70:66:ce:41:2c:41:0d:d9:0c:1a:2e:67:2d:5c:18:1b:4d:cd:
af:77:e7:f2:af:8e:ff:ac:16:1b:19:98:42:5b:a0:a0:7e:4a:
84:2e:c8:1f:af:e5:37:e3:ad:e2:85:ee:ec:89:f5:0d:eb:c3:
a8:4a:38:62:e5:75:ee:ee:d5:4a:e2:04:aa:7f:b1:8c:30:37:
d6:39:5a:d4:06:6f:44:81:bd:34:bc:db:81:d4:a1:21:38:78:
96:cc:02:69:ea:c0:2b:65:01:74:39:b6:c0:89:68:fe:23:8b:
7d:dc:51:5f:53:5e:5b:72:34:69:53:0e:31:ff:cf:a5:85:56:
58:bd:1f:34:1e:b4:99:5c:46:ab:06:d4:df:85:61:ad:be:cf:
4c:ad:04:da:a9:fb:2d:54:f8:d1:a0:80:50:f3:51:17:b4:fe:
be:f4:d3:b2:28:59:a1:66:c4:f1:29:f8:4a:e0:dc:82:fb:7b:
2e:07:49:71:6b:ba:f3:de:58:be:92:95:bd:83:35:ea:10:5f:
55:14:3f:0f:1f:d9:66:7b:d5:00:4b:ad:27:46:b6:9a:c9:aa:
49:f4:63:f4:16:a5:de:e0:51:9f:45:5b:76:39:81:ea:2e:2e:
e6:e5:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:16 2024 by rpki-client on console-ams.rpki-client.org