Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/GjuZ8Nr-kJVObwFI-bwoX24oCY4.roa
File: GjuZ8Nr-kJVObwFI-bwoX24oCY4.roa (raw, json)
Hash identifier: /3hm3n/A6qMREnbyxRAQT4apBAcATSkVCRqtXgNEznI=
Subject key identifier: 1A:3B:99:F0:DA:FE:90:95:4E:6F:01:48:F9:BC:28:5F:6E:28:09:8E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01860F5E23829F7183D8C53B6DF6E5FC11F8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/GjuZ8Nr-kJVObwFI-bwoX24oCY4.roa
Signing time: Wed 01 Feb 2023 23:44:33 +0000
ROA not before: Wed 01 Feb 2023 23:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
78.108.216.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.31.140.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
193.105.184.0/24 maxlen: 24
45.90.144.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
45.90.145.0/24 maxlen: 24
45.90.146.0/24 maxlen: 24
77.83.240.0/22 maxlen: 24
45.81.20.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
83.143.116.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.234.74.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
2a0b:7080:10::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b82::/44 maxlen: 44
2a0b:b85::/32 maxlen: 32
2a0b:b87:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:b87:ffda::/48 maxlen: 48
2a0d:77c7::/32 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b84::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Apr 2023 12:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0f:5e:23:82:9f:71:83:d8:c5:3b:6d:f6:e5:fc:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Feb 1 23:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3b99f0dafe90954e6f0148f9bc285f6e28098e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:27:28:eb:42:e8:e9:61:7a:fc:3a:88:99:
a1:d9:9b:d3:ef:43:94:3a:11:2b:62:37:e3:e8:be:
dc:5c:63:89:ea:b5:eb:d3:46:9a:cb:a6:06:48:28:
e3:62:7a:15:8b:f2:08:c5:f7:8c:44:d4:a3:56:ef:
ec:a9:37:c0:07:37:98:c5:83:5e:85:10:d3:f0:c9:
05:00:4e:9b:c7:51:d4:35:94:02:6b:42:1f:0b:b2:
ac:6f:bb:28:6e:13:c3:8c:7c:90:0d:a7:83:1c:0a:
c2:71:ea:51:ee:4f:82:f9:2e:95:b3:fa:b3:c3:63:
38:32:c7:e6:af:db:67:81:09:f2:c8:0d:0c:9e:d9:
ef:b5:22:a6:d4:f0:ff:a6:72:c9:0e:db:1c:ae:c9:
15:ed:15:44:6a:f5:c4:1d:75:fe:b9:d4:4b:9b:da:
64:05:1e:62:bb:b8:1c:ea:a6:10:71:41:9d:04:ac:
91:6e:cb:ac:e1:23:f6:44:c6:6f:fd:07:80:2b:79:
7e:ec:f8:71:56:f4:40:31:36:8c:88:1f:00:28:fa:
5a:53:fb:3b:7f:fe:0d:48:20:86:d0:97:35:73:ec:
14:55:df:b3:2b:e3:6b:bc:5a:0e:25:16:8e:92:dc:
36:62:94:3b:04:90:02:24:fc:36:bf:b2:2d:77:ee:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:99:F0:DA:FE:90:95:4E:6F:01:48:F9:BC:28:5F:6E:28:09:8E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/GjuZ8Nr-kJVObwFI-bwoX24oCY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.184.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::/31
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c7::/32
Signature Algorithm: sha256WithRSAEncryption
d9:0f:c5:58:ce:9f:13:c5:94:fa:38:10:44:b6:29:24:20:44:
fb:44:1e:49:d1:53:aa:04:48:34:ca:57:a1:48:17:f9:95:b5:
c4:be:68:62:61:7c:ad:76:c3:f2:92:4c:08:98:56:49:7f:2f:
34:c9:c9:c1:e0:6e:5d:c2:56:59:75:43:ae:40:84:f9:ef:69:
00:3a:bf:ac:91:5b:00:ff:72:53:86:46:d9:ab:56:25:14:e3:
48:36:a2:b6:4a:4c:65:74:a5:bb:30:7e:34:e7:80:c7:66:f8:
24:e9:ba:45:5d:2f:b2:ec:63:58:73:1b:09:dd:1b:d4:d7:08:
39:3c:ae:43:5e:38:d0:da:9c:6b:c6:36:a8:ad:c9:93:4d:87:
8a:32:31:e5:f0:e5:0c:dd:86:2d:2d:31:60:fd:eb:d2:3d:c6:
fe:be:4a:eb:4e:0b:51:2b:29:b3:ed:15:e2:4d:23:69:a5:7a:
6b:2f:8c:38:8b:56:56:50:2e:84:7f:f7:9d:71:39:f7:c6:2a:
d2:87:11:05:f2:cf:f5:d2:49:0a:f0:b7:29:ab:2b:6c:09:a1:
12:5d:40:59:a9:05:4e:21:a0:c8:0f:f6:04:73:bc:dd:b2:d4:
ea:e7:eb:d0:58:55:dd:6a:db:11:a7:08:7b:43:56:1f:97:71:
99:09:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org