Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/GTciI2jIIu2EyaHLdpfnYqiLou4.roa
File: GTciI2jIIu2EyaHLdpfnYqiLou4.roa (raw, json)
Hash identifier: X5OB5kHi+PJdcuFCd5qKJ94xWNtD07tzjvsC3x6592E=
Subject key identifier: 19:37:22:23:68:C8:22:ED:84:C9:A1:CB:76:97:E7:62:A8:8B:A2:EE
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 01856DD4205EF1E667E185BDDADDF2FC04E1
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/GTciI2jIIu2EyaHLdpfnYqiLou4.roa
Signing time: Sun 01 Jan 2023 14:54:56 +0000
ROA not before: Sun 01 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202448
IP address blocks: 45.137.151.0/24 maxlen: 24
45.137.150.0/24 maxlen: 24
45.137.148.0/24 maxlen: 32
45.137.149.0/24 maxlen: 24
2.56.213.0/24 maxlen: 24
2.56.212.0/24 maxlen: 24
89.43.33.0/24 maxlen: 24
86.107.197.0/24 maxlen: 24
93.114.128.0/24 maxlen: 24
2.56.215.0/24 maxlen: 24
2.56.214.0/24 maxlen: 24
194.32.78.0/24 maxlen: 24
194.32.77.0/24 maxlen: 24
194.32.76.0/24 maxlen: 24
194.32.79.0/24 maxlen: 24
91.250.248.0/24 maxlen: 32
91.250.249.0/24 maxlen: 32
185.234.52.0/24 maxlen: 32
185.96.163.0/24 maxlen: 24
178.157.82.0/24 maxlen: 24
185.170.213.0/24 maxlen: 24
178.157.91.0/24 maxlen: 24
185.170.212.0/24 maxlen: 24
178.157.90.0/24 maxlen: 24
185.170.215.0/24 maxlen: 24
185.170.214.0/24 maxlen: 24
45.153.184.0/24 maxlen: 24
45.153.186.0/24 maxlen: 24
45.153.185.0/24 maxlen: 24
45.153.187.0/24 maxlen: 24
86.106.181.0/24 maxlen: 24
89.38.135.0/24 maxlen: 32
91.227.41.0/24 maxlen: 24
91.227.40.0/24 maxlen: 24
86.105.252.0/24 maxlen: 24
94.176.182.0/24 maxlen: 24
185.243.214.0/24 maxlen: 32
185.243.215.0/24 maxlen: 24
194.99.23.0/24 maxlen: 24
194.99.22.0/24 maxlen: 24
194.99.21.0/24 maxlen: 24
194.99.20.0/24 maxlen: 24
89.38.131.0/24 maxlen: 24
31.14.238.0/24 maxlen: 24
89.38.130.0/24 maxlen: 24
89.38.129.0/24 maxlen: 24
89.38.128.0/24 maxlen: 24
93.114.133.0/24 maxlen: 24
93.115.23.0/24 maxlen: 24
93.115.22.0/24 maxlen: 24
93.115.21.0/24 maxlen: 24
93.115.20.0/24 maxlen: 24
93.115.19.0/24 maxlen: 24
93.115.18.0/24 maxlen: 24
2a05:8280::/32 maxlen: 32
2a09:cd42::/32 maxlen: 32
2a09:cd45::/32 maxlen: 32
2a09:cd43::/32 maxlen: 32
2a0c:b9c1::/32 maxlen: 32
2a09:cd41::/32 maxlen: 32
2a09:cd40::/32 maxlen: 32
2a0c:b9c0::/32 maxlen: 32
2a09:cd46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:20:5e:f1:e6:67:e1:85:bd:da:dd:f2:fc:04:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Jan 1 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1937222368c822ed84c9a1cb7697e762a88ba2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:84:4c:08:6a:df:01:12:a4:c2:a4:90:0b:
1f:b9:fd:b7:00:e3:ee:45:21:33:2a:75:3f:1f:6c:
91:a8:8e:b9:29:8f:70:7d:9f:1c:06:40:1f:c6:98:
c2:9f:cf:d1:04:2e:2c:85:ff:d8:d4:9d:86:fc:88:
42:cd:f4:8e:5a:c5:91:db:0d:dd:59:16:b5:94:f3:
69:25:14:97:84:aa:19:5b:75:12:49:19:c5:70:61:
82:d0:34:04:b4:0a:a8:10:dc:a3:1b:8b:24:ee:33:
bb:ec:ad:87:c0:39:6f:75:1c:9a:34:a5:da:ed:2a:
36:cd:51:7c:55:b1:ae:44:df:06:40:61:84:f9:4a:
9f:43:7c:fe:f8:b5:54:52:63:61:35:be:0f:a6:0d:
82:68:f5:5d:7f:62:87:c1:60:7e:63:d3:03:c4:64:
13:7d:cf:f7:76:1d:fd:63:c3:58:ce:c6:21:fc:52:
15:40:cd:d6:9d:31:8a:96:c0:ac:90:68:59:02:a9:
d8:96:b5:0a:5b:06:82:aa:21:a5:1c:c3:59:cd:43:
fc:b6:13:d0:93:2e:37:59:a8:43:77:44:49:86:02:
27:83:81:3a:f4:3d:4a:a2:f4:1d:6c:37:2b:f0:50:
14:52:47:87:91:2a:c7:9d:15:d0:f9:8e:ce:14:e5:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:37:22:23:68:C8:22:ED:84:C9:A1:CB:76:97:E7:62:A8:8B:A2:EE
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/GTciI2jIIu2EyaHLdpfnYqiLou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.212.0/22
31.14.238.0/24
45.137.148.0/22
45.153.184.0/22
86.105.252.0/24
86.106.181.0/24
86.107.197.0/24
89.38.128.0/22
89.38.135.0/24
89.43.33.0/24
91.227.40.0/23
91.250.248.0/23
93.114.128.0/24
93.114.133.0/24
93.115.18.0-93.115.23.255
94.176.182.0/24
178.157.82.0/24
178.157.90.0/23
185.96.163.0/24
185.170.212.0/22
185.234.52.0/24
185.243.214.0/23
194.32.76.0/22
194.99.20.0/22
IPv6:
2a05:8280::/32
2a09:cd40::/30
2a09:cd45::-2a09:cd46:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:b9c0::/31
Signature Algorithm: sha256WithRSAEncryption
aa:ee:3e:fc:f6:fb:66:86:b4:1b:08:97:6a:97:13:0d:48:bd:
20:d2:03:ed:66:9a:8b:52:d0:46:af:24:1a:86:09:b3:dd:4d:
b8:3a:ab:0d:3a:70:7d:8b:d6:c5:53:c6:5f:91:77:41:e7:d9:
79:fe:ef:8b:0a:30:a0:aa:d0:ec:0a:ea:f8:4a:56:53:95:3a:
e4:c1:fd:75:cc:b4:42:6d:1f:c1:6c:1e:d4:86:99:74:3d:64:
ae:d2:a8:60:05:35:36:67:ec:f0:95:e0:d5:21:f3:14:1b:e1:
dd:70:ba:59:03:d9:5c:05:3c:e1:d4:7c:50:66:ac:2a:d6:83:
0f:27:f0:a1:93:9f:e5:6e:b2:6b:09:4b:70:70:69:5a:9e:79:
87:e9:50:ab:6f:6e:ed:73:67:4c:23:63:f2:7f:4d:9c:34:52:
9d:e2:ea:9a:9c:fb:5b:9b:d5:fd:aa:45:56:bb:ba:d3:3a:21:
d4:c9:8b:31:af:a1:8e:87:ae:f1:cd:0c:42:01:92:c6:e3:c4:
3c:0e:67:06:d6:cd:22:5a:9b:e6:1a:35:03:ec:58:f6:02:a6:
90:32:94:44:cc:2e:04:79:19:71:39:90:6c:4b:9b:68:17:31:
98:6f:c5:e7:7c:eb:ee:ec:67:08:2c:d3:51:06:f6:23:8e:d1:
bc:a5:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:34 2023 by rpki-client on console-fra.rpki-client.org