Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/IJsX750UEICP1TKjcpyI2zdTd-I.roa
File: IJsX750UEICP1TKjcpyI2zdTd-I.roa (raw, json)
Hash identifier: AMUAbmF17sKbjAumFcO6A0nNHyUmouuwIYpfeHF7q1M=
Subject key identifier: 20:9B:17:EF:9D:14:10:80:8F:D5:32:A3:72:9C:88:DB:37:53:77:E2
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0186AE3EDCC2D2F2D05F2FB4E67ED239FDC0
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/IJsX750UEICP1TKjcpyI2zdTd-I.roa
Signing time: Sat 04 Mar 2023 20:10:00 +0000
ROA not before: Sat 04 Mar 2023 20:10:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 80.66.196.0/22 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
45.80.188.0/22 maxlen: 24
62.133.35.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.32.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
185.248.84.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
91.200.241.0/24 maxlen: 24
45.11.45.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.176.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
185.254.75.0/24 maxlen: 24
185.254.73.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
194.124.228.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
194.36.222.0/23 maxlen: 24
94.124.116.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
185.49.32.0/22 maxlen: 24
45.130.23.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
78.142.192.0/22 maxlen: 24
194.169.180.0/23 maxlen: 24
78.142.193.0/24 maxlen: 32
45.13.199.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
109.94.168.0/22 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.220.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09::/29 maxlen: 48
2a0b:4080::/32 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a0d:de80::/29 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a03:d9c0::/29 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a0d:4bc0::/29 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ae:3e:dc:c2:d2:f2:d0:5f:2f:b4:e6:7e:d2:39:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 4 20:10:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=209b17ef9d1410808fd532a3729c88db375377e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:91:76:b1:48:27:6e:dc:9e:03:d7:d2:a5:
47:aa:4a:0e:f1:fc:54:79:e0:76:aa:44:e8:1d:ce:
07:92:7f:91:72:18:79:30:c0:69:c9:56:91:09:28:
ec:77:5f:e3:ca:20:d1:1e:84:05:25:c2:af:d5:00:
24:2d:26:2a:34:3c:fb:17:1c:62:cf:77:56:e3:ec:
66:8f:e2:16:45:ed:62:22:5a:00:f1:f4:db:79:85:
21:38:fd:ba:fc:47:b2:c9:86:83:da:96:d4:fc:ad:
34:51:ff:32:96:48:a4:e3:d2:f0:be:21:df:3c:31:
a6:71:87:c3:dc:d4:3d:98:a6:f2:d8:49:51:6b:bf:
f3:c3:fd:76:d2:56:45:4e:0c:55:2b:55:9c:d0:76:
17:70:68:55:42:7a:0a:71:74:22:c0:bf:29:be:0f:
86:d4:6a:95:24:06:56:46:97:58:cb:f7:d3:ad:39:
d3:73:80:70:0c:5c:fd:ba:b2:c3:3b:39:a5:15:bd:
1d:1b:07:00:59:d0:84:cb:c1:f1:f1:c3:63:53:f0:
b3:72:be:b8:c8:e1:de:43:05:a7:d1:26:ee:39:83:
04:fd:22:7b:2b:53:be:a3:2c:20:8a:7e:92:7d:5f:
30:45:bc:57:4b:59:33:87:dc:88:36:36:c2:6e:bf:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:17:EF:9D:14:10:80:8F:D5:32:A3:72:9C:88:DB:37:53:77:E2
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/IJsX750UEICP1TKjcpyI2zdTd-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/22
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
79.143.140.0/22
80.66.196.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
149.62.44.0/22
185.49.32.0/22
185.194.52.0/22
185.200.64.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
194.36.24.0/23
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
a1:9b:15:83:e4:ee:a8:93:c3:b1:a3:26:e9:81:14:03:1d:28:
1d:f0:2c:a0:df:9a:25:42:bf:34:68:f9:11:6d:8e:7d:1d:25:
cd:60:e0:c7:3c:c6:20:ed:60:6d:04:54:0d:7c:37:89:8f:2d:
c5:33:7b:46:8e:3a:f8:bd:03:cd:1c:69:b0:f8:be:64:4a:92:
5a:6d:96:da:d7:ec:ef:31:c6:58:d1:93:31:cd:82:1d:61:ad:
3d:c6:2f:85:50:ea:2b:30:8a:23:f6:ca:07:59:66:46:2c:5a:
91:25:89:31:56:5f:20:6b:d3:6f:2e:16:21:87:20:70:13:8a:
e2:c6:37:18:7f:50:01:b7:81:d1:a2:b1:f5:44:fe:74:c1:d3:
60:0b:fd:8e:0e:a8:4b:17:8e:38:ed:cd:54:e7:1d:9c:56:04:
55:da:c9:79:71:6b:6b:02:0c:07:56:ac:40:d2:1f:4c:d6:ab:
5e:0f:27:54:ff:51:f7:13:a3:11:e4:45:e6:bc:bd:39:82:09:
71:da:d2:a1:d6:e6:97:e1:ad:d6:f4:15:cb:35:31:f0:62:44:
d6:7a:a8:45:d3:c7:62:2d:f0:a2:ca:34:26:66:1b:e7:ed:c1:
46:11:59:40:9c:6a:b6:1b:8a:83:d7:ca:93:61:fa:49:91:6c:
7a:54:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org