Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Jo2fhIV6k9wu_LflYe8_Mpf-pP4.roa
File: Jo2fhIV6k9wu_LflYe8_Mpf-pP4.roa (raw, json)
Hash identifier: boF7A4x1UC5KwWIN+jmn8NlVYa3iF7WvhQTfGGxUz24=
Subject key identifier: 26:8D:9F:84:85:7A:93:DC:2E:FC:B7:E5:61:EF:3F:32:97:FE:A4:FE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01874671C8BDF3402A0CCE7EA13650E7401C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Jo2fhIV6k9wu_LflYe8_Mpf-pP4.roa
Signing time: Mon 03 Apr 2023 09:27:54 +0000
ROA not before: Mon 03 Apr 2023 09:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.87.120.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
193.35.153.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
91.194.55.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.254.30.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
194.62.52.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
160.20.109.0/24 maxlen: 24
160.20.108.0/24 maxlen: 24
109.236.48.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
2a0b:2780::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
2a05:bf00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:71:c8:bd:f3:40:2a:0c:ce:7e:a1:36:50:e7:40:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 3 09:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=268d9f84857a93dc2efcb7e561ef3f3297fea4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:35:a7:58:3e:81:f6:16:e2:b6:fe:e2:39:
4b:40:98:9e:4c:4c:0c:21:8e:42:02:f2:30:99:1f:
a4:98:a9:74:3f:5c:f8:d4:ad:0d:48:41:0f:b8:a5:
e6:3d:27:1b:75:80:c6:72:41:1d:19:e4:42:4c:08:
c6:55:c6:bc:be:cf:0e:b0:56:3a:f3:ed:40:6f:27:
e1:d4:3b:75:57:1c:8e:ee:29:4f:7f:6d:5d:ed:58:
90:14:b1:e3:02:29:84:8a:b9:75:81:ce:f7:f2:66:
f2:0b:89:ca:52:d1:76:90:81:1c:ba:b6:87:5b:d3:
41:18:62:ea:f0:c5:51:c9:8e:ee:2d:14:5e:4d:6b:
9a:57:65:c2:c1:bf:8c:8f:3b:0f:ce:63:6b:1a:db:
63:bf:21:15:2d:2a:3e:1e:a7:5a:c4:b6:79:83:07:
bd:71:75:ae:60:e4:b7:0e:90:9c:93:a9:fd:fe:d1:
92:5c:6a:0e:8e:fa:c1:d9:a4:21:ca:fc:ab:ae:e3:
30:37:31:49:13:65:02:43:f7:86:2e:6a:09:f0:c9:
24:b8:14:79:a1:3d:71:2a:42:63:10:9c:10:da:f7:
6d:39:f3:7a:7c:a7:0a:1e:f1:82:30:e0:d2:57:3c:
c7:78:53:48:39:55:f5:49:0b:ac:62:aa:1c:84:d7:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:9F:84:85:7A:93:DC:2E:FC:B7:E5:61:EF:3F:32:97:FE:A4:FE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Jo2fhIV6k9wu_LflYe8_Mpf-pP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.12.0/23
109.236.48.0/22
160.20.108.0/23
185.85.188.0/24
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.249.200.0/22
185.250.210.0/24
185.254.28.0/22
185.254.236.0/22
193.35.152.0/22
193.160.140.0/22
193.223.104.0/22
194.62.52.0/22
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:11:26:0c:32:49:26:bc:a7:e1:99:7e:b0:ad:c1:77:2b:62:
8d:7b:7d:be:49:d5:7c:e8:26:26:57:65:a4:82:ca:75:4c:35:
a3:d2:73:8a:b0:3f:4c:e7:64:dc:ff:59:55:9e:f0:03:50:34:
25:ca:55:b1:a2:34:9f:de:f0:9d:d3:61:e8:b2:23:e4:9f:4c:
3a:65:2c:65:5f:4c:d9:7a:82:66:9f:62:1d:cb:2d:6e:36:2a:
1c:cc:7b:53:05:1b:9f:4d:33:f6:80:55:b2:49:f7:f2:6b:07:
ae:6f:b6:80:e6:59:e3:75:35:94:ab:c5:9d:19:05:e0:cd:75:
42:4d:3d:c8:c9:39:77:50:f2:5c:19:bf:d4:a2:5c:02:2e:db:
ba:3f:5b:df:e4:11:fd:b5:3d:87:f7:9d:6d:37:05:3f:30:91:
ae:37:3c:0c:db:0e:1b:31:6a:7b:83:1e:04:45:48:38:d0:73:
d9:97:59:5a:1e:62:da:e0:79:a2:10:26:9e:44:cf:7c:a4:bc:
44:db:72:c0:c6:bb:3e:55:8f:b2:c5:26:80:bf:7e:57:c8:82:
bc:23:46:6a:48:f7:db:f0:29:b5:9d:13:52:dc:cf:e4:f3:72:
f7:e1:23:47:b4:f7:70:c5:08:6f:5e:17:8c:58:13:de:2f:1d:
2d:d2:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org