Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/TBYS5rYmzCrUiUeW89UjptkKH7E.roa
File: TBYS5rYmzCrUiUeW89UjptkKH7E.roa (raw, json)
Hash identifier: +1Z8aflZdh/uyOGvs3KKr0kNk55VJyocEMTUnEYomSM=
Subject key identifier: 4C:16:12:E6:B6:26:CC:2A:D4:89:47:96:F3:D5:23:A6:D9:0A:1F:B1
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 018ACD867BDA0378338F9DB3D229518AE737
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/TBYS5rYmzCrUiUeW89UjptkKH7E.roa
Signing time: Mon 25 Sep 2023 18:07:37 +0000
ROA not before: Mon 25 Sep 2023 18:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 188.241.249.0/24 maxlen: 32
185.66.136.0/22 maxlen: 32
92.255.52.0/24 maxlen: 32
92.255.64.0/24 maxlen: 32
212.70.3.0/24 maxlen: 32
188.241.200.0/21 maxlen: 32
119.12.192.0/20 maxlen: 32
212.70.8.0/21 maxlen: 32
92.255.80.0/22 maxlen: 32
89.46.242.0/24 maxlen: 32
92.114.81.0/24 maxlen: 32
180.235.160.0/20 maxlen: 32
86.104.76.0/22 maxlen: 32
89.40.81.0/24 maxlen: 32
180.235.176.0/20 maxlen: 32
110.238.192.0/19 maxlen: 32
92.114.60.0/22 maxlen: 32
91.92.216.0/23 maxlen: 32
188.241.15.0/24 maxlen: 32
91.92.218.0/24 maxlen: 32
94.177.14.0/23 maxlen: 32
93.113.52.0/23 maxlen: 24
188.240.214.0/23 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 24
188.241.0.0/23 maxlen: 32
92.255.0.0/24 maxlen: 32
85.217.190.0/23 maxlen: 32
193.56.24.0/22 maxlen: 32
89.32.132.0/22 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
176.223.104.0/22 maxlen: 32
94.139.48.0/21 maxlen: 32
94.139.56.0/22 maxlen: 32
91.92.17.0/24 maxlen: 32
91.92.20.0/24 maxlen: 32
91.92.22.0/23 maxlen: 32
94.139.60.0/23 maxlen: 32
94.176.0.0/23 maxlen: 32
193.142.103.0/24 maxlen: 32
176.223.68.0/22 maxlen: 32
188.240.48.0/23 maxlen: 32
94.176.172.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
91.92.138.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
91.92.64.0/24 maxlen: 32
176.223.182.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
93.114.236.0/22 maxlen: 32
93.114.136.0/23 maxlen: 32
188.94.84.0/22 maxlen: 32
2.57.76.0/22 maxlen: 32
89.104.122.0/23 maxlen: 32
31.14.26.0/24 maxlen: 32
89.223.22.0/23 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:86:7b:da:03:78:33:8f:9d:b3:d2:29:51:8a:e7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Sep 25 18:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1612e6b626cc2ad4894796f3d523a6d90a1fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:91:69:41:55:8e:10:44:3b:f4:6d:24:6c:
21:ba:27:a6:b7:af:72:05:de:6f:15:7f:fc:48:01:
c5:b2:ba:2f:53:ab:27:ea:0c:cc:a0:c1:01:97:5a:
67:a2:89:76:ca:0a:bb:57:ba:ca:ec:57:87:3b:05:
5a:cf:cb:90:01:10:aa:a7:60:aa:9a:15:9b:78:b7:
21:b9:89:a4:9d:59:4c:70:f4:ce:c5:f3:8f:58:a0:
75:f1:81:79:ef:34:d4:d0:07:b4:f6:98:7a:3c:20:
4a:1e:8b:62:f4:07:46:7c:ba:46:87:03:fd:cf:8a:
04:ee:8c:a0:54:13:7f:dc:a3:fd:05:11:d9:b3:60:
20:08:91:5a:eb:8f:c2:0e:cc:1b:1a:95:5d:88:72:
b7:1c:ac:bb:09:7b:17:69:5b:93:40:be:71:8a:e6:
c2:1a:f8:72:54:02:93:aa:59:0d:a8:31:69:ee:0b:
38:3c:3b:bd:bd:26:84:e9:97:59:aa:3e:92:aa:88:
f7:8a:8d:09:a5:b2:20:f4:98:63:63:ba:e7:7c:32:
df:90:7f:9a:3f:b7:3a:a4:75:6f:08:f4:1a:98:d6:
dd:b4:83:82:19:03:21:0c:65:69:e5:62:5c:20:3d:
62:95:b6:3a:4e:25:ca:59:10:85:2a:36:c8:d9:f3:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:12:E6:B6:26:CC:2A:D4:89:47:96:F3:D5:23:A6:D9:0A:1F:B1
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/TBYS5rYmzCrUiUeW89UjptkKH7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.76.0/22
31.14.26.0/24
77.81.92.0/22
85.217.190.0/23
85.217.220.0/23
86.104.76.0/22
86.106.176.0/23
89.32.132.0/22
89.38.155.0/24
89.40.81.0/24
89.46.242.0/24
89.104.122.0/23
89.223.22.0/23
91.92.17.0/24
91.92.20.0/24
91.92.22.0/23
91.92.64.0/24
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.114.136.0/23
93.114.236.0/22
93.115.4.0/23
94.139.48.0-94.139.61.255
94.139.224.0/20
94.176.0.0/23
94.176.172.0/22
94.177.14.0/23
110.238.192.0/19
119.12.192.0/20
176.223.68.0/22
176.223.104.0/22
176.223.182.0/23
180.235.160.0/19
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.240.214.0/23
188.241.0.0/23
188.241.15.0/24
188.241.200.0/21
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
212.70.3.0/24
212.70.8.0/21
Signature Algorithm: sha256WithRSAEncryption
71:49:69:69:d9:30:e5:ce:c1:93:f7:9f:2b:ef:15:f9:4f:28:
4a:0f:c3:0b:37:41:37:a3:19:7d:32:10:d2:e3:a2:91:bb:86:
ea:34:fd:76:e0:35:f8:ea:52:17:ed:ac:d2:13:15:f7:b7:f8:
ec:d2:a3:5b:bb:67:18:dd:f9:bd:35:fe:7d:cc:ae:8d:b7:60:
10:9f:53:1e:6e:0e:98:2c:5b:d1:f4:66:0c:fb:3d:17:f3:1e:
90:c9:22:d1:45:22:9c:ea:2a:4b:ec:d2:f3:70:f1:c8:9b:bf:
f2:a0:e9:71:02:23:98:d7:34:38:47:10:cd:c0:8c:43:3a:d4:
bf:82:ac:01:ed:de:3f:5a:fc:f3:a9:c3:57:3d:37:bd:59:7c:
09:e6:13:87:16:8a:61:6e:29:fc:1a:c4:67:82:69:03:92:3d:
a9:4d:d5:99:f4:d8:37:f3:c8:d4:f8:e5:87:b3:c0:25:d2:71:
14:8d:91:92:48:a8:d4:d0:6b:69:f4:8d:df:3f:fb:4d:e0:1d:
09:76:90:f8:77:76:72:87:14:ac:ec:96:a1:16:25:13:8c:90:
c7:29:6d:ad:b9:70:44:0a:1e:59:99:f4:70:a1:a5:b9:40:41:
b8:1f:a9:2d:9f:6a:ae:9f:ca:02:78:50:e6:56:4a:79:f7:70:
92:58:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org