Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6xO8XTG0JDidU6M5XyLtPCmVvIw.roa
File: 6xO8XTG0JDidU6M5XyLtPCmVvIw.roa (raw, json)
Hash identifier: GLBTpuKHzgr0W11H1FqtTvi/nWRKmrfxAQ++ruizDkU=
Subject key identifier: EB:13:BC:5D:31:B4:24:38:9D:53:A3:39:5F:22:ED:3C:29:95:BC:8C
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018705ED411C047909B158337905A06844F2
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6xO8XTG0JDidU6M5XyLtPCmVvIw.roa
Signing time: Tue 21 Mar 2023 20:47:27 +0000
ROA not before: Tue 21 Mar 2023 20:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.231.205.0/24 maxlen: 24
185.231.204.0/24 maxlen: 24
185.231.206.0/24 maxlen: 24
185.231.207.0/24 maxlen: 24
141.98.170.0/24 maxlen: 24
141.98.169.0/24 maxlen: 24
141.98.168.0/24 maxlen: 24
45.84.0.0/24 maxlen: 24
193.43.147.0/24 maxlen: 24
45.84.1.0/24 maxlen: 24
188.119.122.0/24 maxlen: 24
188.119.123.0/24 maxlen: 24
45.89.52.0/24 maxlen: 24
45.159.250.0/24 maxlen: 24
45.159.249.0/24 maxlen: 24
45.159.248.0/24 maxlen: 24
45.159.251.0/24 maxlen: 24
45.67.35.0/24 maxlen: 24
5.182.36.0/24 maxlen: 24
5.182.38.0/24 maxlen: 24
5.182.39.0/24 maxlen: 24
193.57.138.0/24 maxlen: 24
193.57.137.0/24 maxlen: 24
193.57.136.0/24 maxlen: 24
93.185.166.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.87.152.0/24 maxlen: 24
45.87.153.0/24 maxlen: 24
45.87.154.0/24 maxlen: 24
45.8.145.0/24 maxlen: 24
45.8.144.0/24 maxlen: 24
45.8.146.0/24 maxlen: 24
193.46.57.0/24 maxlen: 24
193.46.56.0/24 maxlen: 24
194.4.48.0/24 maxlen: 24
194.4.51.0/24 maxlen: 24
194.4.50.0/24 maxlen: 24
194.4.49.0/24 maxlen: 24
194.116.172.0/24 maxlen: 24
194.116.173.0/24 maxlen: 24
194.116.191.0/24 maxlen: 24
194.116.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:ed:41:1c:04:79:09:b1:58:33:79:05:a0:68:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 21 20:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb13bc5d31b424389d53a3395f22ed3c2995bc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:f8:99:a0:27:66:d4:60:de:c0:03:34:ab:
50:e1:af:37:1f:ec:b4:23:5a:b2:c0:c2:63:92:f3:
e9:a5:ce:7b:e2:d4:13:da:72:75:fd:9f:5c:a7:a4:
87:a1:8f:a8:7d:c2:32:1e:cb:a6:4e:cf:d5:dd:66:
8d:85:98:3a:99:46:47:c4:c4:94:a7:5c:30:3d:21:
19:81:94:cd:3d:78:21:d2:59:f9:65:0d:64:89:d4:
ef:0f:3a:5c:11:41:50:cc:59:e3:16:b5:22:6e:2d:
87:78:14:7f:81:25:3f:8c:29:a5:19:81:63:48:2e:
ed:6b:87:a3:5a:02:b9:7f:41:e0:bc:0b:30:47:38:
53:06:2c:e9:83:31:96:e7:70:1b:fc:56:52:e3:bb:
77:87:fc:1f:41:ae:b4:10:32:53:82:2f:d7:5f:39:
46:08:2d:b6:25:de:5e:b4:09:e7:93:6b:d8:48:13:
7d:c6:de:88:8f:75:50:1a:9c:9b:97:ba:c0:14:ef:
93:43:d5:ef:42:91:8b:c3:fc:e5:9e:20:09:69:51:
de:f9:0a:3c:ba:17:e6:a5:19:90:9d:93:90:24:e8:
63:d0:2d:bc:6e:1f:39:a8:5f:eb:cd:b7:0e:8b:37:
1e:4a:60:eb:8d:75:90:81:46:c5:1b:08:ba:f2:9e:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:BC:5D:31:B4:24:38:9D:53:A3:39:5F:22:ED:3C:29:95:BC:8C
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6xO8XTG0JDidU6M5XyLtPCmVvIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.36.0/24
5.182.38.0/23
45.8.144.0-45.8.146.255
45.67.35.0/24
45.84.0.0/23
45.87.152.0-45.87.154.255
45.89.52.0/24
45.93.8.0/23
45.159.248.0/22
93.185.166.0/24
141.98.168.0-141.98.170.255
185.231.204.0/22
188.119.122.0/23
193.43.147.0/24
193.46.56.0/23
193.57.136.0-193.57.138.255
194.4.48.0/22
194.116.172.0/23
194.116.190.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:65:44:a4:b0:53:b6:e7:3b:d3:5a:0d:b2:f1:58:4f:e8:51:
7a:0a:6e:ad:a5:f4:21:37:4b:6f:71:54:94:36:a8:5c:fb:4d:
1b:95:63:83:84:a1:cc:0d:20:70:45:a5:e3:65:54:b0:3b:ed:
7a:f4:31:29:61:e3:69:79:38:25:df:c3:99:47:95:30:43:5c:
3e:0c:8d:71:71:88:2f:f4:18:f3:2f:14:de:64:a0:8d:0b:8b:
d8:59:fc:8b:90:4b:31:b6:9e:59:d8:7a:be:28:05:23:d4:fd:
a5:3b:27:f8:7c:92:a2:15:1d:e5:aa:cf:3d:f8:20:e7:f3:9c:
71:61:ab:21:e3:df:14:69:41:02:0b:52:49:f5:67:ce:dd:ee:
64:5f:58:9d:a1:e9:7e:d5:c0:63:73:f6:fc:75:47:3f:12:ef:
39:5a:7a:aa:cc:d2:7c:0f:65:0b:ea:f6:43:3d:9b:45:92:83:
85:04:ca:76:da:72:d2:5c:56:07:46:59:20:e0:e4:3c:61:5f:
6b:a6:e4:13:15:22:42:82:ae:b1:4f:9f:ee:d8:d5:9a:55:d1:
fb:1b:5e:0c:29:5f:f9:63:be:67:64:a1:08:11:e6:79:9c:d4:
35:ba:fc:80:14:cf:cc:40:23:e6:34:7a:bd:dc:bf:4f:ff:80:
b8:41:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org