Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/UkmNBQUs7nlM6a1qTTYMPaLiVro.roa
File: UkmNBQUs7nlM6a1qTTYMPaLiVro.roa (raw, json)
Hash identifier: C2nwXFUuu19WluB2S3eqAnsTpvYT9L2UHgmf3nX/BMo=
Subject key identifier: 52:49:8D:05:05:2C:EE:79:4C:E9:AD:6A:4D:36:0C:3D:A2:E2:56:BA
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 018B40049F0423849D262BA1484CFCFB2628
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/UkmNBQUs7nlM6a1qTTYMPaLiVro.roa
Signing time: Tue 17 Oct 2023 23:42:06 +0000
ROA not before: Tue 17 Oct 2023 23:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202448
IP address blocks: 45.137.151.0/24 maxlen: 24
45.137.150.0/24 maxlen: 24
45.137.148.0/24 maxlen: 32
45.137.149.0/24 maxlen: 24
2.56.213.0/24 maxlen: 24
2.56.212.0/24 maxlen: 24
89.43.33.0/24 maxlen: 24
86.107.197.0/24 maxlen: 24
93.114.128.0/24 maxlen: 24
2.56.215.0/24 maxlen: 24
2.56.214.0/24 maxlen: 24
194.32.78.0/24 maxlen: 24
194.32.77.0/24 maxlen: 24
194.32.76.0/24 maxlen: 24
194.32.79.0/24 maxlen: 24
91.250.248.0/24 maxlen: 32
91.250.249.0/24 maxlen: 32
185.234.52.0/24 maxlen: 32
193.201.15.0/24 maxlen: 24
185.96.163.0/24 maxlen: 24
178.157.82.0/24 maxlen: 24
185.170.213.0/24 maxlen: 24
178.157.91.0/24 maxlen: 24
185.170.212.0/24 maxlen: 24
178.157.90.0/24 maxlen: 24
185.170.215.0/24 maxlen: 24
185.170.214.0/24 maxlen: 24
45.153.184.0/24 maxlen: 24
45.153.186.0/24 maxlen: 24
45.153.185.0/24 maxlen: 24
45.153.187.0/24 maxlen: 24
86.106.181.0/24 maxlen: 24
89.38.135.0/24 maxlen: 32
91.227.41.0/24 maxlen: 24
91.227.40.0/24 maxlen: 24
86.105.252.0/24 maxlen: 24
94.176.182.0/24 maxlen: 24
185.243.214.0/24 maxlen: 32
185.243.215.0/24 maxlen: 24
194.99.23.0/24 maxlen: 24
194.99.22.0/24 maxlen: 24
194.99.21.0/24 maxlen: 24
194.99.20.0/24 maxlen: 24
89.38.131.0/24 maxlen: 24
31.14.238.0/24 maxlen: 24
89.38.130.0/24 maxlen: 24
89.38.129.0/24 maxlen: 24
89.38.128.0/24 maxlen: 24
188.212.125.0/24 maxlen: 24
188.212.124.0/24 maxlen: 24
93.114.133.0/24 maxlen: 24
93.115.16.0/24 maxlen: 24
93.115.17.0/24 maxlen: 24
93.115.23.0/24 maxlen: 24
93.115.22.0/24 maxlen: 24
93.115.21.0/24 maxlen: 24
93.115.20.0/24 maxlen: 24
93.115.19.0/24 maxlen: 24
93.115.18.0/24 maxlen: 24
31.222.229.0/24 maxlen: 24
2a05:8280::/32 maxlen: 32
2a09:cd42::/32 maxlen: 32
2a09:cd45::/32 maxlen: 32
2a09:cd43::/32 maxlen: 32
2a0c:b9c1::/32 maxlen: 32
2a09:cd41::/32 maxlen: 32
2a09:cd40::/32 maxlen: 32
2a0c:b9c0::/32 maxlen: 32
2a09:cd46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:40:04:9f:04:23:84:9d:26:2b:a1:48:4c:fc:fb:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Oct 17 23:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52498d05052cee794ce9ad6a4d360c3da2e256ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:71:91:ff:73:bb:2e:65:a0:62:1b:5d:da:
c7:fc:30:db:b0:c7:3a:14:00:5a:cb:9a:43:2f:c8:
72:22:cf:84:0e:16:5f:9b:7a:b0:b9:26:e5:24:78:
68:84:a4:1c:f4:2e:08:25:cf:55:81:ed:b8:66:51:
31:53:ec:51:49:d1:c4:0f:f2:a1:6e:54:12:49:9e:
c1:c7:31:79:1f:46:6d:88:9e:fe:e0:fa:8d:47:79:
ed:1c:67:68:d0:a0:df:b4:51:98:f6:1e:65:f0:28:
77:da:41:d9:a8:9b:ae:f9:e5:ed:be:7d:1d:84:8a:
21:c8:19:f5:9d:6e:ad:22:74:9f:5c:ba:6b:4b:b1:
93:d2:97:9c:a0:3e:30:ef:fb:0f:f5:18:b4:77:b3:
76:e0:10:f6:8e:e4:74:95:f5:83:58:b6:28:13:ec:
43:e4:d9:f8:e8:39:39:27:50:ab:d5:79:15:47:03:
29:6c:9d:2e:d8:f7:e0:96:a2:00:d1:91:88:7f:29:
60:64:b6:e7:b1:eb:10:54:37:b5:38:a7:d0:a2:86:
d1:d3:f1:41:7b:19:d1:e8:a5:6f:36:8c:04:35:3e:
f4:af:6b:dd:f3:03:09:71:4e:39:e4:c0:fd:d4:f8:
11:61:db:63:b7:f4:c1:6e:9c:23:12:b9:45:51:ef:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:8D:05:05:2C:EE:79:4C:E9:AD:6A:4D:36:0C:3D:A2:E2:56:BA
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/UkmNBQUs7nlM6a1qTTYMPaLiVro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.212.0/22
31.14.238.0/24
31.222.229.0/24
45.137.148.0/22
45.153.184.0/22
86.105.252.0/24
86.106.181.0/24
86.107.197.0/24
89.38.128.0/22
89.38.135.0/24
89.43.33.0/24
91.227.40.0/23
91.250.248.0/23
93.114.128.0/24
93.114.133.0/24
93.115.16.0/21
94.176.182.0/24
178.157.82.0/24
178.157.90.0/23
185.96.163.0/24
185.170.212.0/22
185.234.52.0/24
185.243.214.0/23
188.212.124.0/23
193.201.15.0/24
194.32.76.0/22
194.99.20.0/22
IPv6:
2a05:8280::/32
2a09:cd40::/30
2a09:cd45::-2a09:cd46:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:b9c0::/31
Signature Algorithm: sha256WithRSAEncryption
68:9e:40:2d:7e:0c:e0:1e:4d:2a:7b:4e:1f:08:a4:73:32:af:
28:61:94:2d:f3:c6:7c:29:55:a6:24:07:7d:d6:81:b8:48:30:
81:b9:81:79:52:40:4c:45:47:50:76:30:6f:21:3b:6b:df:80:
7f:05:04:1e:e6:ec:9d:20:61:38:58:53:2c:e3:d8:6b:97:03:
55:49:21:dc:1e:8e:5f:08:ac:d2:43:36:17:38:84:19:c7:6e:
76:97:a6:aa:af:84:37:94:8a:51:a6:9f:02:1c:cc:5e:37:98:
6e:97:39:71:48:7f:fa:14:0a:81:92:79:e1:cf:a9:a0:f1:b3:
1c:84:b7:1f:36:55:c3:b8:09:58:dc:30:44:79:fc:f0:4e:06:
12:21:36:36:c3:83:4f:75:06:43:3a:41:34:89:7a:98:c1:65:
83:37:ba:aa:0a:06:a2:3e:ed:15:72:fd:61:ad:9f:8a:c9:d1:
59:6d:8e:ad:6c:c0:cc:7e:da:19:7a:94:d2:32:54:c6:fc:65:
72:39:36:d2:58:82:9b:39:dc:79:63:80:47:12:23:48:c5:1e:
0a:d2:49:e1:c6:a6:d6:b7:65:9d:fd:26:2d:05:22:29:af:cf:
12:fb:65:06:a3:cc:70:3d:26:79:0b:68:18:82:80:72:24:50:
5d:18:5a:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 1 00:03:29 2023 by rpki-client on console-fra.rpki-client.org