Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gTgIFJVoJwA1pU4rdHvCu9hCYik.roa
File: gTgIFJVoJwA1pU4rdHvCu9hCYik.roa (raw, json)
Hash identifier: C+s6kRQCXJ5+hR+mvteNPh1Gj6pchsntQNTHOaALVmE=
Subject key identifier: 81:38:08:14:95:68:27:00:35:A5:4E:2B:74:7B:C2:BB:D8:42:62:29
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018D1381DCC6C25BBB0E6AAA6BCE7E63B8A1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gTgIFJVoJwA1pU4rdHvCu9hCYik.roa
Signing time: Tue 16 Jan 2024 18:21:34 +0000
ROA not before: Tue 16 Jan 2024 18:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.144.0/22 maxlen: 24
45.90.145.0/24 maxlen: 24
45.90.146.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.216.0/22 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/22 maxlen: 24
83.143.116.0/24 maxlen: 24
83.143.119.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.105.184.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.31.141.0/24 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
194.56.226.0/24 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0d:77c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Mar 2024 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:81:dc:c6:c2:5b:bb:0e:6a:aa:6b:ce:7e:63:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 16 18:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=813808149568270035a54e2b747bc2bbd8426229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:0e:f2:26:86:c6:23:74:bc:e8:06:eb:51:
1c:70:83:db:62:b8:e7:52:00:fc:d6:46:2c:7d:ba:
1a:8e:05:09:8a:52:2a:a2:da:2b:33:06:db:73:05:
d9:04:2c:92:64:4b:b6:8e:7f:9b:94:88:22:cb:2b:
28:81:04:c3:71:d4:17:48:fb:79:c5:f3:96:4a:5f:
12:1b:3a:da:12:86:76:5c:2e:72:21:63:3d:0b:51:
51:ce:e7:d1:d5:93:06:d0:91:50:e8:1b:0d:15:62:
e1:41:18:9f:65:19:2c:85:dd:97:5d:f5:2b:2c:ad:
3a:01:46:99:91:fb:38:c4:59:56:42:35:b9:14:88:
d7:ae:2f:6f:05:35:18:a6:f8:4b:54:d3:ae:b9:ef:
3b:74:a8:ae:61:1b:57:62:44:32:85:03:f8:86:09:
ad:b9:15:e1:2a:51:9b:8b:b1:16:40:c2:02:83:a2:
aa:70:4b:49:ad:38:97:6d:79:54:cf:23:af:5a:0d:
85:a0:d2:f7:a6:6b:87:4d:89:7b:a8:e1:d8:33:17:
9d:d1:d4:dd:ba:ca:56:9b:ad:87:f7:99:59:95:18:
2f:cc:9a:d1:2b:a3:3e:01:75:0d:ac:5f:34:4f:84:
b5:4e:ce:69:19:ba:28:9a:b9:98:c1:b4:92:48:7d:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:38:08:14:95:68:27:00:35:A5:4E:2B:74:7B:C2:BB:D8:42:62:29
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gTgIFJVoJwA1pU4rdHvCu9hCYik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.184.0/24
193.221.192.0/22
194.31.141.0/24
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:ff:ffff:ffff:ffff:ffff:ffff
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:c6:a7:44:f5:bd:8a:a9:a7:b1:cb:16:d3:63:f7:79:c0:10:
06:79:c5:8c:bc:d5:c3:0f:a5:6a:a6:dc:8f:6b:d1:c4:15:6f:
07:df:8d:b0:74:bd:ca:54:e4:92:f5:2a:af:8d:ac:92:a6:9e:
98:de:68:42:a3:44:87:80:fd:7a:d4:61:58:98:bf:a2:97:af:
4d:4d:0d:5c:6d:b4:52:31:a3:b3:25:c9:15:50:3f:35:d9:02:
dd:4d:59:04:d4:00:ad:62:d1:6f:be:fd:2e:f8:b9:9f:a5:dd:
67:e6:c1:33:fa:10:c0:9d:13:47:73:f0:03:d5:d7:0a:93:f2:
17:6d:11:bb:6e:9f:30:85:c7:4e:da:3b:8c:a6:9e:dc:ba:2c:
66:d1:1a:e3:6a:13:e5:19:58:4e:02:08:89:87:d4:e0:bf:8b:
28:f5:be:4e:58:28:f1:61:d2:d0:a7:20:67:66:bc:e8:a7:1e:
1a:28:c0:f9:88:7e:7e:fe:10:27:fc:c3:f5:d4:d0:ae:a0:67:
dc:79:2f:17:2f:1c:c7:d1:d0:bb:ca:82:11:88:d5:f7:d8:a8:
e7:a0:36:ae:f4:58:1c:5d:fb:65:35:39:a4:fe:18:08:1f:95:
81:1f:2c:ee:69:88:49:40:6e:40:48:c8:8e:c7:ce:8f:a8:0f:
16:47:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org