Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/taqQaPySOegLPooUCQAn5ep03HQ.roa
File: taqQaPySOegLPooUCQAn5ep03HQ.roa (raw, json)
Hash identifier: RDlsGK5TWsrOHJNxM2iJvNYRwEHxKMzreFn2nFpbgLE=
Subject key identifier: B5:AA:90:68:FC:92:39:E8:0B:3E:8A:14:09:00:27:E5:EA:74:DC:74
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 018745D19052658CBCC9FCC10BC01C2F750D
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/taqQaPySOegLPooUCQAn5ep03HQ.roa
Signing time: Mon 03 Apr 2023 06:32:54 +0000
ROA not before: Mon 03 Apr 2023 06:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 188.241.249.0/24 maxlen: 32
185.66.136.0/22 maxlen: 32
92.255.52.0/24 maxlen: 32
119.12.176.0/20 maxlen: 32
92.255.64.0/24 maxlen: 32
119.12.192.0/21 maxlen: 32
92.255.80.0/24 maxlen: 32
119.12.200.0/21 maxlen: 32
92.255.83.0/24 maxlen: 32
92.255.82.0/24 maxlen: 32
92.255.81.0/24 maxlen: 32
92.114.81.0/24 maxlen: 32
180.235.160.0/20 maxlen: 32
89.40.81.0/24 maxlen: 32
110.238.192.0/19 maxlen: 32
92.114.60.0/22 maxlen: 32
94.177.14.0/23 maxlen: 32
91.92.216.0/23 maxlen: 32
91.92.218.0/24 maxlen: 32
188.241.15.0/24 maxlen: 32
5.62.152.0/21 maxlen: 32
93.113.52.0/23 maxlen: 32
188.241.56.0/23 maxlen: 32
91.92.178.0/23 maxlen: 32
94.139.224.0/20 maxlen: 32
89.38.234.0/24 maxlen: 32
92.255.0.0/24 maxlen: 32
193.56.24.0/23 maxlen: 32
193.56.26.0/23 maxlen: 32
188.211.24.0/23 maxlen: 32
86.106.176.0/23 maxlen: 32
85.217.220.0/23 maxlen: 32
176.223.104.0/22 maxlen: 32
94.139.60.0/23 maxlen: 32
91.92.22.0/23 maxlen: 32
94.176.0.0/23 maxlen: 32
180.149.16.0/20 maxlen: 32
193.142.103.0/24 maxlen: 32
188.240.48.0/23 maxlen: 32
91.92.138.0/24 maxlen: 32
193.200.104.0/23 maxlen: 32
94.176.132.0/23 maxlen: 32
176.223.182.0/23 maxlen: 32
188.212.136.0/21 maxlen: 32
188.94.84.0/22 maxlen: 32
89.104.122.0/23 maxlen: 32
31.14.26.0/24 maxlen: 32
110.239.212.0/22 maxlen: 32
110.239.208.0/22 maxlen: 32
110.239.216.0/21 maxlen: 32
89.223.22.0/23 maxlen: 32
180.149.0.0/20 maxlen: 32
91.192.212.0/22 maxlen: 32
93.115.4.0/23 maxlen: 32
77.81.92.0/22 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Apr 2023 07:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:d1:90:52:65:8c:bc:c9:fc:c1:0b:c0:1c:2f:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Apr 3 06:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5aa9068fc9239e80b3e8a14090027e5ea74dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:dc:31:8e:41:57:9e:9c:c9:7b:b2:00:b6:
f8:8f:fa:0f:a8:da:91:21:d9:66:f5:a7:0d:ba:67:
b6:89:13:bb:e4:ae:00:11:69:50:64:78:9a:ed:cd:
1a:6f:56:c9:8b:4a:4e:f3:06:56:8e:4a:41:07:ea:
e8:ab:51:83:50:d9:76:5a:75:f2:90:50:15:2a:bf:
e3:f9:97:10:d9:5f:fd:bc:92:a5:be:61:69:ef:2d:
de:3f:5e:00:cd:b9:ce:6e:16:7a:e2:14:94:02:58:
ad:29:d8:f3:c3:ab:58:3f:15:08:30:3f:62:44:43:
1e:8a:26:f0:83:8f:50:1b:03:00:2f:20:39:10:b5:
2b:9b:77:f5:86:a9:2d:58:c9:10:97:6a:8b:67:53:
e5:94:4b:cd:98:9c:04:25:3b:91:43:b3:08:2a:00:
e2:67:02:37:4f:32:26:f0:b4:5d:df:02:b0:7e:de:
4f:91:b6:30:2e:0f:b0:ec:16:36:cc:9f:33:15:75:
4c:61:65:76:df:a3:2f:08:68:7e:c3:48:29:e2:ae:
ee:59:30:a7:96:94:6c:aa:4a:9b:9e:67:f9:38:29:
5b:4a:98:e6:fe:6a:79:d9:13:56:e5:51:31:50:b7:
c0:a3:e7:ce:76:b6:02:91:84:d5:6d:d3:f1:a5:f7:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:90:68:FC:92:39:E8:0B:3E:8A:14:09:00:27:E5:EA:74:DC:74
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/taqQaPySOegLPooUCQAn5ep03HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.152.0/21
31.14.26.0/24
77.81.92.0/22
85.217.220.0/23
86.106.176.0/23
89.38.234.0/24
89.40.81.0/24
89.104.122.0/23
89.223.22.0/23
91.92.22.0/23
91.92.138.0/24
91.92.178.0/23
91.92.216.0-91.92.218.255
91.192.212.0/22
92.114.60.0/22
92.114.81.0/24
92.255.0.0/24
92.255.52.0/24
92.255.64.0/24
92.255.80.0/22
93.113.52.0/23
93.115.4.0/23
94.139.60.0/23
94.139.224.0/20
94.176.0.0/23
94.176.132.0/23
94.177.14.0/23
110.238.192.0/19
110.239.208.0/20
119.12.176.0-119.12.207.255
176.223.104.0/22
176.223.182.0/23
180.149.0.0/19
180.235.160.0/20
185.66.136.0/22
188.94.84.0/22
188.211.24.0/23
188.212.136.0/21
188.240.48.0/23
188.241.15.0/24
188.241.56.0/23
188.241.249.0/24
193.56.24.0/22
193.142.103.0/24
193.200.104.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:5b:43:0d:30:26:92:e7:3c:4f:71:cc:fd:db:ea:bb:08:6e:
87:d5:fd:0b:1a:bc:78:5b:12:3a:19:ef:a9:2b:10:75:d7:22:
e7:c2:4f:ff:64:da:68:89:86:6e:30:0b:37:00:95:ab:37:14:
18:34:95:73:88:d8:37:72:ac:6d:15:25:cc:69:ac:da:14:3b:
6b:40:82:3f:da:8c:0a:ed:38:38:2c:62:40:61:88:63:de:60:
99:76:5d:d0:d1:ff:bc:0b:3e:0a:a8:9a:4a:f3:25:e5:b7:64:
b2:bb:25:f8:cc:ac:1a:50:c9:45:0a:4a:42:78:78:38:ee:c1:
55:00:bf:98:dc:22:1a:2c:3c:a4:da:e7:db:f8:a3:a2:64:1b:
20:f9:93:57:0d:9c:0e:3c:e3:bf:85:8b:c2:79:41:9d:d7:c3:
25:b1:04:05:3d:0a:98:1b:c7:b5:bd:54:a8:5a:dc:e0:52:af:
cb:43:f2:f2:cd:86:9d:e0:fc:e5:a7:04:0c:94:b4:d0:46:7b:
f3:38:09:ab:88:ed:61:cf:5a:7d:6f:f7:eb:2a:85:71:f1:40:
94:ec:ac:a9:76:9b:c1:dd:1b:4d:1a:39:c1:ee:00:3d:c5:7f:
ba:94:4b:44:31:74:55:b4:8f:37:82:3f:fe:11:82:4c:d3:b1:
10:76:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org