Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuccauwrLIukyXy1WhK376KexYs.roa
File: tuccauwrLIukyXy1WhK376KexYs.roa (raw, json)
Hash identifier: yrqlQb7w0k4T3h+LnT523xCpu2gAPfLw3nhMNmp4gKc=
Subject key identifier: B6:E7:1C:6A:EC:2B:2C:8B:A4:C9:7C:B5:5A:12:B7:EF:A2:9E:C5:8B
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0188009474FE5046D9F668C407EF60960CED
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuccauwrLIukyXy1WhK376KexYs.roa
Signing time: Tue 09 May 2023 12:55:09 +0000
ROA not before: Tue 09 May 2023 12:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.231.205.0/24 maxlen: 24
185.231.204.0/24 maxlen: 24
185.231.206.0/24 maxlen: 24
185.231.207.0/24 maxlen: 24
141.98.170.0/24 maxlen: 24
141.98.169.0/24 maxlen: 24
141.98.168.0/24 maxlen: 24
45.84.0.0/24 maxlen: 24
193.43.147.0/24 maxlen: 24
45.84.1.0/24 maxlen: 24
188.119.122.0/24 maxlen: 24
188.119.121.0/24 maxlen: 24
188.119.123.0/24 maxlen: 24
45.89.55.0/24 maxlen: 24
45.89.54.0/24 maxlen: 24
45.89.52.0/24 maxlen: 24
45.159.250.0/24 maxlen: 24
45.159.249.0/24 maxlen: 24
45.159.248.0/24 maxlen: 24
45.159.251.0/24 maxlen: 24
45.67.35.0/24 maxlen: 24
5.182.36.0/24 maxlen: 24
5.182.38.0/24 maxlen: 24
5.182.39.0/24 maxlen: 24
193.57.138.0/24 maxlen: 24
193.57.137.0/24 maxlen: 24
193.57.136.0/24 maxlen: 24
193.57.139.0/24 maxlen: 24
93.185.166.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.87.152.0/24 maxlen: 24
45.87.153.0/24 maxlen: 24
45.87.154.0/24 maxlen: 24
45.8.145.0/24 maxlen: 24
45.8.144.0/24 maxlen: 24
45.8.146.0/24 maxlen: 24
193.46.57.0/24 maxlen: 24
193.46.56.0/24 maxlen: 24
194.4.48.0/24 maxlen: 24
194.4.51.0/24 maxlen: 24
194.4.50.0/24 maxlen: 24
194.4.49.0/24 maxlen: 24
194.116.172.0/24 maxlen: 24
194.116.173.0/24 maxlen: 24
194.116.191.0/24 maxlen: 24
194.116.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 09:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:94:74:fe:50:46:d9:f6:68:c4:07:ef:60:96:0c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: May 9 12:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6e71c6aec2b2c8ba4c97cb55a12b7efa29ec58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:7c:ec:3c:51:de:86:ef:17:9a:cd:7f:e9:
16:f3:61:ff:50:0d:79:4b:85:fc:f6:86:e0:a0:5d:
2d:97:2b:60:83:c2:ec:89:15:82:1d:eb:1f:3a:a8:
17:33:94:8d:0a:15:38:e7:a5:c2:df:15:88:18:aa:
27:d7:51:e9:60:cf:a5:fe:dc:ae:2f:f8:88:ed:a5:
95:a9:4a:61:1b:12:17:f0:41:3a:f6:e7:e4:d2:fb:
3d:96:0e:4a:be:fb:cc:fa:7f:43:78:bd:37:d8:b3:
68:77:92:fc:66:fe:b3:c6:6d:2d:a4:f4:b2:a4:57:
05:d1:76:b5:d5:de:3f:3a:e1:40:c2:8c:3a:f8:ca:
36:44:83:16:55:92:c3:94:60:cf:f3:b5:1f:5d:39:
cb:e8:45:6e:79:71:36:1c:e5:af:33:52:98:06:1f:
56:b9:44:af:d2:f3:8d:cb:b3:12:aa:9a:d3:79:38:
21:74:6c:2d:40:4f:30:5b:2f:32:76:8b:2f:4b:df:
d0:8f:92:82:8a:2c:4f:14:7d:e6:88:0f:fd:82:59:
1c:98:b7:45:c1:0e:33:0a:b9:ca:78:52:d1:4c:6a:
26:51:82:17:13:12:22:4e:bd:1e:21:20:5f:67:7d:
cc:c7:18:d7:4c:99:27:ab:21:19:4b:fe:43:45:df:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:1C:6A:EC:2B:2C:8B:A4:C9:7C:B5:5A:12:B7:EF:A2:9E:C5:8B
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuccauwrLIukyXy1WhK376KexYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.36.0/24
5.182.38.0/23
45.8.144.0-45.8.146.255
45.67.35.0/24
45.84.0.0/23
45.87.152.0-45.87.154.255
45.89.52.0/24
45.89.54.0/23
45.93.8.0/23
45.159.248.0/22
93.185.166.0/24
141.98.168.0-141.98.170.255
185.231.204.0/22
188.119.121.0-188.119.123.255
193.43.147.0/24
193.46.56.0/23
193.57.136.0/22
194.4.48.0/22
194.116.172.0/23
194.116.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:db:c7:e0:ee:fb:2e:19:bc:87:eb:16:42:6b:02:61:ec:ea:
89:c0:cd:8d:6b:3a:dc:db:d7:7c:1a:88:32:05:64:6b:27:3b:
ff:9d:f9:cc:0d:25:97:86:ac:01:42:5f:dc:39:44:52:90:bb:
1c:a8:54:5f:13:95:ea:81:05:2b:4c:9b:53:09:4c:59:b3:c2:
44:d4:0a:b1:81:06:97:e4:f3:02:9b:be:99:df:7f:03:b4:d9:
78:9b:be:42:43:bb:d1:3a:2c:fc:01:0a:af:fa:3e:5d:1a:d0:
93:0c:9f:b8:c2:10:59:a8:be:a1:5f:04:f4:ea:91:0e:58:c5:
9b:cd:20:ed:18:5b:78:98:37:06:87:94:16:2b:ef:05:20:6e:
2f:93:de:ff:cd:59:bd:fd:c4:f5:63:02:62:e1:0e:8b:6b:5f:
47:84:f8:93:88:c3:08:15:e5:8c:92:9b:3e:be:7b:86:3b:7a:
36:ea:33:0d:ef:b4:7f:a4:de:4a:2c:c7:22:5e:7e:2f:1f:5c:
70:b6:69:9c:89:f6:d7:e4:1a:0c:9f:1a:30:45:78:31:94:a6:
28:f5:5d:d2:44:36:2a:21:7d:05:f3:ee:a8:59:87:3a:36:1d:
97:0a:2f:37:f0:6b:a0:f3:6c:9c:90:b7:dc:99:08:96:0e:44:
31:7e:14:cc
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYgAlHT+UEbZ9mjEB+9glgztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjMwNTA5MTI1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmU3MWM2YWVjMmIyYzhiYTRjOTdjYjU1YTEyYjdlZmEyOWVjNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbx87DxR3obvF5rNf+kW82H/UA15
S4X89obgoF0tlytgg8LsiRWCHesfOqgXM5SNChU456XC3xWIGKon11HpYM+l/tyu
L/iI7aWVqUphGxIX8EE69ufk0vs9lg5KvvvM+n9DeL032LNod5L8Zv6zxm0tpPSy
pFcF0Xa11d4/OuFAwow6+Mo2RIMWVZLDlGDP87UfXTnL6EVueXE2HOWvM1KYBh9W
uUSv0vONy7MSqprTeTghdGwtQE8wWy8ydosvS9/Qj5KCiixPFH3miA/9glkcmLdF
wQ4zCrnKeFLRTGomUYIXExIiTr0eISBfZ33MxxjXTJknqyEZS/5DRd9YkwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLbnHGrsKyyLpMl8tVoSt++insWLMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvdHVjY2F1d3JMSXVreVh5MVdoSzM3NktleFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAAF
tiQDBAEFtiYwDAMEBC0IkAMEAC0IkgMEAC1DIwMEAS1UADAMAwQDLVeYAwQALVea
AwQALVk0AwQBLVk2AwQBLV0IAwQCLZ/4AwQAXbmmMAwDBAONYqgDBACNYqoDBAK5
58wwDAMEALx3eQMEArx3eAMEAMErkwMEAcEuOAMEAsE5iAMEAsIEMAMEAcJ0rAME
AcJ0vjANBgkqhkiG9w0BAQsFAAOCAQEAsdvH4O77Lhm8h+sWQmsCYezqicDNjWs6
3NvXfBqIMgVkayc7/535zA0ll4asAUJf3DlEUpC7HKhUXxOV6oEFK0ybUwlMWbPC
RNQKsYEGl+TzApu+md9/A7TZeJu+QkO70Tos/AEKr/o+XRrQkwyfuMIQWai+oV8E
9OqRDljFm80g7RhbeJg3BoeUFivvBSBuL5Pe/81Zvf3E9WMCYuEOi2tfR4T4k4jD
CBXljJKbPr57hjt6NuozDe+0f6TeSizHIl5+Lx9ccLZpnIn21+QaDJ8aMEV4MZSm
KPVd0kQ2KiF9BfPuqFmHOjYdlwovN/BroPNsnJC33JkIlg5EMX4UzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:18 2024 by rpki-client on console-ams.rpki-client.org