Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dCtpYze9rAUxdCEuL5MB6eFg9PA.roa
File: dCtpYze9rAUxdCEuL5MB6eFg9PA.roa (raw, json)
Hash identifier: fFKzPTChNRTXQPPREhDT/Yuas9vrrkppHbkMhYIxb9c=
Subject key identifier: 74:2B:69:63:37:BD:AC:05:31:74:21:2E:2F:93:01:E9:E1:60:F4:F0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018F636CF8F6CE8332A3DB1B20B3B1BC9407
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dCtpYze9rAUxdCEuL5MB6eFg9PA.roa
Signing time: Fri 10 May 2024 16:53:57 +0000
ROA not before: Fri 10 May 2024 16:53:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 2.56.0.0/22 maxlen: 22
5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
45.86.16.0/21 maxlen: 21
45.143.44.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
85.159.117.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
89.40.161.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
91.242.70.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 24
91.242.75.0/24 maxlen: 24
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
91.242.123.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
91.242.125.0/24 maxlen: 24
91.242.126.0/24 maxlen: 24
91.242.127.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.40.105.0/24 maxlen: 24
185.173.244.0/24 maxlen: 24
185.173.247.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/24 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.107.0/24 maxlen: 24
195.138.108.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.114.0/24 maxlen: 24
195.138.116.0/24 maxlen: 24
195.138.118.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 14 May 2024 15:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:6c:f8:f6:ce:83:32:a3:db:1b:20:b3:b1:bc:94:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 10 16:53:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=742b696337bdac053174212e2f9301e9e160f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:34:f9:53:7b:01:d6:e3:7e:0c:1b:72:3c:
20:12:fd:55:1d:fb:28:e3:08:55:02:50:7e:bf:ed:
41:ee:62:18:a5:58:2b:b8:65:92:bb:12:2d:38:c4:
ed:89:ab:8d:5d:2b:ab:37:7f:ad:4d:db:8a:7f:00:
47:5a:19:0e:6b:4b:4c:76:02:af:c1:c8:c9:67:f8:
b7:76:2e:52:b7:a8:ab:49:e8:75:29:3a:49:bb:58:
be:6a:1f:e3:7f:6e:28:46:48:30:dc:c9:80:ba:7a:
77:cf:f0:63:89:30:88:d6:f2:ff:08:62:65:51:57:
53:2a:ee:f1:49:94:68:45:fb:29:99:bb:c5:dd:c6:
fd:be:07:41:f2:8a:cb:ba:aa:0e:bd:c9:c3:7c:81:
96:26:07:8a:a2:69:d0:7b:f4:a0:eb:ca:4c:7d:a9:
90:2b:6e:35:2a:fe:f7:89:7f:64:8c:c5:0b:7d:da:
f3:aa:4e:5f:42:04:7a:df:3a:55:c1:ed:ac:0c:f9:
17:74:d9:4f:9a:4c:8c:b8:04:20:97:26:f8:3c:d1:
43:ae:95:74:48:76:6b:1e:d5:68:6a:2e:87:1e:ee:
91:4d:f8:4f:78:57:31:3d:17:3d:fd:d1:be:e7:21:
4d:bc:c6:a7:0c:d3:cb:19:f1:b1:21:dd:23:2a:11:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:69:63:37:BD:AC:05:31:74:21:2E:2F:93:01:E9:E1:60:F4:F0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/dCtpYze9rAUxdCEuL5MB6eFg9PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
5.180.4.0/22
5.182.28.0/22
45.67.117.0/24
45.86.16.0/21
45.143.44.0/22
45.151.196.0/22
85.159.117.0/24
89.39.242.0/24
89.40.161.0/24
91.239.59.0/24
91.242.70.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
91.242.105.0/24
91.242.123.0-91.242.127.255
94.231.198.0/24
176.126.223.0/24
178.175.176.0/22
185.40.105.0/24
185.173.244.0/24
185.173.247.0/24
185.180.145.0/24
194.50.200.0/23
194.50.206.0/23
195.138.103.0-195.138.108.255
195.138.111.0-195.138.112.255
195.138.114.0/24
195.138.116.0/24
195.138.118.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
Signature Algorithm: sha256WithRSAEncryption
9b:34:0e:f2:30:9a:83:bb:21:25:ff:c9:66:dc:73:4d:f9:a0:
97:d3:ec:f0:c4:e8:64:4c:59:c9:54:ff:82:c7:e1:06:39:00:
5e:75:e8:19:93:87:e2:b7:f8:27:ec:39:eb:d9:64:8c:22:45:
69:c1:d9:b0:1c:d5:be:74:df:30:b1:e6:bd:fe:72:8e:a4:af:
f8:1d:a9:11:c3:cf:c7:63:a1:f9:e7:8a:27:a9:bb:f0:39:f3:
04:ec:e1:70:16:d8:29:fa:75:81:fd:d8:3b:d2:8c:02:db:c8:
ef:5d:c6:7f:83:69:ad:be:e2:50:3f:39:05:78:79:6e:60:2a:
ac:37:b0:e7:fe:c6:2a:ad:5f:40:2d:6f:f4:fb:9d:72:dd:b0:
fb:b1:cd:0b:c1:2b:9b:d1:0d:da:c7:18:05:27:42:f7:7f:2b:
08:4e:83:0b:23:b3:72:67:12:12:28:ef:bb:8b:f9:e5:8f:f9:
68:6d:34:cc:a6:bc:8e:ee:9d:5f:d6:8f:c7:a5:1f:54:b6:b4:
1f:75:da:da:21:82:5d:f1:80:6a:9d:b5:10:22:61:95:34:e3:
c5:d0:f9:2a:9d:08:5c:31:62:af:33:47:bb:56:b4:20:27:47:
dd:48:4e:8c:bc:44:0a:62:e6:19:f5:8a:7c:7f:f2:b9:d6:ea:
72:59:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org