Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/E8MyJs1RGBoWuGNzGG2ljT9tZ_Q.roa
File: E8MyJs1RGBoWuGNzGG2ljT9tZ_Q.roa (raw, json)
Hash identifier: i36qNJXRkgUFtNF6VG5CoIMtiSWO5wFnhOm9l9k5uy4=
Subject key identifier: 13:C3:32:26:CD:51:18:1A:16:B8:63:73:18:6D:A5:8D:3F:6D:67:F4
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 018B210EBC36BB28E12370D6187513D31F87
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/E8MyJs1RGBoWuGNzGG2ljT9tZ_Q.roa
Signing time: Wed 11 Oct 2023 23:24:55 +0000
ROA not before: Wed 11 Oct 2023 23:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 185.225.12.0/23 maxlen: 23
185.214.242.0/23 maxlen: 23
185.225.14.0/23 maxlen: 23
195.245.74.0/23 maxlen: 23
185.147.156.0/22 maxlen: 22
185.147.158.0/24 maxlen: 24
79.110.176.0/21 maxlen: 21
79.110.181.0/24 maxlen: 24
160.238.96.0/22 maxlen: 22
185.238.115.0/24 maxlen: 24
121.46.124.0/22 maxlen: 22
185.214.240.0/24 maxlen: 24
185.214.240.0/23 maxlen: 23
103.205.84.0/22 maxlen: 22
185.157.232.0/22 maxlen: 22
185.235.120.0/22 maxlen: 22
185.235.123.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
85.8.148.0/22 maxlen: 22
185.227.254.0/23 maxlen: 23
185.227.254.0/24 maxlen: 24
185.214.140.0/22 maxlen: 22
185.214.142.0/23 maxlen: 23
193.187.180.0/22 maxlen: 22
185.228.44.0/22 maxlen: 22
103.207.160.0/22 maxlen: 22
103.207.163.0/24 maxlen: 24
185.227.252.0/24 maxlen: 24
185.227.252.0/23 maxlen: 23
103.203.40.0/22 maxlen: 22
193.31.112.0/22 maxlen: 22
193.31.114.0/24 maxlen: 24
185.176.88.0/22 maxlen: 22
185.176.90.0/24 maxlen: 24
185.213.16.0/23 maxlen: 23
185.213.18.0/23 maxlen: 23
59.152.124.0/22 maxlen: 22
91.132.84.0/24 maxlen: 24
91.132.85.0/24 maxlen: 24
91.132.86.0/24 maxlen: 24
91.132.87.0/24 maxlen: 24
195.216.148.0/22 maxlen: 22
185.190.58.0/24 maxlen: 24
185.190.56.0/22 maxlen: 22
193.176.116.0/22 maxlen: 22
217.18.56.0/22 maxlen: 22
61.14.224.0/22 maxlen: 22
193.163.35.0/24 maxlen: 24
185.158.136.0/22 maxlen: 22
194.50.192.0/22 maxlen: 22
185.145.44.0/22 maxlen: 22
185.202.44.0/23 maxlen: 23
185.202.44.0/24 maxlen: 24
185.202.46.0/23 maxlen: 23
185.219.20.0/22 maxlen: 22
185.219.23.0/24 maxlen: 24
185.242.185.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.209.128.0/23 maxlen: 23
185.209.128.0/24 maxlen: 24
185.209.130.0/23 maxlen: 23
185.196.24.0/23 maxlen: 23
185.196.26.0/23 maxlen: 23
185.196.26.0/24 maxlen: 24
85.202.172.0/22 maxlen: 22
85.202.173.0/24 maxlen: 24
185.206.22.0/23 maxlen: 23
185.105.10.0/24 maxlen: 24
185.118.132.0/22 maxlen: 22
185.206.20.0/23 maxlen: 23
185.206.20.0/24 maxlen: 24
2a07:a900::/29 maxlen: 128
2a07:4580::/29 maxlen: 29
2a07:4580:b0d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:0e:bc:36:bb:28:e1:23:70:d6:18:75:13:d3:1f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 11 23:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13c33226cd51181a16b86373186da58d3f6d67f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:69:12:c1:ce:e9:4e:e0:04:04:df:d8:78:
90:af:0c:41:86:12:32:b0:1b:09:aa:5b:90:a6:be:
12:dc:b7:ea:56:b9:b2:c6:f5:0e:95:14:17:21:ad:
70:b6:b5:88:ef:d0:56:02:e1:c7:90:38:7a:e2:42:
a2:f0:01:27:cc:09:d4:57:a3:e2:18:50:e5:43:ba:
e3:30:a7:e5:aa:07:30:f7:69:33:f9:47:63:a0:52:
b4:fa:32:55:c9:f6:34:3f:33:59:fa:6c:90:bc:84:
db:7c:2d:6e:be:4f:6a:03:d8:61:59:e0:da:46:c5:
1e:e8:75:5e:cd:9e:19:6c:c3:5b:0b:85:62:9b:af:
85:e0:59:6c:9c:1b:1e:c3:55:05:2a:7b:bb:0b:84:
ad:e9:97:7c:d6:2c:79:07:94:58:9a:ef:39:e4:09:
5c:e2:bc:a3:a8:9a:49:bb:39:c8:70:9f:77:e7:41:
a3:10:5f:a3:41:2b:c4:0f:a8:22:f5:80:94:41:a1:
62:a1:83:1e:3a:3a:23:97:e1:23:0e:26:7f:e1:c8:
a7:b4:ff:ca:f7:9b:f7:5d:99:e5:9f:c5:4c:9a:f6:
3a:bf:5a:b1:cb:43:9a:49:f0:2a:c5:bd:7e:32:b9:
95:c4:39:d5:7c:0b:13:19:80:09:d7:ec:5b:25:28:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:32:26:CD:51:18:1A:16:B8:63:73:18:6D:A5:8D:3F:6D:67:F4
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/E8MyJs1RGBoWuGNzGG2ljT9tZ_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.152.124.0/22
61.14.224.0/22
79.110.176.0/21
85.8.148.0/22
85.202.172.0/22
91.132.84.0/22
103.203.40.0/22
103.205.84.0/22
103.207.160.0/22
121.46.124.0/22
160.238.96.0/22
185.105.10.0/24
185.118.132.0/22
185.145.44.0/22
185.147.156.0/22
185.157.232.0/22
185.158.136.0/22
185.176.88.0/22
185.190.56.0/22
185.196.24.0/22
185.202.44.0/22
185.206.20.0/22
185.209.128.0/22
185.213.16.0/22
185.214.140.0/22
185.214.240.0/22
185.219.20.0/22
185.225.12.0/22
185.227.252.0/22
185.228.44.0/22
185.235.120.0/22
185.238.115.0/24
185.242.185.0/24
193.31.112.0/22
193.163.35.0/24
193.176.116.0/22
193.187.180.0/22
194.50.192.0/22
195.216.148.0/22
195.245.74.0/23
217.18.56.0/22
IPv6:
2a07:4580::/29
2a07:a900::/29
Signature Algorithm: sha256WithRSAEncryption
7c:dc:91:99:a7:3a:56:a4:cb:62:ec:45:64:f8:56:f5:3d:14:
84:c0:9f:c2:cd:ae:3a:2d:aa:a3:db:a5:78:4f:08:75:b5:03:
87:04:d3:f3:00:1a:e1:d9:f8:e1:a9:6a:84:75:16:75:39:c3:
3e:4a:47:b7:18:fc:82:55:da:c7:df:75:3c:28:04:3a:7d:f9:
e9:08:46:34:34:74:f4:3e:91:56:16:eb:ad:21:97:9e:f0:26:
13:56:c0:e0:dc:64:ad:1f:e9:e9:4c:75:b0:91:34:71:c9:db:
af:aa:4e:38:8a:eb:b0:db:60:47:a3:3a:0f:bb:24:5a:ae:40:
5c:d6:2a:cb:01:ed:27:8a:34:be:2f:1f:de:e7:cd:52:0e:9f:
f1:1c:44:27:78:8e:e9:8c:a0:f4:d2:78:2b:d9:52:d4:fc:ad:
9e:fd:9f:9a:7a:a9:f5:1a:c0:75:c4:74:2f:fa:3b:53:2a:dc:
f1:b5:c0:7c:13:79:7c:d6:19:56:85:3a:da:ca:11:b6:91:81:
e8:70:8a:dd:25:a4:b5:9d:ab:c9:ad:1a:59:80:69:8b:6f:43:
2b:05:a4:75:c7:b5:05:49:53:14:89:31:59:0d:7e:a5:03:bf:
5b:85:4a:7a:8d:53:9a:a3:e2:1c:73:c9:92:89:56:86:6f:02:
ae:8d:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 20:17:05 2023 by rpki-client on console-ams.rpki-client.org