Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/1Pf-rM5hIQn5fjJ-5elkVCkIUKY.roa
File: 1Pf-rM5hIQn5fjJ-5elkVCkIUKY.roa (raw, json)
Hash identifier: Vs72FPx1sxTWJFWgUFtFnOXKFerNEhlUoPL/wjQ4Xwo=
Subject key identifier: D4:F7:FE:AC:CE:61:21:09:F9:7E:32:7E:E5:E9:64:54:29:08:50:A6
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01856F94BCDB862F3F6248DD2F8FD5547086
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/1Pf-rM5hIQn5fjJ-5elkVCkIUKY.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 192.214.192.0/19 maxlen: 24
23.90.192.0/18 maxlen: 24
185.87.100.0/22 maxlen: 24
185.20.16.0/22 maxlen: 24
185.134.156.0/22 maxlen: 24
45.133.68.0/22 maxlen: 24
79.99.160.0/21 maxlen: 24
185.133.80.0/22 maxlen: 24
92.119.232.0/22 maxlen: 24
185.197.108.0/22 maxlen: 24
5.183.248.0/22 maxlen: 24
45.89.76.0/22 maxlen: 24
45.92.180.0/22 maxlen: 24
185.48.252.0/22 maxlen: 24
45.129.218.0/24 maxlen: 24
45.129.216.0/24 maxlen: 24
185.163.136.0/22 maxlen: 24
45.129.217.0/24 maxlen: 24
185.241.140.0/22 maxlen: 24
94.154.4.0/24 maxlen: 24
88.218.12.0/22 maxlen: 24
185.191.36.0/22 maxlen: 24
185.163.212.0/22 maxlen: 24
185.86.88.0/22 maxlen: 24
45.86.96.0/22 maxlen: 24
185.163.220.0/22 maxlen: 24
185.163.228.0/22 maxlen: 24
31.204.80.0/21 maxlen: 24
94.187.128.0/19 maxlen: 24
2.59.144.0/22 maxlen: 24
185.186.88.0/22 maxlen: 24
185.169.156.0/22 maxlen: 24
185.132.64.0/22 maxlen: 24
45.142.108.0/22 maxlen: 24
185.135.176.0/22 maxlen: 24
195.216.140.0/22 maxlen: 24
46.18.124.0/24 maxlen: 24
46.18.125.0/24 maxlen: 24
46.18.120.0/22 maxlen: 24
46.18.126.0/23 maxlen: 24
185.254.8.0/22 maxlen: 24
185.138.116.0/22 maxlen: 24
5.10.128.0/21 maxlen: 24
45.80.252.0/22 maxlen: 24
185.98.116.0/22 maxlen: 24
45.152.16.0/22 maxlen: 24
62.192.156.0/22 maxlen: 24
2a00:41e0::/29 maxlen: 48
2a05:b780::/29 maxlen: 48
2a01:648::/29 maxlen: 48
2a00:6780::/29 maxlen: 48
2a05:c100::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bc:db:86:2f:3f:62:48:dd:2f:8f:d5:54:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4f7feacce612109f97e327ee5e96454290850a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:47:cf:b3:1d:b4:33:59:8a:12:ec:67:f0:
8d:a8:df:1e:26:5b:87:e8:5a:cf:a6:da:9f:96:d9:
29:c7:67:26:c0:d4:97:5c:84:06:ea:e2:81:24:e3:
71:0a:57:8b:da:f8:42:a9:f7:85:43:c7:81:64:0b:
79:9b:4b:d9:62:45:90:06:08:a4:96:c7:ec:c3:9d:
ba:4c:65:4c:b4:26:f2:1c:06:d3:e1:e9:35:1c:2d:
12:f5:d2:ed:d7:bb:a7:57:24:0f:77:cf:3f:7e:c2:
14:81:41:05:d4:89:88:29:a2:8d:1c:f7:47:74:03:
7b:7f:6f:8f:8d:f9:26:f0:de:ce:42:53:0c:87:b5:
7f:20:11:ea:98:71:b5:91:42:7c:13:a2:b1:c8:0a:
05:98:1d:44:9e:7d:b6:b7:24:6c:0e:5e:0f:27:66:
ea:df:19:0a:25:6a:49:a8:2b:ab:7b:18:5e:24:80:
3e:d6:bc:00:46:5a:41:45:88:66:b6:51:34:e2:d0:
76:eb:f1:1b:d3:54:69:0c:a5:32:4c:5b:e6:57:dd:
45:95:d8:89:65:10:df:ad:ef:07:7c:a8:77:f4:e2:
b1:0b:00:ca:7b:a1:b0:bd:d8:ac:1b:17:9c:d7:49:
c0:5b:f5:f1:c8:be:35:9c:f7:72:7f:49:bb:c8:bf:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:FE:AC:CE:61:21:09:F9:7E:32:7E:E5:E9:64:54:29:08:50:A6
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/1Pf-rM5hIQn5fjJ-5elkVCkIUKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.144.0/22
5.10.128.0/21
5.183.248.0/22
23.90.192.0/18
31.204.80.0/21
45.80.252.0/22
45.86.96.0/22
45.89.76.0/22
45.92.180.0/22
45.129.216.0-45.129.218.255
45.133.68.0/22
45.142.108.0/22
45.152.16.0/22
46.18.120.0/21
62.192.156.0/22
79.99.160.0/21
88.218.12.0/22
92.119.232.0/22
94.154.4.0/24
94.187.128.0/19
185.20.16.0/22
185.48.252.0/22
185.86.88.0/22
185.87.100.0/22
185.98.116.0/22
185.132.64.0/22
185.133.80.0/22
185.134.156.0/22
185.135.176.0/22
185.138.116.0/22
185.163.136.0/22
185.163.212.0/22
185.163.220.0/22
185.163.228.0/22
185.169.156.0/22
185.186.88.0/22
185.191.36.0/22
185.197.108.0/22
185.241.140.0/22
185.254.8.0/22
192.214.192.0/19
195.216.140.0/22
IPv6:
2a00:41e0::/29
2a00:6780::/29
2a01:648::/29
2a05:b780::/29
2a05:c100::/29
Signature Algorithm: sha256WithRSAEncryption
17:e5:46:eb:8c:2a:71:f1:33:66:f0:ae:76:ff:41:c9:73:06:
8e:ef:67:0c:cf:48:22:a5:14:5e:1d:72:48:7e:96:fc:0d:e3:
18:83:b7:29:b6:31:88:9b:ed:b0:25:9f:23:cc:04:4c:a1:5f:
ff:e3:de:f1:31:e8:f5:08:52:68:ae:d6:0b:99:dd:88:35:51:
75:d0:8a:fd:87:84:2b:bb:c4:0f:73:9e:76:9f:21:bd:9b:6f:
c9:aa:3a:b9:79:88:ae:63:be:db:a7:93:12:a3:2f:f4:63:89:
9c:c9:2e:4b:cf:e1:79:06:9b:ca:a5:08:d9:31:10:7e:6a:cd:
1e:27:1e:c4:29:cb:55:bb:87:3f:eb:0b:cb:94:f0:a8:98:07:
8b:86:6a:55:1a:5b:5f:5c:5e:70:62:9f:fb:ae:b3:da:aa:93:
fa:5c:87:e7:e1:4e:a9:9b:b9:b7:7a:2a:a9:f5:d9:2e:ea:d2:
78:bb:41:24:21:e0:ad:b3:90:b7:0b:bf:f2:c6:96:12:9c:23:
bb:bc:c8:de:81:a8:68:b2:1b:01:8d:4f:3f:09:99:b6:db:dc:
76:29:5e:0d:00:2e:0d:14:70:78:18:f8:d8:2d:f1:b5:f1:a5:
3b:30:cc:32:76:79:05:df:cc:82:fa:53:c6:b6:ad:54:56:4c:
29:b9:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:14 2023 by rpki-client on console-fra.rpki-client.org