Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EuTnojKRUU-Ui60NuT6sKp4Bhu4.roa
File: EuTnojKRUU-Ui60NuT6sKp4Bhu4.roa (raw, json)
Hash identifier: jRsnjMF+ZIEAPOTh+0Ahu0aqehOpcEo7Li9GMZq4Ryw=
Subject key identifier: 12:E4:E7:A2:32:91:51:4F:94:8B:AD:0D:B9:3E:AC:2A:9E:01:86:EE
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0186CC390509AFE36E555A9C5028B7BA8D03
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EuTnojKRUU-Ui60NuT6sKp4Bhu4.roa
Signing time: Fri 10 Mar 2023 15:52:14 +0000
ROA not before: Fri 10 Mar 2023 15:52:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23959
IP address blocks: 45.66.216.0/22 maxlen: 24
92.60.43.0/24 maxlen: 24
94.124.119.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
185.184.223.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
45.130.21.0/24 maxlen: 24
176.119.148.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
95.214.165.0/24 maxlen: 24
194.36.27.0/24 maxlen: 24
45.143.232.0/24 maxlen: 24
95.214.164.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.66.128.0/22 maxlen: 24
91.200.240.0/24 maxlen: 24
185.194.54.0/24 maxlen: 24
91.200.242.0/24 maxlen: 24
91.200.243.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
141.98.196.0/24 maxlen: 24
141.98.198.0/24 maxlen: 24
141.98.197.0/24 maxlen: 24
45.159.48.0/22 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.142.125.0/24 maxlen: 24
45.142.127.0/24 maxlen: 24
45.142.126.0/24 maxlen: 24
147.78.240.0/21 maxlen: 24
185.200.64.0/24 maxlen: 24
149.62.44.0/24 maxlen: 24
185.200.66.0/24 maxlen: 24
149.62.46.0/24 maxlen: 24
149.62.47.0/24 maxlen: 24
45.149.156.0/22 maxlen: 24
78.142.228.0/22 maxlen: 24
213.232.112.0/22 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.155.0/24 maxlen: 24
194.104.153.0/24 maxlen: 24
194.104.154.0/24 maxlen: 24
45.14.64.0/22 maxlen: 24
45.14.70.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
2a09:7::/36 maxlen: 48
2a0d:c7c1::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:39:05:09:af:e3:6e:55:5a:9c:50:28:b7:ba:8d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 10 15:52:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e4e7a23291514f948bad0db93eac2a9e0186ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:a3:88:c0:bd:b9:d0:f7:4d:ba:f8:54:c3:
60:95:e3:bf:8e:f2:46:dc:03:7c:a3:40:84:3a:85:
e9:df:cc:fe:7f:11:e2:ef:20:4f:c6:93:86:3b:c0:
7b:7a:a8:4f:63:58:bf:8f:98:83:23:da:bf:dc:69:
f9:f3:be:ef:99:36:e5:aa:51:96:80:3a:08:d7:96:
44:4a:e6:36:05:9a:65:7e:88:44:cd:f6:c6:bb:29:
2b:61:20:95:4f:54:83:47:0e:71:c3:8e:fd:a1:9e:
d3:32:d1:04:96:e2:9e:1f:e8:b5:bc:2b:62:1d:51:
b2:8f:3a:59:8d:01:47:ea:e9:b5:94:a1:83:a4:70:
6c:79:bd:10:91:37:e0:4a:12:47:aa:48:1d:f9:98:
07:48:e0:81:04:92:81:de:1c:cf:09:d1:fc:1e:bd:
84:ce:ed:bb:ca:97:51:8f:8f:c2:9e:5f:d3:a4:ca:
95:30:e0:6c:db:94:52:13:15:b6:2d:7d:ef:57:96:
b5:1b:88:79:1a:fb:d3:8f:a7:7c:4d:0d:35:cc:a3:
8f:a4:b2:6c:8f:04:64:75:50:e8:64:27:df:7f:28:
c8:71:d2:64:1c:90:b3:85:d7:09:1d:f8:9f:b6:cf:
4c:96:48:8e:be:92:64:e5:2f:ee:f7:bb:c2:2c:57:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:E7:A2:32:91:51:4F:94:8B:AD:0D:B9:3E:AC:2A:9E:01:86:EE
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EuTnojKRUU-Ui60NuT6sKp4Bhu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
45.14.70.0/24
45.14.105.0/24
45.14.107.0/24
45.66.128.0/22
45.66.216.0/22
45.130.21.0/24
45.142.125.0-45.142.127.255
45.143.232.0/22
45.149.156.0/22
45.159.48.0/22
78.142.228.0/22
79.143.140.0/22
88.214.20.0/22
91.200.240.0/24
91.200.242.0/23
92.60.43.0/24
94.124.119.0/24
95.214.164.0/23
141.98.196.0-141.98.198.255
147.78.240.0/21
149.62.44.0/24
149.62.46.0/23
176.119.148.0/22
185.184.223.0/24
185.194.54.0/24
185.200.64.0/24
185.200.66.0/24
193.32.148.0/22
193.111.30.0/23
194.36.24.0/24
194.36.27.0/24
194.104.153.0-194.104.155.255
194.169.54.0/24
195.245.219.0/24
195.245.241.0-195.245.242.255
213.232.112.0/22
IPv6:
2a09:7::/36
2a0d:c7c1::/32
Signature Algorithm: sha256WithRSAEncryption
85:c7:e1:e4:13:15:75:c2:4c:4c:81:08:da:25:45:77:3d:c8:
40:f9:ff:db:c3:d3:f4:79:d7:fb:4a:5f:ca:aa:65:62:e5:c4:
63:ec:7d:b8:15:68:3a:1e:1a:8e:f4:21:b7:0d:dc:e9:da:e8:
f5:88:48:c3:df:78:7d:43:da:90:cd:31:e7:0f:f3:eb:91:64:
d2:a6:e4:a2:93:2c:df:13:d4:2d:27:30:1a:7f:2f:b8:8f:7e:
3e:66:20:b4:cb:5a:a9:ab:e3:e7:ad:c7:67:e1:ab:19:8e:df:
25:d3:1a:d5:7d:99:c9:27:ab:c1:2d:db:64:12:3f:3d:6b:24:
80:44:52:00:2d:29:11:ec:18:9b:a6:34:8e:67:5d:01:61:37:
8a:ba:be:37:de:f7:62:2e:53:53:89:71:e7:9f:fb:76:7e:64:
33:9f:5b:a9:5b:70:87:37:62:11:ad:3a:72:63:8b:c9:ee:a4:
b9:d6:05:c1:c5:cf:14:f7:9f:59:72:b8:46:fd:df:4b:98:5b:
16:11:6c:ed:ac:90:a0:6f:21:81:c9:1f:ac:e5:25:dd:6b:fd:
90:24:4f:0f:61:40:5d:62:12:3f:f5:fc:69:8e:e1:04:a8:20:
9a:2d:6c:2d:a7:f1:70:39:d7:70:da:3c:3e:91:a7:d0:c6:5a:
3e:66:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:58 2023 by rpki-client on console-fra.rpki-client.org