Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/7jYNZNgRNLeoFKqQVA4rke1gYO8.roa
File: 7jYNZNgRNLeoFKqQVA4rke1gYO8.roa (raw, json)
Hash identifier: 9R0dCXn83ur28/S9ejFA3lrtdadRnCa8T/ApsCWIfgI=
Subject key identifier: EE:36:0D:64:D8:11:34:B7:A8:14:AA:90:54:0E:2B:91:ED:60:60:EF
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01872C9E600D11BC7526E9092A166EB0457B
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/7jYNZNgRNLeoFKqQVA4rke1gYO8.roa
Signing time: Wed 29 Mar 2023 09:06:29 +0000
ROA not before: Wed 29 Mar 2023 09:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 176.223.104.0/22 maxlen: 32
94.139.60.0/23 maxlen: 32
91.92.22.0/23 maxlen: 32
188.241.249.0/24 maxlen: 32
94.176.0.0/23 maxlen: 32
180.149.16.0/20 maxlen: 32
185.66.136.0/22 maxlen: 32
193.142.103.0/24 maxlen: 32
119.12.192.0/21 maxlen: 32
188.240.48.0/23 maxlen: 32
92.114.81.0/24 maxlen: 32
180.235.160.0/20 maxlen: 32
91.92.138.0/24 maxlen: 32
89.40.81.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
110.238.192.0/19 maxlen: 32
94.176.132.0/23 maxlen: 32
92.114.60.0/22 maxlen: 32
176.223.182.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
188.241.15.0/24 maxlen: 32
5.62.152.0/21 maxlen: 32
188.212.136.0/21 maxlen: 32
93.113.52.0/23 maxlen: 32
188.241.56.0/23 maxlen: 32
188.94.84.0/22 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 32
89.38.234.0/24 maxlen: 32
180.149.0.0/20 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Mar 2023 10:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:9e:60:0d:11:bc:75:26:e9:09:2a:16:6e:b0:45:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Mar 29 09:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee360d64d81134b7a814aa90540e2b91ed6060ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:1c:8b:df:96:65:3c:4e:e9:bc:3d:35:c5:
be:23:b6:4f:41:96:2a:53:0b:23:e8:6d:14:b0:26:
f2:63:0a:a1:d7:de:2d:1c:c7:0e:10:5a:c9:b3:f4:
49:41:22:23:76:8f:71:3f:c4:a1:99:31:0e:ef:ab:
2f:5d:8a:07:6f:73:a2:70:7e:76:b5:03:fd:11:fe:
44:f9:4e:af:83:cb:87:6a:72:b0:33:69:2e:0c:17:
89:d1:ef:e0:d3:d8:4e:71:4c:e7:71:91:68:bc:91:
54:14:d4:01:f8:9a:44:a7:87:7a:96:4f:6c:88:2f:
f1:e7:95:90:85:e7:b8:4a:ba:74:f0:aa:77:e2:c8:
6b:83:5b:3a:ca:b2:08:3d:4c:ba:e9:18:32:b1:f1:
62:b5:db:19:6a:b6:33:a1:64:12:62:70:41:e7:89:
3d:67:93:8a:20:a5:70:65:60:6e:44:c5:ed:f2:35:
17:60:3a:31:d6:d8:53:49:35:81:7a:a9:02:ee:7d:
57:d5:a6:14:4d:48:93:c7:1e:c3:24:36:3c:9c:25:
0d:e9:08:33:e1:fc:f4:df:b9:6e:a1:e2:86:fa:dd:
1f:3b:be:d8:34:49:64:50:ba:ac:a2:23:39:02:f8:
53:90:98:cb:dc:9c:3c:bc:96:17:55:be:b1:e1:7e:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:36:0D:64:D8:11:34:B7:A8:14:AA:90:54:0E:2B:91:ED:60:60:EF
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/7jYNZNgRNLeoFKqQVA4rke1gYO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.152.0/21
77.81.92.0/22
86.106.176.0/23
89.38.234.0/24
89.40.81.0/24
91.92.22.0/23
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
93.113.52.0/23
93.115.4.0/23
94.139.60.0/23
94.139.224.0/20
94.176.0.0/23
94.176.132.0/23
110.238.192.0/19
119.12.192.0/21
176.223.104.0/22
176.223.182.0/23
180.149.0.0/19
180.235.160.0/20
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.241.15.0/24
188.241.56.0/23
188.241.249.0/24
193.142.103.0/24
193.200.104.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f5:8c:2b:33:48:27:b9:66:73:4e:ed:ac:12:07:e8:5f:cf:
f6:7a:8d:47:1b:e5:d2:b9:8a:97:45:07:ba:a1:74:c3:5c:69:
da:44:c2:0f:15:8a:a5:fd:9e:1c:c3:5b:6f:32:76:05:31:af:
55:cf:22:5e:af:44:cd:8f:a2:8a:f8:21:06:3a:3f:d2:65:9d:
48:85:ea:7b:a6:6e:a7:47:f3:e6:3e:de:e4:c2:9b:4f:5a:39:
08:e8:4f:e9:47:5a:26:1f:ea:02:97:43:0f:b2:80:71:a6:2c:
ff:4d:61:f4:eb:7b:37:31:18:8a:8b:2a:09:6c:4b:03:48:46:
84:2e:c3:2d:75:b1:0c:a4:1f:09:0e:8b:35:0d:85:46:b9:da:
61:eb:68:f5:6a:ba:a0:2b:06:52:2e:a5:02:dc:d4:72:a3:1c:
a6:6e:ef:00:0c:56:90:d2:d7:8a:07:80:4e:f5:f6:9d:14:5c:
ce:43:51:31:75:8a:aa:ac:ad:d0:7e:1a:6d:a7:19:c5:7d:26:
4b:33:17:aa:b0:92:f0:8b:87:f8:b7:0e:b0:16:46:6e:55:fa:
b1:41:59:f7:84:c9:0c:6b:94:53:49:e0:27:16:19:a5:1b:61:
a8:3f:a4:ab:d4:0a:0a:b9:b5:6f:0d:05:3d:ab:7d:1f:af:a1:
1c:31:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org