Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/zPNB_6xvLjmUBOuOu_lOq3HtWvo.roa
File: zPNB_6xvLjmUBOuOu_lOq3HtWvo.roa (raw, json)
Hash identifier: 46G7QeusOIss1j7gUFWMtfAYqD2QG/xgVHt7drfbKfo=
Subject key identifier: CC:F3:41:FF:AC:6F:2E:39:94:04:EB:8E:BB:F9:4E:AB:71:ED:5A:FA
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 0185711E6C9181B2EF63AB982CB2F4F3FDC1
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/zPNB_6xvLjmUBOuOu_lOq3HtWvo.roa
Signing time: Mon 02 Jan 2023 06:14:57 +0000
ROA not before: Mon 02 Jan 2023 06:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197540
IP address blocks: 45.157.176.0/22 maxlen: 22
37.120.160.0/19 maxlen: 32
185.16.60.0/22 maxlen: 32
37.221.192.0/21 maxlen: 32
85.235.64.0/22 maxlen: 22
185.228.136.0/22 maxlen: 32
92.60.36.0/22 maxlen: 22
194.59.204.0/22 maxlen: 22
45.83.104.0/22 maxlen: 22
185.194.140.0/22 maxlen: 22
81.16.16.0/22 maxlen: 22
5.181.48.0/22 maxlen: 22
194.13.80.0/22 maxlen: 22
46.38.240.0/21 maxlen: 32
46.38.248.0/22 maxlen: 32
185.207.104.0/22 maxlen: 32
46.38.252.0/22 maxlen: 32
185.170.112.0/22 maxlen: 32
91.204.44.0/22 maxlen: 22
93.177.64.0/22 maxlen: 22
45.129.180.0/22 maxlen: 22
185.183.156.0/22 maxlen: 32
185.163.116.0/22 maxlen: 22
152.89.104.0/22 maxlen: 22
46.38.224.0/20 maxlen: 32
213.109.160.0/22 maxlen: 22
45.90.4.0/22 maxlen: 22
2.56.96.0/22 maxlen: 22
45.9.60.0/22 maxlen: 22
185.244.192.0/22 maxlen: 32
194.55.12.0/22 maxlen: 22
91.132.144.0/22 maxlen: 22
45.142.176.0/22 maxlen: 22
89.58.28.0/22 maxlen: 22
89.58.36.0/22 maxlen: 22
89.58.32.0/22 maxlen: 22
89.58.44.0/22 maxlen: 22
89.58.40.0/22 maxlen: 22
89.58.48.0/22 maxlen: 22
89.58.52.0/22 maxlen: 22
89.58.56.0/22 maxlen: 22
185.233.104.0/22 maxlen: 32
89.58.60.0/22 maxlen: 22
5.45.96.0/20 maxlen: 32
45.132.244.0/22 maxlen: 22
185.162.248.0/22 maxlen: 32
45.136.28.0/22 maxlen: 22
5.252.224.0/22 maxlen: 22
192.145.44.0/22 maxlen: 22
85.209.48.0/22 maxlen: 22
195.128.100.0/22 maxlen: 22
193.30.120.0/22 maxlen: 22
89.58.4.0/22 maxlen: 22
89.58.0.0/22 maxlen: 22
193.31.24.0/22 maxlen: 22
89.58.8.0/22 maxlen: 22
188.68.32.0/19 maxlen: 32
89.58.16.0/21 maxlen: 21
89.58.12.0/22 maxlen: 22
89.58.24.0/22 maxlen: 22
185.243.8.0/22 maxlen: 32
46.232.248.0/22 maxlen: 22
2a0a:4cc0::/40 maxlen: 40
2a03:4001::/32 maxlen: 48
2a03:4000::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6c:91:81:b2:ef:63:ab:98:2c:b2:f4:f3:fd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 2 06:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf341ffac6f2e399404eb8ebbf94eab71ed5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:a7:36:1c:78:5f:8f:25:30:12:0d:c4:7e:
d9:96:84:c1:f6:db:8f:e0:c1:f4:c4:de:04:2f:e5:
57:b4:70:45:4d:24:d6:7b:c9:46:2c:f8:d4:39:c3:
71:de:8f:6a:6e:e8:e5:a9:15:e8:ee:8f:65:85:d6:
59:f4:26:cc:d4:6b:f0:cb:4d:95:45:a0:7e:73:60:
f6:f7:4c:f6:30:52:73:03:a2:2b:69:49:48:91:8b:
3f:ff:f0:0e:ff:d1:a6:26:46:ff:26:bc:db:2e:c1:
29:8b:80:a1:74:66:fb:c2:52:cb:f6:48:19:dd:fb:
51:dd:3b:46:df:0a:f7:fa:c0:11:17:c9:0a:f0:2b:
6f:a8:41:5b:7e:81:da:71:1b:0d:cf:d1:3f:d7:cb:
61:81:46:db:6c:98:6d:82:23:6b:29:0a:93:24:76:
ba:6c:3a:7f:76:4c:b6:78:e1:0a:b3:2c:64:b6:71:
a9:5f:30:e1:10:2f:63:6c:a7:b3:2e:f5:00:50:3b:
85:79:cc:cf:4d:4a:d3:48:28:44:5d:5e:fd:2b:85:
bb:20:54:e8:09:b0:f5:2b:1a:b2:09:18:61:96:01:
aa:cf:c3:6f:e7:2b:f1:6a:20:03:88:94:82:25:4e:
f0:75:8b:42:22:f8:c6:0d:30:13:ab:f4:6d:dd:a4:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:41:FF:AC:6F:2E:39:94:04:EB:8E:BB:F9:4E:AB:71:ED:5A:FA
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/zPNB_6xvLjmUBOuOu_lOq3HtWvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/31
2a0a:4cc0::/40
Signature Algorithm: sha256WithRSAEncryption
42:fc:88:6b:9c:1e:65:f8:13:72:96:f6:56:ce:87:c7:89:21:
b0:15:f8:fd:0b:fe:ea:7f:2e:83:9f:10:2a:14:14:20:d8:b4:
6d:5c:80:fd:05:35:18:0b:4d:b9:be:9e:4d:d4:14:a4:a9:fb:
53:64:fa:b9:da:de:af:7f:70:ed:ba:65:6f:45:42:89:11:24:
3b:6b:dd:58:02:48:ba:d7:4b:63:01:bf:7b:67:57:48:72:38:
ea:30:cd:4a:f0:78:49:ff:72:a6:bf:1f:19:1d:1a:18:69:29:
34:37:9c:94:a6:2e:8e:09:f1:f7:32:c4:d2:8d:2a:23:2f:16:
3c:af:35:03:83:aa:40:01:de:dd:0d:9e:46:06:6a:53:90:b5:
fe:77:19:b0:74:8a:0c:2f:e9:52:28:38:13:85:6d:86:ed:79:
22:e7:3c:d8:1d:ed:cc:4f:93:47:b7:7a:8c:86:26:47:6e:88:
5c:dc:2e:5d:fa:31:90:8e:79:e8:f7:53:f8:24:80:93:ef:e6:
48:9c:b0:72:8a:4a:14:35:09:86:9c:9f:71:21:98:d5:ec:70:
aa:2d:b1:16:74:dd:33:4a:94:7f:ca:20:97:28:fa:19:f5:af:
b6:0b:c6:45:bd:c8:56:6a:8d:04:21:7f:be:a3:89:91:4a:6c:
a8:84:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 10:13:16 2023 by rpki-client on console-ams.rpki-client.org