Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/4dSGVV6W3HKA7BRvDFNi4Ut07QI.roa
File: 4dSGVV6W3HKA7BRvDFNi4Ut07QI.roa (raw, json)
Hash identifier: nrWEQBGzXxcPMnISLb6n2fO9u/EhIkwsVAhzgxyyrpc=
Subject key identifier: E1:D4:86:55:5E:96:DC:72:80:EC:14:6F:0C:53:62:E1:4B:74:ED:02
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 018CC649C0A54019651368A607CA445C9F01
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/4dSGVV6W3HKA7BRvDFNi4Ut07QI.roa
Signing time: Mon 01 Jan 2024 18:29:31 +0000
ROA not before: Mon 01 Jan 2024 18:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41722
IP address blocks: 185.174.165.0/24 maxlen: 24
185.174.166.0/24 maxlen: 24
185.174.167.0/24 maxlen: 24
91.142.80.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.250.152.0/24 maxlen: 24
178.250.154.0/24 maxlen: 24
178.250.155.0/24 maxlen: 24
178.250.153.0/24 maxlen: 24
185.73.212.0/24 maxlen: 24
185.73.213.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.162.94.0/24 maxlen: 24
185.162.94.0/23 maxlen: 23
185.147.80.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
2a07:a501::/32 maxlen: 32
2a07:a500::/32 maxlen: 32
2a07:a502::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:c0:a5:40:19:65:13:68:a6:07:ca:44:5c:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Jan 1 18:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1d486555e96dc7280ec146f0c5362e14b74ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:de:8e:b6:53:61:1a:9e:be:e1:11:0e:84:
73:1a:7e:2e:be:ba:16:e5:9d:77:2b:d8:7a:77:cf:
e7:41:8b:2a:2e:64:cb:6f:5e:c4:a7:af:3e:c2:77:
6d:c6:08:b4:f8:6f:4b:f6:ac:71:ff:9e:3e:9d:6c:
54:c0:71:98:56:da:a6:49:d5:27:8a:b6:31:28:16:
dc:a5:b2:b4:15:d3:e2:a3:38:5a:d8:60:91:98:0f:
f5:67:88:3d:1f:29:66:58:a3:6d:47:6f:ac:fc:fc:
bc:bc:69:76:c0:1e:9f:63:8c:3a:66:f8:7c:d4:13:
26:90:f6:09:52:35:5e:ee:c5:e9:c6:47:78:1f:e5:
f4:e8:57:6c:3f:80:12:e3:50:9d:63:aa:05:11:5d:
f5:77:2a:a2:fe:37:f4:b6:51:ab:02:a3:a9:5b:e3:
b5:20:7e:f9:69:a8:c4:70:3f:63:61:3a:4a:0e:c1:
30:bf:9e:7f:14:da:45:3f:7e:4b:db:ce:1b:60:9d:
12:33:04:89:6d:22:24:4f:8f:44:04:42:ae:78:92:
be:5d:49:95:78:e8:37:bb:1d:5c:1f:f7:b0:0b:67:
25:c4:e2:5d:48:f9:50:58:6f:cd:cb:48:6f:b3:3e:
52:26:ec:78:aa:38:e9:95:e2:29:b2:47:3f:d2:63:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D4:86:55:5E:96:DC:72:80:EC:14:6F:0C:53:62:E1:4B:74:ED:02
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/4dSGVV6W3HKA7BRvDFNi4Ut07QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
178.250.152.0/22
185.53.20.0/22
185.73.212.0/23
185.147.80.0/22
185.162.92.0/22
185.174.165.0-185.174.167.255
IPv6:
2a03:21c0::/32
2a07:a500::-2a07:a502:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:e2:34:d7:3f:f8:08:32:62:05:97:25:61:90:24:19:89:86:
f2:98:02:34:f2:2f:f2:9a:04:ea:4d:a1:9f:a3:c1:25:b3:53:
0b:de:13:a0:10:9e:5a:97:d9:6c:81:9b:f3:25:5a:39:64:5b:
04:99:12:3e:ab:1a:29:d1:33:f9:52:54:7c:3a:fb:2b:90:19:
4e:1b:6c:38:e4:ff:f0:c9:b4:2e:58:20:cb:13:d0:25:f1:d0:
20:3e:4b:50:6f:c4:8b:c8:a8:56:df:c6:f5:f9:aa:39:26:0c:
8d:42:7f:b6:e5:60:56:6d:d3:1e:a1:d4:48:40:ee:9b:76:e0:
cb:bf:dc:18:96:77:ff:66:03:35:d1:f4:85:b6:13:fa:39:99:
c5:b5:ef:9f:53:ff:39:86:36:4c:49:3d:a6:4b:f7:4b:0a:eb:
56:3a:71:a6:d0:84:b3:88:8b:7e:30:0b:f5:29:0b:a2:43:43:
62:52:33:07:cc:cf:9f:08:19:a3:66:fc:2c:4b:81:9a:a9:1d:
f4:0c:19:b0:83:a2:3b:f2:16:a7:cf:01:36:ed:51:50:b3:a8:
9b:14:e3:52:d0:e0:f8:6c:e1:42:cd:0c:27:56:91:78:a6:05:
b4:b9:32:f3:58:87:b0:46:3d:1e:9a:49:84:a1:86:ba:52:cf:
97:2c:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:04 2025 by rpki-client