Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/Zi_VkClxzzP1pbcgyVQ2boQ_R1k.roa
File: Zi_VkClxzzP1pbcgyVQ2boQ_R1k.roa (raw, json)
Hash identifier: SlxA9sRtXxFaBaGzI2ec+QwRgO+QYV7YJE74vVw30qc=
Subject key identifier: 66:2F:D5:90:29:71:CF:33:F5:A5:B7:20:C9:54:36:6E:84:3F:47:59
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 018CC6B917F6946AFD6DF54EEFABA1B29882
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/Zi_VkClxzzP1pbcgyVQ2boQ_R1k.roa
Signing time: Mon 01 Jan 2024 20:31:08 +0000
ROA not before: Mon 01 Jan 2024 20:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20773
IP address blocks: 92.204.162.0/24 maxlen: 24
92.204.186.0/24 maxlen: 24
92.204.194.0/23 maxlen: 23
85.195.76.0/24 maxlen: 24
85.195.75.0/24 maxlen: 24
85.195.85.0/24 maxlen: 24
85.195.83.0/24 maxlen: 24
85.195.89.0/24 maxlen: 24
85.195.91.0/24 maxlen: 24
85.195.90.0/24 maxlen: 24
85.195.86.0/24 maxlen: 24
85.195.88.0/24 maxlen: 24
185.19.218.0/24 maxlen: 24
185.19.217.0/24 maxlen: 24
185.19.219.0/24 maxlen: 24
185.19.216.0/24 maxlen: 24
37.61.212.0/24 maxlen: 24
37.61.214.0/24 maxlen: 24
37.61.215.0/24 maxlen: 24
37.61.223.0/24 maxlen: 24
37.61.221.0/24 maxlen: 24
146.0.226.0/24 maxlen: 24
146.0.232.0/24 maxlen: 24
146.0.228.0/24 maxlen: 24
146.0.227.0/24 maxlen: 24
146.0.230.0/24 maxlen: 24
146.0.235.0/24 maxlen: 24
146.0.234.0/24 maxlen: 24
146.0.237.0/24 maxlen: 24
146.0.236.0/24 maxlen: 24
146.0.245.0/24 maxlen: 24
146.0.249.0/24 maxlen: 24
146.0.251.0/24 maxlen: 24
146.0.250.0/24 maxlen: 24
146.0.247.0/24 maxlen: 24
146.0.255.0/24 maxlen: 24
85.195.96.0/24 maxlen: 24
85.195.98.0/24 maxlen: 24
85.195.93.0/24 maxlen: 24
85.195.92.0/24 maxlen: 24
85.195.95.0/24 maxlen: 24
85.195.103.0/24 maxlen: 24
85.195.100.0/24 maxlen: 24
85.195.99.0/24 maxlen: 24
85.195.102.0/24 maxlen: 24
85.195.107.0/24 maxlen: 24
85.195.109.0/24 maxlen: 24
85.195.110.0/24 maxlen: 24
85.195.114.0/24 maxlen: 24
85.195.116.0/24 maxlen: 24
85.195.115.0/24 maxlen: 24
85.195.120.0/24 maxlen: 24
85.195.119.0/24 maxlen: 24
85.195.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 11:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:17:f6:94:6a:fd:6d:f5:4e:ef:ab:a1:b2:98:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662fd5902971cf33f5a5b720c954366e843f4759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:61:78:1c:7b:b3:9e:05:ef:4b:b7:84:a4:
ec:67:0a:d1:76:9d:c0:5e:da:fd:1a:3b:f3:eb:13:
2c:31:0c:e7:b0:37:ff:b3:d2:ab:1d:4c:63:24:be:
60:6e:21:b6:59:d3:fd:31:d1:6c:ba:40:af:61:51:
0a:9c:9b:19:8d:40:30:af:d3:ad:08:8e:2a:f7:3f:
46:ef:7e:f2:87:57:05:5a:81:4d:1a:66:cc:fd:ab:
01:8a:6f:90:e0:17:78:08:83:e5:90:f3:63:a7:4c:
37:27:6a:22:fd:29:73:bd:71:38:cb:2b:bd:4d:38:
1e:3b:38:a0:46:c1:c7:99:7d:6e:91:2a:8c:5b:51:
8f:da:6e:89:5b:38:c3:8c:d4:5a:43:2f:a0:59:84:
ad:1e:e8:fd:f0:04:53:73:04:83:4d:4c:d9:6a:dd:
40:4c:9e:0d:00:3d:b0:e0:e7:dd:98:9b:51:1b:dc:
fc:e1:40:6d:70:18:3d:dc:c2:13:c2:04:1b:1f:35:
d2:e1:99:99:b3:db:a9:5d:7d:a5:0c:b2:f1:a6:ec:
9c:68:e9:e4:f0:29:21:22:54:fc:09:32:5d:2f:f5:
bd:e3:73:aa:4a:78:eb:f8:32:86:a2:25:8a:c0:8b:
00:08:72:6d:0b:fe:a5:c0:f8:ce:e2:3c:c2:eb:bd:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2F:D5:90:29:71:CF:33:F5:A5:B7:20:C9:54:36:6E:84:3F:47:59
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/Zi_VkClxzzP1pbcgyVQ2boQ_R1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.212.0/24
37.61.214.0/23
37.61.221.0/24
37.61.223.0/24
85.195.75.0-85.195.76.255
85.195.83.0/24
85.195.85.0-85.195.86.255
85.195.88.0-85.195.93.255
85.195.95.0-85.195.96.255
85.195.98.0-85.195.100.255
85.195.102.0/23
85.195.107.0/24
85.195.109.0-85.195.110.255
85.195.114.0-85.195.116.255
85.195.119.0-85.195.120.255
85.195.127.0/24
92.204.162.0/24
92.204.186.0/24
92.204.194.0/23
146.0.226.0-146.0.228.255
146.0.230.0/24
146.0.232.0/24
146.0.234.0-146.0.237.255
146.0.245.0/24
146.0.247.0/24
146.0.249.0-146.0.251.255
146.0.255.0/24
185.19.216.0/22
Signature Algorithm: sha256WithRSAEncryption
20:28:80:ec:8d:aa:4c:ac:91:b8:4d:f3:c2:48:ef:c2:63:58:
f1:cf:97:d8:d9:2b:22:25:2b:bb:9b:28:01:53:12:38:53:2f:
82:cf:58:de:93:f3:d5:f6:96:f8:bc:ef:0c:d2:81:41:2a:ab:
9e:b8:79:32:37:12:2e:d4:dd:41:b4:59:ba:26:14:30:4d:87:
65:35:f3:de:86:48:86:2d:61:77:3b:1a:e1:a8:75:7e:b6:43:
55:30:0f:ab:92:d2:0d:f6:70:f4:1e:54:24:b7:8e:8f:2a:91:
6e:c5:68:f1:bc:2f:2d:78:b4:f7:6c:ea:3d:74:e6:3a:88:e7:
a8:f9:44:02:43:33:0a:3f:57:99:56:a1:78:72:0a:22:2c:64:
84:d6:61:a8:c3:74:e4:0c:f2:ab:f2:02:38:01:67:c8:96:43:
71:96:a6:51:f6:f8:c4:c4:08:7b:80:30:5c:7c:b8:9a:05:35:
2f:07:02:2a:62:e7:6d:c0:23:0d:14:90:b7:36:d7:69:0b:8d:
9b:56:30:00:34:9a:4b:47:87:f0:8e:3a:6f:59:35:43:e5:16:
cb:e4:12:1e:02:98:69:52:95:82:ab:27:8a:0a:c7:54:21:cd:
90:b2:03:57:d2:5b:8f:3a:e9:a0:04:23:3d:c9:3a:81:53:bd:
3f:b0:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:16 2024 by rpki-client on console-ams.rpki-client.org