Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/X8Bqv5DhWWLsTPx8JEJ4d3s_Xt8.roa
File: X8Bqv5DhWWLsTPx8JEJ4d3s_Xt8.roa (raw, json)
Hash identifier: FLTf8Oz6xKkjtbb05ELXUqbrd+LmlHYgQNsF3L7cPHE=
Subject key identifier: 5F:C0:6A:BF:90:E1:59:62:EC:4C:FC:7C:24:42:78:77:7B:3F:5E:DF
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01882AC1F4B41ABFC35B6126FC698437A778
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/X8Bqv5DhWWLsTPx8JEJ4d3s_Xt8.roa
Signing time: Wed 17 May 2023 17:28:54 +0000
ROA not before: Wed 17 May 2023 17:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199967
IP address blocks: 45.66.133.0/24 maxlen: 24
185.159.70.0/24 maxlen: 24
185.159.69.0/24 maxlen: 24
185.159.68.0/24 maxlen: 24
185.187.239.0/24 maxlen: 24
185.187.238.0/24 maxlen: 24
185.187.237.0/24 maxlen: 24
45.12.205.0/24 maxlen: 24
45.12.204.0/24 maxlen: 24
45.134.19.0/24 maxlen: 24
81.90.191.0/24 maxlen: 24
188.119.101.0/24 maxlen: 24
188.119.100.0/24 maxlen: 24
185.126.70.0/24 maxlen: 24
185.126.69.0/24 maxlen: 24
185.126.71.0/24 maxlen: 24
185.105.189.0/24 maxlen: 24
185.105.190.0/24 maxlen: 24
185.168.23.0/24 maxlen: 24
185.168.22.0/24 maxlen: 24
185.168.21.0/24 maxlen: 24
185.171.121.0/24 maxlen: 24
185.126.139.0/24 maxlen: 24
185.126.138.0/24 maxlen: 24
91.217.121.0/24 maxlen: 24
91.217.120.0/24 maxlen: 24
194.156.228.0/24 maxlen: 24
185.175.141.0/24 maxlen: 24
185.175.140.0/24 maxlen: 24
45.144.241.0/24 maxlen: 24
45.82.166.0/24 maxlen: 24
5.183.178.0/24 maxlen: 24
185.160.27.0/24 maxlen: 24
185.160.25.0/24 maxlen: 24
185.126.118.0/24 maxlen: 24
185.126.119.0/24 maxlen: 24
5.181.6.0/24 maxlen: 24
5.181.7.0/24 maxlen: 24
45.66.132.0/24 maxlen: 24
185.120.19.0/24 maxlen: 24
185.120.18.0/24 maxlen: 24
152.89.209.0/24 maxlen: 24
217.197.163.0/24 maxlen: 24
147.78.15.0/24 maxlen: 24
45.128.154.0/24 maxlen: 24
2a0c:8a40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 May 2023 11:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:c1:f4:b4:1a:bf:c3:5b:61:26:fc:69:84:37:a7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 17 17:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fc06abf90e15962ec4cfc7c244278777b3f5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:8b:34:fc:18:16:77:3c:f2:31:c7:c3:e9:
34:64:35:be:47:e8:79:ca:ac:ea:15:91:89:e3:76:
45:db:3d:1e:23:53:f8:8f:fe:c6:b9:7d:16:e8:e7:
ee:69:1d:50:0f:3b:bc:9d:4b:d5:97:6e:52:1e:23:
44:61:07:09:f1:4f:de:50:c1:7d:80:0f:96:4c:bd:
ad:d2:57:d8:6e:dc:f4:08:d9:05:a5:cc:bb:dd:42:
78:86:76:fd:2e:16:a8:72:13:fb:05:ba:f0:e7:5a:
b0:ce:d2:62:c7:9d:1c:61:ce:81:64:9b:29:2e:14:
8f:30:7d:2a:8e:77:10:bc:a5:32:d1:cc:93:cc:88:
6d:0d:f0:c3:ed:bd:59:7d:84:17:5d:37:95:63:50:
c0:d2:1d:de:fd:c0:2b:f6:a2:3d:81:59:80:99:5b:
66:18:0b:8c:41:19:9b:9e:7e:13:af:03:f3:21:3f:
5a:f1:61:1e:da:59:42:47:01:b4:e1:53:ff:e0:8b:
45:86:9f:40:eb:56:fd:13:9f:dd:2d:93:df:40:96:
e1:2e:69:6b:fb:28:04:60:89:d9:c5:da:4b:af:ae:
48:d7:dd:2d:08:ce:17:cd:b4:7b:ed:f5:48:49:7e:
c1:d0:3f:d8:ad:2a:96:d6:72:19:33:02:d0:0f:7e:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:6A:BF:90:E1:59:62:EC:4C:FC:7C:24:42:78:77:7B:3F:5E:DF
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/X8Bqv5DhWWLsTPx8JEJ4d3s_Xt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.6.0/23
5.183.178.0/24
45.12.204.0/23
45.66.132.0/23
45.82.166.0/24
45.128.154.0/24
45.134.19.0/24
45.144.241.0/24
81.90.191.0/24
91.217.120.0/23
147.78.15.0/24
152.89.209.0/24
185.105.189.0-185.105.190.255
185.120.18.0/23
185.126.69.0-185.126.71.255
185.126.118.0/23
185.126.138.0/23
185.159.68.0-185.159.70.255
185.160.25.0/24
185.160.27.0/24
185.168.21.0-185.168.23.255
185.171.121.0/24
185.175.140.0/23
185.187.237.0-185.187.239.255
188.119.100.0/23
194.156.228.0/24
217.197.163.0/24
IPv6:
2a0c:8a40:1::/48
Signature Algorithm: sha256WithRSAEncryption
d2:3f:64:14:81:36:35:c3:57:75:a7:3b:49:ee:97:19:01:ac:
9e:f9:27:03:2a:b1:d8:fb:39:29:39:dd:5f:17:98:62:56:9b:
0a:10:26:6a:5f:ad:47:31:45:ff:73:bf:e1:e3:1e:a5:35:81:
69:7a:85:de:58:95:1b:15:42:7d:79:35:76:02:9c:f9:33:4a:
2c:c0:bc:3d:b5:72:3f:0e:34:eb:22:7e:1a:e4:26:76:21:88:
85:20:27:04:5d:3d:b5:68:32:23:23:c3:bf:83:57:3e:ab:8a:
f5:81:44:15:cc:4a:58:17:32:d9:b2:6b:3a:b7:34:47:55:66:
4e:ef:74:67:08:cf:5c:ef:8f:87:cd:d7:37:53:1c:76:33:ac:
78:4d:9a:84:e9:4b:2d:6b:81:4c:8f:14:6c:3e:98:e2:23:11:
d8:41:75:0e:3d:b4:96:43:57:f9:16:0e:ae:44:e0:d3:c4:73:
23:46:78:9a:e6:52:50:a0:9d:50:65:47:b1:19:e5:6a:4e:7d:
05:ab:72:9f:8e:11:44:34:a9:b1:90:d0:85:16:b5:97:d8:ad:
fe:94:36:61:7d:7b:52:34:23:e4:a6:5a:3b:cb:32:4b:19:97:
f7:21:5e:37:eb:33:bd:d0:3e:9d:3a:d4:e3:8a:c5:49:37:4d:
39:99:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org