Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/H51Pb_4E2a_3OCzzy7ED_ilEA3w.roa
File: H51Pb_4E2a_3OCzzy7ED_ilEA3w.roa (raw, json)
Hash identifier: X8ogM2rQfjrqQgqHd07paIWzHyFUozpi+VpxnMGnlYo=
Subject key identifier: 1F:9D:4F:6F:FE:04:D9:AF:F7:38:2C:F3:CB:B1:03:FE:29:44:03:7C
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0186CFB2E6C31C4B8273C12FE83DA5E04EA0
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/H51Pb_4E2a_3OCzzy7ED_ilEA3w.roa
Signing time: Sat 11 Mar 2023 08:04:13 +0000
ROA not before: Sat 11 Mar 2023 08:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206065
IP address blocks: 185.21.76.0/22 maxlen: 24
217.66.211.0/24 maxlen: 24
217.66.208.0/24 maxlen: 24
185.70.60.0/22 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.219.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
86.109.32.0/23 maxlen: 23
81.29.250.0/24 maxlen: 24
81.29.250.0/23 maxlen: 23
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
86.109.41.0/24 maxlen: 24
188.75.122.0/23 maxlen: 24
185.142.233.0/24 maxlen: 24
86.109.56.0/23 maxlen: 23
79.132.213.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.190.20.0/22 maxlen: 24
37.114.192.0/20 maxlen: 24
78.158.182.0/23 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
87.247.180.0/23 maxlen: 24
176.221.65.0/24 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.124.0/23 maxlen: 23
80.71.122.0/23 maxlen: 23
80.71.127.0/24 maxlen: 24
37.114.244.0/22 maxlen: 24
185.12.62.0/24 maxlen: 24
37.114.252.0/24 maxlen: 24
188.136.220.0/23 maxlen: 24
37.114.248.0/21 maxlen: 24
37.114.253.0/24 maxlen: 24
37.114.254.0/24 maxlen: 24
185.104.228.0/24 maxlen: 24
37.114.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 May 2023 07:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:b2:e6:c3:1c:4b:82:73:c1:2f:e8:3d:a5:e0:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Mar 11 08:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f9d4f6ffe04d9aff7382cf3cbb103fe2944037c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:1c:a2:a2:3c:a0:21:eb:8c:f0:28:2e:1c:
4c:69:44:7d:31:eb:4c:93:a9:52:d9:37:76:2d:3b:
5e:0a:8f:69:56:26:c6:ca:fc:a3:a3:97:02:85:7f:
97:8a:84:2a:c9:fa:95:94:cf:b0:ce:69:cf:1f:7c:
d3:1d:ee:d4:c8:08:ac:70:b8:fd:8b:25:42:d5:6e:
df:3d:50:c6:42:76:a8:12:e7:80:4a:c4:fd:a8:d0:
4d:b5:e8:2e:4b:03:0d:2d:cd:e0:a3:8c:cc:20:f0:
cf:57:71:27:43:80:72:83:5a:bf:08:a4:a3:7b:2c:
3d:ec:1d:7f:64:99:67:26:d5:74:b5:f1:a8:fb:a5:
fc:45:36:a9:1d:59:1c:c8:b4:71:13:0d:30:68:94:
b2:54:67:36:38:bc:2f:0a:50:15:ec:7e:0c:52:55:
70:73:03:24:0a:ab:01:6d:8e:52:dd:b2:f4:fd:84:
e3:da:31:42:45:96:70:b0:ad:e0:98:28:be:e3:30:
82:96:6a:2c:75:85:aa:80:1d:57:0b:45:e3:42:d8:
fd:46:6e:1a:98:24:eb:52:50:36:ba:f5:68:db:2b:
8a:32:09:49:01:4f:49:19:2c:f9:dd:6b:a6:8a:0d:
2a:29:d8:ce:69:09:ab:b7:a0:26:11:b1:89:c4:49:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9D:4F:6F:FE:04:D9:AF:F7:38:2C:F3:CB:B1:03:FE:29:44:03:7C
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/H51Pb_4E2a_3OCzzy7ED_ilEA3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.192.0/20
37.114.244.0-37.114.255.255
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
78.158.182.0/23
79.132.213.0/24
79.132.217.0/24
79.132.219.0/24
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
86.109.32.0/23
86.109.41.0/24
86.109.56.0/23
87.247.180.0/23
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.70.60.0/22
185.104.228.0/24
185.142.233.0-185.142.235.255
185.190.20.0/22
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.107.0/24
188.75.110.0/23
188.75.122.0/23
188.136.220.0/23
217.66.208.0/24
217.66.211.0/24
Signature Algorithm: sha256WithRSAEncryption
41:be:95:e1:4e:65:c5:ce:ce:b0:e1:1b:51:b2:17:fe:2c:00:
8b:cb:2e:74:31:12:76:e6:92:a5:09:26:47:c6:a1:31:c2:69:
c2:c8:e4:02:c9:f2:a6:ce:aa:28:f4:18:4e:8a:9f:ea:16:ff:
4b:de:da:77:9d:00:1a:e1:7d:c9:33:b8:c8:3f:05:88:8a:46:
6f:5c:70:04:b3:c6:be:f8:e5:10:4d:12:c3:53:ad:43:f6:da:
b1:97:e2:7a:2e:cf:73:9d:3f:a4:07:4a:b0:8c:1f:90:99:12:
37:e9:3d:c7:7c:d2:40:1a:85:c4:21:1e:6e:11:09:15:e9:b8:
00:0c:f3:65:97:04:f7:01:4a:76:06:58:60:cf:77:44:5b:d5:
07:de:75:fb:af:28:5d:b5:25:44:6e:6e:f8:f9:3e:70:83:bc:
e1:fa:75:f9:de:fd:fc:8f:74:4f:ff:be:62:7a:6f:c5:a7:53:
37:51:8f:3f:2d:e2:de:6c:cb:40:c5:e0:ad:0a:46:0e:3e:89:
62:ae:74:04:67:95:81:e0:12:ae:8f:da:5e:b8:ba:89:3e:85:
a2:fb:3d:53:7f:39:23:f9:a8:6b:26:8b:78:70:c3:d8:02:0a:
f8:01:8d:a0:b1:34:42:2f:7c:d1:12:2b:d7:77:35:78:9e:d6:
41:ce:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org