Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mTOpMZplR1xXznN2Q4SJO1li8H8.roa
File: mTOpMZplR1xXznN2Q4SJO1li8H8.roa (raw, json)
Hash identifier: rjIyNVCCSRUT+nQX+oa5iSEAesYZ2FTXnlMZZ7y1wdg=
Subject key identifier: 99:33:A9:31:9A:65:47:5C:57:CE:73:76:43:84:89:3B:59:62:F0:7F
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018C78769401254C446EAB98C6E6652AE066
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mTOpMZplR1xXznN2Q4SJO1li8H8.roa
Signing time: Sun 17 Dec 2023 15:48:06 +0000
ROA not before: Sun 17 Dec 2023 15:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 949
IP address blocks: 141.98.196.0/22 maxlen: 24
80.66.196.0/22 maxlen: 24
45.142.124.0/22 maxlen: 24
45.87.92.0/22 maxlen: 24
94.124.116.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
149.62.44.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
195.245.219.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
185.213.151.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.114.136.0/24 maxlen: 24
195.245.229.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
45.143.232.0/22 maxlen: 24
194.169.54.0/23 maxlen: 24
91.200.240.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
185.194.52.0/22 maxlen: 24
185.222.221.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
2a06:57c0::/29 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a06:4fc0::/29 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a0d:de80::/29 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0d:4bc0::/29 maxlen: 48
2a12:9d00::/29 maxlen: 48
2a09:6::/32 maxlen: 48
2a07:46c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:76:94:01:25:4c:44:6e:ab:98:c6:e6:65:2a:e0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 17 15:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9933a9319a65475c57ce73764384893b5962f07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:01:92:6d:dc:3b:e5:0b:8f:55:ab:b0:8d:
02:85:82:af:0b:f1:7f:d6:44:4a:c7:c8:d2:4a:00:
3e:cb:9b:e0:57:a7:ac:7d:46:ad:de:1c:34:75:f5:
e9:84:2b:8a:5e:39:5a:3f:22:bf:df:71:f1:72:b1:
7e:d7:1b:58:22:fb:10:94:2c:eb:d9:0e:52:b1:11:
0a:2f:53:ea:85:01:50:ee:3c:31:a0:95:2b:71:5e:
02:9d:44:4e:96:da:8e:5f:9f:7e:be:68:24:7f:43:
ac:7e:df:99:34:84:f6:92:e8:e1:29:ab:95:b1:75:
8e:24:81:05:8b:27:64:9d:9b:f0:b2:29:2d:13:33:
af:1c:39:c5:b8:1b:ff:84:5f:f7:e4:57:9d:c9:cf:
c2:2f:13:5e:eb:19:ba:23:53:da:30:45:c4:6d:fc:
04:2d:c3:e1:9c:3d:15:a2:b9:a8:4c:36:10:9f:9a:
b0:b5:3b:fb:ae:5d:7e:ef:ab:c1:cf:e1:ab:00:db:
88:24:f4:de:dc:db:dd:85:61:d6:f0:4f:aa:a2:07:
a8:9e:6c:db:09:fa:3f:d7:c8:9a:4a:db:96:bf:5a:
c9:e9:46:e6:6c:df:15:a0:0a:65:85:77:db:e0:83:
4a:ff:93:6b:68:17:9e:fc:1b:f7:11:56:3f:9c:bf:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:33:A9:31:9A:65:47:5C:57:CE:73:76:43:84:89:3B:59:62:F0:7F
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/mTOpMZplR1xXznN2Q4SJO1li8H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.92.0/22
45.130.20.0/22
45.139.192.0/22
45.141.44.0/22
45.142.124.0/22
45.143.232.0/22
80.66.196.0/22
91.200.240.0/22
94.124.116.0/22
95.214.164.0/22
141.98.196.0/22
149.62.44.0/22
185.194.52.0/22
185.200.64.0/22
185.213.151.0/24
185.222.216.0/21
193.32.148.0/22
194.104.144.0/24
194.104.152.0/22
194.114.136.0/24
194.169.54.0/23
195.245.219.0/24
195.245.229.0/24
195.245.241.0-195.245.242.255
IPv6:
2a06:4fc0::/29
2a06:57c0::/29
2a07:46c0::/29
2a07:e900::/29
2a07:fa00::/29
2a09:6::/32
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:2600::/29
2a12:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
5b:e7:2f:eb:2a:e6:3b:bf:3b:96:a6:2d:ce:3e:23:86:d2:3c:
46:39:b1:01:24:9a:64:6c:b1:81:0d:67:01:9d:e2:38:c2:cc:
84:31:55:22:d5:a9:1d:e7:ac:c0:26:fc:98:70:b2:53:84:42:
50:5d:f4:a7:a4:57:a9:6e:92:4b:02:91:b1:18:34:71:49:14:
27:0c:ae:40:0e:91:09:59:31:09:04:be:b8:b1:6d:00:75:b0:
28:ae:6c:79:ad:c4:ff:88:60:99:5a:b3:59:3f:42:74:f1:a0:
95:90:99:a2:d8:80:de:62:6b:3b:6c:0c:65:a1:29:c5:2e:89:
13:0e:8b:6a:27:43:23:35:e8:a8:ca:b1:f2:38:13:84:f9:51:
f9:f0:b7:dd:9b:ec:65:6c:60:59:0d:a1:88:e6:62:e0:67:c7:
aa:21:bf:6e:72:31:a8:5c:86:e7:24:59:56:d8:0d:a4:ec:dd:
ec:e3:1b:ea:7f:e9:c7:ed:51:02:cf:ec:2c:44:ba:76:f2:53:
4d:c3:21:5b:84:5b:a6:f7:1d:7a:ca:2b:b2:24:4d:cc:d0:54:
b6:b4:74:9c:4c:e6:c9:51:12:e4:38:9f:14:f5:35:01:a5:5b:
78:d6:64:c8:9e:80:7f:58:ae:b9:2d:e0:6f:24:f3:db:05:0e:
54:8d:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:43 2024 by rpki-client on console-ams.rpki-client.org