Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/0lGou1GjTP4nLPNfCoQGEFl67r8.roa
File: 0lGou1GjTP4nLPNfCoQGEFl67r8.roa (raw, json)
Hash identifier: m+13GE/yW3TOOb3ylT0jOPGxYoafKtzLQUTdwTXArtA=
Subject key identifier: D2:51:A8:BB:51:A3:4C:FE:27:2C:F3:5F:0A:84:06:10:59:7A:EE:BF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 01877EA602334E02EAEB86ED2A89E78D177F
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/0lGou1GjTP4nLPNfCoQGEFl67r8.roa
Signing time: Fri 14 Apr 2023 07:23:41 +0000
ROA not before: Fri 14 Apr 2023 07:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202596
IP address blocks: 45.12.240.0/22 maxlen: 22
185.225.44.0/22 maxlen: 22
193.39.240.0/22 maxlen: 22
160.19.180.0/22 maxlen: 22
195.26.112.0/20 maxlen: 20
185.96.220.0/22 maxlen: 22
80.249.16.0/20 maxlen: 20
130.195.48.0/22 maxlen: 22
130.195.60.0/22 maxlen: 22
176.97.152.0/22 maxlen: 22
185.239.32.0/22 maxlen: 22
95.141.16.0/20 maxlen: 20
185.254.136.0/22 maxlen: 22
85.8.164.0/22 maxlen: 22
185.247.172.0/22 maxlen: 22
62.197.32.0/21 maxlen: 21
62.197.42.0/23 maxlen: 23
62.197.46.0/23 maxlen: 23
62.197.56.0/21 maxlen: 21
62.197.52.0/22 maxlen: 22
185.106.72.0/22 maxlen: 22
185.248.104.0/22 maxlen: 22
45.133.120.0/21 maxlen: 21
45.133.128.0/22 maxlen: 22
193.29.28.0/22 maxlen: 22
193.46.20.0/22 maxlen: 22
185.14.88.0/22 maxlen: 22
45.159.64.0/23 maxlen: 23
185.236.184.0/22 maxlen: 22
45.139.12.0/22 maxlen: 22
161.38.0.0/21 maxlen: 21
185.159.76.0/22 maxlen: 22
185.176.160.0/22 maxlen: 22
185.250.188.0/22 maxlen: 22
45.92.120.0/22 maxlen: 22
45.149.188.0/22 maxlen: 22
185.240.108.0/22 maxlen: 22
45.95.156.0/22 maxlen: 22
45.152.232.0/22 maxlen: 22
86.105.196.0/24 maxlen: 24
194.6.251.0/24 maxlen: 24
194.6.252.0/24 maxlen: 24
194.6.254.0/24 maxlen: 24
45.145.48.0/22 maxlen: 22
185.222.80.0/22 maxlen: 22
45.141.132.0/22 maxlen: 22
45.80.244.0/22 maxlen: 22
185.111.72.0/22 maxlen: 22
45.134.228.0/22 maxlen: 22
158.41.48.0/20 maxlen: 20
185.226.36.0/22 maxlen: 22
185.179.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:a6:02:33:4e:02:ea:eb:86:ed:2a:89:e7:8d:17:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Apr 14 07:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d251a8bb51a34cfe272cf35f0a840610597aeebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:37:4e:69:d3:19:18:8b:c0:7d:36:d4:ad:
23:84:ff:67:86:82:a0:b1:df:1e:20:85:ce:87:3d:
17:6a:ea:71:69:7b:38:4a:50:22:ad:17:e9:5a:a9:
d9:40:b5:34:4b:8e:ab:e1:a8:18:5c:cc:9e:32:3e:
98:b9:67:8c:53:46:7c:1d:5c:88:85:76:5c:5a:64:
47:fc:3b:1d:c5:0d:35:50:e6:c8:12:51:87:ae:0d:
3e:3d:9a:bd:a3:d6:8a:f7:f5:84:5a:86:be:d5:d3:
0b:d5:38:cd:44:03:8f:bf:2b:c9:2f:a8:b4:dd:28:
b4:d0:85:32:cd:ea:c6:ab:6b:0c:b2:a6:cc:20:54:
77:a6:cb:ff:fb:c6:1b:db:81:66:80:32:98:b4:19:
c5:81:0b:1e:2e:0e:93:a5:d4:55:43:e2:24:66:1e:
ab:99:c3:75:f1:bd:52:ef:c4:c3:c4:fb:26:ba:35:
cf:68:4f:8f:cf:c8:b8:c8:ed:06:5c:16:2b:d9:07:
d6:58:af:20:06:aa:aa:09:4e:1a:c5:e4:ad:18:11:
56:82:b0:02:b1:7b:c9:ae:01:ec:0a:f0:aa:2a:1f:
87:28:5e:43:71:05:3c:10:8c:ca:50:44:56:9c:78:
3c:70:28:04:31:54:57:c5:67:c1:59:af:0a:05:65:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:A8:BB:51:A3:4C:FE:27:2C:F3:5F:0A:84:06:10:59:7A:EE:BF
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/0lGou1GjTP4nLPNfCoQGEFl67r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.240.0/22
45.80.244.0/22
45.92.120.0/22
45.95.156.0/22
45.133.120.0-45.133.131.255
45.134.228.0/22
45.139.12.0/22
45.141.132.0/22
45.145.48.0/22
45.149.188.0/22
45.152.232.0/22
45.159.64.0/23
62.197.32.0/21
62.197.42.0/23
62.197.46.0/23
62.197.52.0-62.197.63.255
80.249.16.0/20
85.8.164.0/22
86.105.196.0/24
95.141.16.0/20
130.195.48.0/22
130.195.60.0/22
158.41.48.0/20
160.19.180.0/22
161.38.0.0/21
176.97.152.0/22
185.14.88.0/22
185.96.220.0/22
185.106.72.0/22
185.111.72.0/22
185.159.76.0/22
185.176.160.0/22
185.179.12.0/22
185.222.80.0/22
185.225.44.0/22
185.226.36.0/22
185.236.184.0/22
185.239.32.0/22
185.240.108.0/22
185.247.172.0/22
185.248.104.0/22
185.250.188.0/22
185.254.136.0/22
193.29.28.0/22
193.39.240.0/22
193.46.20.0/22
194.6.251.0-194.6.252.255
194.6.254.0/24
195.26.112.0/20
Signature Algorithm: sha256WithRSAEncryption
11:64:a1:2c:c9:5c:80:c0:f0:0e:2d:aa:82:f9:17:48:1b:e1:
ff:c0:0d:aa:97:11:61:1d:ab:cd:70:42:9a:87:b5:04:98:5e:
44:b1:89:2a:cd:86:36:4e:e6:f4:61:11:48:de:8c:6e:a6:2b:
99:11:2d:b2:70:1a:0d:c6:b8:c3:ce:36:6a:5e:ec:7c:86:6d:
7c:ee:23:89:d6:09:be:8e:a7:25:a7:0b:be:8f:54:1a:e5:0b:
46:f3:aa:5a:24:2e:a6:a5:5c:32:10:59:e9:0e:a2:6c:62:01:
52:de:d0:31:1b:d7:87:6e:ea:cd:f2:82:b1:7a:96:ff:52:c0:
91:40:6d:ed:40:3e:c9:59:65:58:df:47:f8:3f:d7:ec:25:7a:
5d:1b:dc:19:65:6a:a4:61:0f:15:a6:92:29:ee:4a:4c:ce:a6:
19:b2:04:62:e2:0a:7b:6f:52:b3:85:9f:d3:98:e7:08:26:d3:
04:06:49:9a:cc:06:c7:0f:ef:1a:b3:63:29:4c:57:78:68:6a:
3c:77:68:96:3b:bc:c6:59:5f:28:26:92:12:3e:78:70:e9:a3:
90:af:c4:d7:4b:38:10:69:59:21:ed:f1:46:a1:67:e1:55:1d:
aa:22:54:8f:3e:bd:df:20:7e:7d:8a:9d:0c:ef:2d:b2:13:09:
bd:cb:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:59 2024 by rpki-client on console-fra.rpki-client.org