Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/i9eb1wxo9fno5rtGoOs-PZ3fSr4.roa
File: i9eb1wxo9fno5rtGoOs-PZ3fSr4.roa (raw, json)
Hash identifier: ZjQc6KH+joV234aDIx0JaViID4mlZcDOZCr/fBB4smc=
Subject key identifier: 8B:D7:9B:D7:0C:68:F5:F9:E8:E6:BB:46:A0:EB:3E:3D:9D:DF:4A:BE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185C602A4F90ED8DF02EB82113727EC7600
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/i9eb1wxo9fno5rtGoOs-PZ3fSr4.roa
Signing time: Wed 18 Jan 2023 17:52:20 +0000
ROA not before: Wed 18 Jan 2023 17:52:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
78.108.216.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.31.140.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
193.105.184.0/24 maxlen: 24
45.90.144.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
45.90.146.0/24 maxlen: 24
77.83.240.0/22 maxlen: 24
45.81.20.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
83.143.116.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.234.74.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
193.34.76.0/22 maxlen: 24
2a0b:7080:10::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b82::/44 maxlen: 44
2a0b:b85::/32 maxlen: 32
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:30::/44 maxlen: 48
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:b87:ffda::/48 maxlen: 48
2a0d:77c7::/32 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b84::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 22 Jan 2023 20:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:02:a4:f9:0e:d8:df:02:eb:82:11:37:27:ec:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 18 17:52:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd79bd70c68f5f9e8e6bb46a0eb3e3d9ddf4abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:7a:e0:ab:b3:77:c1:d0:af:73:7b:4c:1e:
31:b4:4f:7d:06:90:a5:eb:05:30:cf:6f:75:f0:b1:
ed:34:c6:7a:70:16:f1:67:f3:2c:59:20:a9:1f:7a:
81:6e:fb:06:84:6a:93:d2:f8:d0:b9:32:60:69:66:
63:71:1f:ad:93:58:40:5a:e0:cb:50:7c:e1:8c:f2:
3c:7b:f5:a0:39:14:af:f7:36:dd:57:e8:e0:2c:0d:
b6:01:99:98:3f:19:b7:8c:ec:3b:1a:63:d5:fe:50:
df:01:10:53:0d:e1:40:5e:af:a9:7b:75:06:0f:f3:
d8:2d:3b:48:9d:30:05:e7:85:df:7f:86:f3:97:8a:
82:ac:d1:ff:49:54:df:c6:81:9f:53:35:3a:a5:31:
01:2e:2c:ca:b8:97:0b:62:63:d7:3f:4f:34:ab:1c:
d6:1a:9a:2a:d0:35:3c:63:68:52:ba:9f:87:bb:d0:
68:de:a5:71:43:46:85:85:11:18:68:e7:1a:8e:a8:
e4:73:2f:f0:16:b2:b1:4a:7b:cb:42:2c:46:e2:79:
c9:8a:2c:f6:25:50:93:d6:57:4c:15:d5:7e:d8:d0:
60:9c:13:c8:ae:fa:db:8d:53:7c:6c:3c:d4:d7:f4:
f6:66:cb:ac:f7:07:a2:ac:44:a2:15:76:6d:21:5e:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D7:9B:D7:0C:68:F5:F9:E8:E6:BB:46:A0:EB:3E:3D:9D:DF:4A:BE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/i9eb1wxo9fno5rtGoOs-PZ3fSr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.184.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::/31
2a0b:b87:ffb4::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0d:77c7::/32
Signature Algorithm: sha256WithRSAEncryption
9c:76:a5:8a:83:57:af:95:a1:9d:08:a3:c5:1d:82:99:32:e7:
55:f5:82:72:33:5d:75:da:bc:53:4c:22:e1:d9:0d:7b:10:4a:
b9:f4:7c:db:49:72:f6:ad:79:9a:f6:a9:a1:7c:3a:fe:4f:94:
3d:6b:2a:3e:af:c7:18:aa:45:87:a9:45:e4:ff:f0:fd:e5:97:
ec:12:f3:fb:bd:34:e0:bb:02:39:6b:4a:6b:8b:a2:1d:21:63:
09:87:5a:45:a5:b4:bc:c8:bf:cb:6e:00:a4:84:56:14:aa:41:
34:ee:74:9a:54:15:64:17:6d:41:27:f6:5c:4a:5e:cf:62:d9:
8f:51:7a:fc:27:5d:1c:d5:46:6f:1e:1c:70:52:50:55:3d:46:
61:7d:db:ca:28:1a:bc:ee:d5:2b:da:4f:3b:53:a5:a5:da:ea:
8e:0d:c0:5d:95:30:20:1e:42:c4:4b:13:d4:a2:2c:e8:13:3a:
ed:e4:5b:e5:7f:75:30:42:b5:36:e6:bd:d9:39:03:dc:38:52:
8a:8e:ce:88:ff:1c:6b:ec:29:5b:27:89:99:cb:de:89:a2:91:
f5:e8:0a:90:72:24:5a:6e:14:8a:b7:7a:d3:ba:cd:6f:f3:37:
f2:29:a9:bd:8b:9f:6c:67:6c:77:65:e9:d5:0a:18:21:8a:96:
96:86:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org