Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/euUAHF2WsSIfWtDEtiFxi3wirEw.roa
File: euUAHF2WsSIfWtDEtiFxi3wirEw.roa (raw, json)
Hash identifier: tnaOg/hSKqP+iY2y30j9MRrJ/dHz9hIEJ2Tt9vLlfdc=
Subject key identifier: 7A:E5:00:1C:5D:96:B1:22:1F:5A:D0:C4:B6:21:71:8B:7C:22:AC:4C
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01856F94BD627EA02138316F3413383D3874
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/euUAHF2WsSIfWtDEtiFxi3wirEw.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57809
IP address blocks: 192.214.192.0/19 maxlen: 19
185.87.100.0/22 maxlen: 22
23.90.192.0/18 maxlen: 18
185.20.16.0/22 maxlen: 22
185.134.156.0/22 maxlen: 22
45.133.68.0/22 maxlen: 22
185.133.80.0/22 maxlen: 22
79.99.160.0/21 maxlen: 21
92.119.232.0/22 maxlen: 22
185.197.108.0/22 maxlen: 22
5.183.248.0/22 maxlen: 22
45.89.76.0/22 maxlen: 22
45.92.180.0/22 maxlen: 22
185.48.252.0/22 maxlen: 22
45.129.218.0/24 maxlen: 24
185.163.136.0/22 maxlen: 22
45.129.216.0/24 maxlen: 24
45.129.217.0/24 maxlen: 24
185.241.140.0/22 maxlen: 22
94.154.4.0/24 maxlen: 24
88.218.12.0/22 maxlen: 22
185.191.36.0/22 maxlen: 22
185.163.212.0/22 maxlen: 22
185.86.88.0/22 maxlen: 22
45.86.96.0/22 maxlen: 22
185.163.220.0/22 maxlen: 22
31.204.80.0/21 maxlen: 21
185.163.228.0/22 maxlen: 22
94.187.128.0/19 maxlen: 19
2.59.144.0/22 maxlen: 22
185.186.88.0/22 maxlen: 22
185.169.156.0/22 maxlen: 22
185.132.64.0/22 maxlen: 22
185.135.176.0/22 maxlen: 22
45.142.108.0/22 maxlen: 22
195.216.140.0/22 maxlen: 22
46.18.120.0/22 maxlen: 22
46.18.124.0/24 maxlen: 24
46.18.125.0/24 maxlen: 24
46.18.126.0/23 maxlen: 23
185.254.8.0/22 maxlen: 22
185.138.116.0/22 maxlen: 22
5.10.128.0/21 maxlen: 21
45.80.252.0/22 maxlen: 22
185.98.116.0/22 maxlen: 22
45.152.16.0/22 maxlen: 22
62.192.156.0/22 maxlen: 22
2a00:41e0::/29 maxlen: 32
2a05:b780::/29 maxlen: 29
2a01:648::/29 maxlen: 32
2a00:6780::/29 maxlen: 32
2a05:c100::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Jul 2023 14:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bd:62:7e:a0:21:38:31:6f:34:13:38:3d:38:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ae5001c5d96b1221f5ad0c4b621718b7c22ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:d8:54:0d:6a:55:16:38:61:98:c8:2f:40:
7e:be:6d:9f:20:60:64:4f:ef:d8:14:71:ce:79:4d:
0e:eb:95:a3:17:a5:d8:dd:e8:5c:f5:28:a1:3a:5c:
f6:47:54:d2:55:cf:df:77:07:d8:59:49:95:15:8e:
96:b0:32:33:f3:57:71:24:a3:55:66:03:6b:19:20:
8d:d5:3f:07:0e:bc:bf:b4:03:a0:e8:ef:50:53:d9:
14:46:9b:fc:00:18:06:da:65:ee:e3:25:2e:a4:7a:
ab:37:42:21:cd:2a:8c:60:04:58:3d:ad:a9:9f:5f:
ca:9f:98:58:58:2c:5f:2c:11:09:f5:22:a6:2b:29:
fb:ee:76:f1:f8:e5:47:af:85:1f:02:68:e2:96:a3:
47:ac:b4:be:f1:9b:40:90:c1:a3:11:84:c7:3d:9f:
ba:3f:43:84:57:46:0b:67:d2:fa:ba:cb:45:79:86:
45:71:b4:ff:c4:20:40:52:ea:a0:47:e9:6e:7a:08:
29:5d:e3:40:7b:a9:46:ad:1e:aa:21:63:00:f6:f0:
b1:c2:53:c4:8f:9b:13:45:4f:ed:83:48:58:51:24:
6c:98:c5:4d:42:43:a9:76:a0:81:89:2a:fb:5d:1e:
cf:69:10:1b:90:ab:9f:fb:93:ab:7c:35:0a:ba:b3:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:00:1C:5D:96:B1:22:1F:5A:D0:C4:B6:21:71:8B:7C:22:AC:4C
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/euUAHF2WsSIfWtDEtiFxi3wirEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.144.0/22
5.10.128.0/21
5.183.248.0/22
23.90.192.0/18
31.204.80.0/21
45.80.252.0/22
45.86.96.0/22
45.89.76.0/22
45.92.180.0/22
45.129.216.0-45.129.218.255
45.133.68.0/22
45.142.108.0/22
45.152.16.0/22
46.18.120.0/21
62.192.156.0/22
79.99.160.0/21
88.218.12.0/22
92.119.232.0/22
94.154.4.0/24
94.187.128.0/19
185.20.16.0/22
185.48.252.0/22
185.86.88.0/22
185.87.100.0/22
185.98.116.0/22
185.132.64.0/22
185.133.80.0/22
185.134.156.0/22
185.135.176.0/22
185.138.116.0/22
185.163.136.0/22
185.163.212.0/22
185.163.220.0/22
185.163.228.0/22
185.169.156.0/22
185.186.88.0/22
185.191.36.0/22
185.197.108.0/22
185.241.140.0/22
185.254.8.0/22
192.214.192.0/19
195.216.140.0/22
IPv6:
2a00:41e0::/29
2a00:6780::/29
2a01:648::/29
2a05:b780::/29
2a05:c100::/29
Signature Algorithm: sha256WithRSAEncryption
6e:22:ba:e0:66:60:56:b1:d3:92:03:2c:73:26:7c:ae:39:e8:
c7:7c:9b:51:c4:f3:ee:ab:83:02:3f:02:d4:c3:f6:cf:9d:eb:
52:2d:60:6b:4b:16:94:c9:20:72:38:95:39:12:bd:a3:a2:4e:
f5:a7:28:e5:0f:88:9a:ea:e2:a9:f1:d6:5f:ba:99:67:29:74:
e3:97:22:4a:07:b8:f8:78:f3:2d:8a:3d:71:8f:67:51:3a:33:
e3:f5:9f:f7:e7:33:b6:f5:be:5a:f1:f5:2b:88:c4:f9:ee:61:
d6:b5:56:ac:76:b5:7d:de:74:44:5d:f2:84:0b:5b:ef:b0:71:
f6:12:ec:60:62:4e:76:61:2d:ae:25:5c:81:24:7a:d7:a2:48:
a9:15:61:d3:5c:69:5b:ca:2f:4b:00:d4:2c:e3:b9:f4:72:e4:
d3:6d:2c:e0:8f:a5:b2:42:d6:89:dc:76:07:92:f4:37:bf:07:
eb:56:2a:99:e4:ab:56:d3:3e:9d:37:a0:4a:1d:e4:b8:a6:63:
2d:af:0e:ec:04:6d:06:08:bd:0d:70:9c:15:92:d3:c1:f4:99:
5e:fb:d5:5b:41:96:3a:9e:72:86:0e:be:a2:bc:35:70:30:c4:
1b:8c:88:34:51:60:a3:82:ee:97:73:21:18:0a:32:1a:1f:93:
a9:09:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org