Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/E2YBXistJzLCcHp2loVs-I1N82E.roa
File: E2YBXistJzLCcHp2loVs-I1N82E.roa (raw, json)
Hash identifier: 0E4Sy1Fx9hTwZEr6Q1tcw31zuYH463Dn2a4NtS0m61w=
Subject key identifier: 13:66:01:5E:2B:2D:27:32:C2:70:7A:76:96:85:6C:F8:8D:4D:F3:61
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DC854D73148F04060EF03FC8A09D1
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/E2YBXistJzLCcHp2loVs-I1N82E.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8888
IP address blocks: 80.66.196.0/22 maxlen: 24
141.98.196.0/22 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
149.62.44.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
45.139.192.0/22 maxlen: 24
45.92.157.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
45.130.20.0/22 maxlen: 24
195.245.242.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
95.214.164.0/22 maxlen: 24
194.36.27.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/21 maxlen: 24
185.194.52.0/22 maxlen: 24
2a09:0:15::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09::/29 maxlen: 128
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a06:4fc0::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a09:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Mar 2023 15:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c8:54:d7:31:48:f0:40:60:ef:03:fc:8a:09:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1366015e2b2d2732c2707a7696856cf88d4df361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:c7:50:45:f6:bf:ef:a1:c3:03:91:24:7c:
03:fa:23:d5:4f:f0:48:45:5f:f5:8f:ec:8c:6a:94:
8a:5b:3d:2f:e9:6a:1b:9a:32:c0:12:c9:00:1b:6a:
ae:ed:e3:80:2f:95:89:5a:57:a5:ee:d2:5a:14:f7:
23:27:02:16:00:9b:57:20:12:f0:a2:1a:13:db:55:
51:72:40:85:b2:db:5a:29:6d:4a:c7:f0:6a:24:43:
5a:53:29:db:bd:4d:f5:34:f1:19:62:f9:12:b3:cd:
f9:71:55:23:34:23:79:4a:bc:74:0c:1a:2e:17:48:
0c:8f:4d:f1:90:7a:ca:53:48:62:a4:65:5c:4c:9c:
e3:16:f5:d5:5e:5c:df:bc:3f:b5:dc:98:d4:23:e7:
58:4a:a2:57:b7:9b:91:47:04:2a:3d:e9:2f:f8:b1:
81:81:b0:fc:a9:04:64:eb:bb:d3:f0:62:e3:90:f9:
e2:55:e1:56:8b:5f:54:85:51:50:9e:39:5a:d7:86:
62:87:a7:9c:c4:b2:d7:58:2f:bf:d0:d3:64:1d:b6:
b8:98:5b:55:20:8b:a5:18:72:f4:a1:ee:ac:dd:c0:
e9:e8:21:b5:90:c4:6b:77:a4:c1:6a:06:40:10:e4:
a1:8c:1e:59:4d:e0:21:0f:d1:87:11:77:2a:48:31:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:01:5E:2B:2D:27:32:C2:70:7A:76:96:85:6C:F8:8D:4D:F3:61
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/E2YBXistJzLCcHp2loVs-I1N82E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/22
80.66.196.0/22
94.124.116.0/22
95.214.164.0/22
141.98.196.0/22
149.62.44.0/22
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
193.111.30.0/23
194.36.24.0/24
194.36.27.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a09::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
80:bc:a5:d8:d7:d8:09:33:e2:fb:db:58:2d:8b:65:69:00:9e:
34:34:00:36:7e:90:38:bc:ed:bc:7f:f8:9a:24:d6:c7:d6:d9:
b3:11:bf:9e:85:9b:77:1a:50:63:5f:de:97:3e:64:cb:7a:2b:
17:b3:eb:db:6d:ab:ac:20:09:2f:54:94:54:dd:f0:32:ed:7b:
41:e7:7b:a2:50:83:22:68:67:7c:6f:cc:45:d7:5e:1f:49:ae:
ac:7a:d7:b8:83:6f:7c:f8:00:b5:b7:82:6b:de:fd:37:c3:a9:
28:7c:ae:3f:61:5e:bc:49:00:bb:6b:d3:30:2d:ce:18:da:cd:
21:61:a1:80:ba:21:cc:24:20:a2:15:56:f9:59:13:99:92:0e:
1e:07:cd:fa:da:54:93:f3:00:62:85:6b:1f:80:ab:72:1a:70:
eb:6b:f1:a1:af:fe:60:63:0b:cf:12:42:05:d6:39:76:ea:49:
01:07:e3:1a:48:89:90:08:ef:84:06:0c:db:22:37:7c:d3:78:
7a:35:22:e0:26:ea:8f:8b:ea:0b:4b:7c:fb:29:b0:01:d9:fb:
84:39:72:cb:97:50:6a:3f:fc:52:26:17:54:72:55:d9:9b:95:
db:7f:51:c9:56:40:18:d5:96:82:00:70:e2:2c:0c:e6:9f:85:
7d:77:54:f5
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAYVvHchU1zFI8EBg7wP8ignRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMTAxMjA1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzY2MDE1ZTJiMmQyNzMyYzI3MDdhNzY5Njg1NmNmODhkNGRmMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqXHUEX2v++hwwORJHwD+iPVT/BI
RV/1j+yMapSKWz0v6WobmjLAEskAG2qu7eOAL5WJWlel7tJaFPcjJwIWAJtXIBLw
ohoT21VRckCFsttaKW1Kx/BqJENaUynbvU31NPEZYvkSs835cVUjNCN5Srx0DBou
F0gMj03xkHrKU0hipGVcTJzjFvXVXlzfvD+13JjUI+dYSqJXt5uRRwQqPekv+LGB
gbD8qQRk67vT8GLjkPniVeFWi19UhVFQnjla14Zih6ecxLLXWC+/0NNkHba4mFtV
IIulGHL0oe6s3cDp6CG1kMRrd6TBagZAEOShjB5ZTeAhD9GHEXcqSDHbcwIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFBNmAV4rLScywnB6dpaFbPiNTfNhMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvRTJZQlhpc3RKekxDY0hwMmxvVnMtSTFOODJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBkwQCAAEwgYwD
BAAtWtIDBAAtXJ0DBAItghQDBAItg5gDBAIti8ADBAItj+gDBAItkzADBAJQQsQD
BAJefHQDBAJf1qQDBAKNYsQDBAKVPiwDBAK5wjQDBAK5yEADBAO53tgDBAHBbx4D
BADCJBgDBADCJBsDBALCaJgDBAHCqTYDBADD9dswDAMEAMP18QMEAMP18jBoBAIA
AjBiAwUDKgZPwAMFAyoGV8ADBQMqB+kAAwUDKgf6AAMFAyoJAAADBQMqDO1AAwUD
Kg0fwAMFAyoNNkADBQMqDUNAAwUDKg1LwAMFAyoNdUADBQMqDd6AAwUDKg5iAAMF
AyoQJgAwDQYJKoZIhvcNAQELBQADggEBAIC8pdjX2Akz4vvbWC2LZWkAnjQ0ADZ+
kDi87bx/+Jok1sfW2bMRv56Fm3caUGNf3pc+ZMt6Kxez69ttq6wgCS9UlFTd8DLt
e0Hne6JQgyJoZ3xvzEXXXh9Jrqx617iDb3z4ALW3gmve/TfDqSh8rj9hXrxJALtr
0zAtzhjazSFhoYC6IcwkIKIVVvlZE5mSDh4HzfraVJPzAGKFax+Aq3IacOtr8aGv
/mBjC88SQgXWOXbqSQEH4xpIiZAI74QGDNsiN3zTeHo1IuAm6o+L6gtLfPspsAHZ
+4Q5csuXUGo//FImF1RyVdmbldt/UclWQBjVloIAcOIsDOafhX13VPU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org