Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CvsaF68nn9SO1XKqZDuj0PJJi1Q.roa
File: CvsaF68nn9SO1XKqZDuj0PJJi1Q.roa (raw, json)
Hash identifier: 6G0HCMwJMvPaHiPcUsz0VpcT/XO6r9GQ5TUXRSiPpAQ=
Subject key identifier: 0A:FB:1A:17:AF:27:9F:D4:8E:D5:72:AA:64:3B:A3:D0:F2:49:8B:54
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018ACC94C8C7AF6946405D6634F89D24C30E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CvsaF68nn9SO1XKqZDuj0PJJi1Q.roa
Signing time: Mon 25 Sep 2023 13:43:37 +0000
ROA not before: Mon 25 Sep 2023 13:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
45.154.196.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
45.90.144.0/22 maxlen: 24
194.56.226.0/24 maxlen: 24
194.56.224.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
45.90.145.0/24 maxlen: 24
45.90.146.0/24 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
83.143.116.0/24 maxlen: 24
83.143.116.0/22 maxlen: 24
83.143.119.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
78.108.216.0/22 maxlen: 24
78.108.217.0/24 maxlen: 24
194.31.140.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
193.105.184.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
185.242.224.0/22 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
2a0b:7080:10::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b86::/40 maxlen: 48
2a0b:b85::/32 maxlen: 32
2a0b:b87:ff12::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0d:77c0::/29 maxlen: 32
2a0b:b82::/44 maxlen: 44
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:b87:ffda::/48 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:b84::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:94:c8:c7:af:69:46:40:5d:66:34:f8:9d:24:c3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 25 13:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0afb1a17af279fd48ed572aa643ba3d0f2498b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:e8:86:46:09:86:89:ed:0b:c6:fb:28:38:
13:52:53:b4:88:d9:73:c7:42:61:01:f5:e9:78:eb:
2d:1b:cb:27:2a:85:e7:33:a8:8b:86:28:08:6c:68:
87:98:4e:2c:1f:6b:04:0d:ed:17:71:35:85:16:1e:
ce:70:1e:f9:3b:4e:7e:97:26:f5:d4:b6:4b:e6:52:
3c:e2:45:a0:31:b7:6e:fc:04:57:83:55:d4:1d:a4:
41:6d:d8:e7:f4:66:31:04:a4:64:9b:35:09:31:c8:
e2:b0:7f:53:51:2e:57:57:3e:12:55:eb:1f:23:44:
2e:23:7b:99:66:f1:90:c8:7f:c2:3e:40:35:27:0d:
24:a4:69:49:11:28:cb:c5:a5:ff:c2:0e:b9:f0:48:
04:44:aa:dc:88:15:06:40:ff:1d:d7:cb:b9:61:c8:
99:00:a3:d8:7e:fc:39:b4:38:b5:12:5c:02:37:0f:
ad:15:56:a4:bf:cf:bd:a7:19:c1:e4:f1:88:f2:c6:
7f:eb:96:18:39:c9:ea:e2:da:f8:5b:6b:69:44:b5:
4a:ec:0c:6a:2e:67:2c:a8:c3:df:b0:29:7a:8e:27:
8b:a3:89:82:02:1a:a8:ef:d4:dd:4f:50:ac:1a:f9:
40:5c:6b:4d:4e:cf:93:d9:3b:e6:66:65:f6:1d:91:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:1A:17:AF:27:9F:D4:8E:D5:72:AA:64:3B:A3:D0:F2:49:8B:54
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CvsaF68nn9SO1XKqZDuj0PJJi1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.184.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:ff:ffff:ffff:ffff:ffff:ffff
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:51:ff:d1:8a:6d:dc:44:22:13:83:a3:9d:59:6e:54:54:a2:
6a:fa:d2:5a:41:2e:e7:d5:79:31:83:36:18:d9:70:f1:43:81:
ae:8c:48:e7:d7:d2:90:51:e6:36:6a:3b:e0:47:b6:ff:3f:f9:
23:4d:c7:1e:c9:46:67:f7:52:2b:7b:32:e3:01:3c:b6:4f:05:
76:bb:a5:42:ae:33:7a:43:8d:e3:1a:12:70:42:cc:91:35:0e:
a3:fe:14:6e:8b:0a:d1:e8:3c:fc:97:d6:0b:a4:40:84:d4:73:
6b:95:e1:97:5e:4f:43:94:16:04:0c:41:26:57:9b:bc:71:78:
ac:3f:b6:8e:d6:19:40:6b:38:66:e3:e3:09:be:63:60:65:e9:
c1:2a:ee:3b:83:1f:43:e3:3b:cc:aa:dc:98:ca:57:75:c0:d5:
f0:5c:6f:c6:a0:7d:66:5b:a3:0d:94:9e:eb:e5:ad:5e:b1:c6:
ac:b7:29:ce:89:d2:79:c8:fb:82:78:92:60:f3:b1:7d:dd:38:
3a:1c:a5:c4:8d:1e:62:3a:2d:55:27:6c:7b:b5:32:1f:ba:99:
f9:1b:bb:0f:5c:0a:be:3e:25:5b:a1:ad:7e:04:f8:e4:42:0b:
90:77:b6:94:f7:74:e1:35:7d:dc:50:aa:da:79:eb:31:a3:3a:
90:51:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 19 21:25:49 2023 by rpki-client on console-fra.rpki-client.org