Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/eMCtG6mmyswDHO211nBjdElszAo.roa
File: eMCtG6mmyswDHO211nBjdElszAo.roa (raw, json)
Hash identifier: +ZKhBfo3KFMaqenBJ0QurFHSyeCDl37fBPZ+Cu0ranQ=
Subject key identifier: 78:C0:AD:1B:A9:A6:CA:CC:03:1C:ED:B5:D6:70:63:74:49:6C:CC:0A
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0188288705ECC4F33F541DC606312213A876
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/eMCtG6mmyswDHO211nBjdElszAo.roa
Signing time: Wed 17 May 2023 07:05:17 +0000
ROA not before: Wed 17 May 2023 07:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199967
IP address blocks: 45.66.133.0/24 maxlen: 24
185.159.70.0/24 maxlen: 24
185.159.69.0/24 maxlen: 24
185.159.68.0/24 maxlen: 24
185.187.239.0/24 maxlen: 24
185.187.238.0/24 maxlen: 24
185.187.237.0/24 maxlen: 24
45.12.205.0/24 maxlen: 24
45.12.204.0/24 maxlen: 24
45.134.19.0/24 maxlen: 24
81.90.191.0/24 maxlen: 24
188.119.101.0/24 maxlen: 24
188.119.100.0/24 maxlen: 24
185.126.70.0/24 maxlen: 24
185.126.69.0/24 maxlen: 24
185.126.71.0/24 maxlen: 24
185.105.189.0/24 maxlen: 24
185.105.190.0/24 maxlen: 24
185.168.23.0/24 maxlen: 24
185.168.22.0/24 maxlen: 24
185.168.21.0/24 maxlen: 24
185.171.121.0/24 maxlen: 24
185.126.139.0/24 maxlen: 24
185.126.138.0/24 maxlen: 24
91.217.121.0/24 maxlen: 24
91.217.120.0/24 maxlen: 24
194.156.228.0/24 maxlen: 24
185.175.141.0/24 maxlen: 24
185.175.140.0/24 maxlen: 24
45.144.241.0/24 maxlen: 24
45.82.166.0/24 maxlen: 24
5.183.178.0/24 maxlen: 24
185.160.27.0/24 maxlen: 24
185.160.25.0/24 maxlen: 24
185.126.118.0/24 maxlen: 24
185.126.119.0/24 maxlen: 24
5.181.6.0/24 maxlen: 24
5.181.7.0/24 maxlen: 24
45.66.132.0/24 maxlen: 24
185.120.19.0/24 maxlen: 24
185.120.18.0/24 maxlen: 24
152.89.209.0/24 maxlen: 24
217.197.163.0/24 maxlen: 24
147.78.15.0/24 maxlen: 24
45.128.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 17:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:87:05:ec:c4:f3:3f:54:1d:c6:06:31:22:13:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 17 07:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c0ad1ba9a6cacc031cedb5d6706374496ccc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:6b:ce:55:81:00:3c:33:43:1a:7e:15:f2:
0a:8a:fa:8e:05:a6:a5:fc:81:0e:37:53:85:c2:0d:
6c:3f:63:5d:b6:39:54:d9:04:c6:b4:38:ed:01:52:
49:e1:21:20:34:a7:69:a2:fd:0a:75:2a:68:b8:93:
aa:f1:20:82:64:60:d1:08:90:e6:52:06:93:fa:bc:
c7:9e:45:a0:28:c5:74:61:b5:9d:be:72:67:2d:dd:
4d:e3:3d:95:d3:90:de:e8:a0:b3:06:70:4f:77:67:
b9:32:cc:21:0d:b1:7f:43:c6:ff:bf:bf:50:90:8c:
ea:63:09:ae:a3:fe:f6:b0:0d:9b:83:a8:17:32:59:
c9:9d:48:c9:2c:48:af:ae:2f:fa:e7:df:a4:97:ad:
88:d3:d7:e3:4c:a5:06:66:8e:a4:85:7a:5d:7d:25:
61:be:e9:4c:71:17:83:cc:ca:3d:d1:b8:4b:e1:18:
95:32:5c:39:da:2f:67:20:ab:09:84:9d:b7:f6:ff:
d4:b4:29:8b:cb:3f:d7:6d:4a:55:cf:0f:e2:28:5a:
11:b1:82:b5:b3:a4:95:b7:f4:41:f9:8b:7b:28:01:
97:1c:eb:6c:f1:37:51:39:54:c7:4a:0c:44:b3:5d:
57:67:6b:05:ba:6b:76:67:e3:bf:7e:e3:a4:93:7b:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:AD:1B:A9:A6:CA:CC:03:1C:ED:B5:D6:70:63:74:49:6C:CC:0A
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/eMCtG6mmyswDHO211nBjdElszAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.6.0/23
5.183.178.0/24
45.12.204.0/23
45.66.132.0/23
45.82.166.0/24
45.128.154.0/24
45.134.19.0/24
45.144.241.0/24
81.90.191.0/24
91.217.120.0/23
147.78.15.0/24
152.89.209.0/24
185.105.189.0-185.105.190.255
185.120.18.0/23
185.126.69.0-185.126.71.255
185.126.118.0/23
185.126.138.0/23
185.159.68.0-185.159.70.255
185.160.25.0/24
185.160.27.0/24
185.168.21.0-185.168.23.255
185.171.121.0/24
185.175.140.0/23
185.187.237.0-185.187.239.255
188.119.100.0/23
194.156.228.0/24
217.197.163.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7b:4d:18:58:4a:fa:83:cb:c2:a4:7f:28:f5:da:53:43:67:
73:69:12:f8:0e:86:39:58:7d:d8:12:16:f6:fc:9b:aa:19:5c:
0f:5f:f0:3a:aa:cc:85:31:ac:27:84:88:fd:bf:4d:03:78:a7:
ad:b1:2c:42:f0:71:e3:2f:db:5e:0f:81:e9:5f:da:aa:f2:bb:
2e:78:c6:e0:52:1d:12:22:15:5c:dd:f4:cc:0a:bb:e2:89:47:
40:2a:74:32:97:6e:d2:75:ed:db:11:73:cc:1a:f0:ad:f1:a5:
79:7d:a6:fc:5f:88:c7:5b:75:1b:3c:5f:73:a7:12:70:14:6e:
74:7c:e2:8c:c0:db:14:61:c3:21:4b:a8:86:09:79:5b:56:c5:
12:e7:dd:ae:11:8a:50:06:26:c9:bc:a4:c9:4c:26:7e:d0:80:
84:f8:30:e1:6a:84:57:c7:11:c5:94:91:1e:ad:cc:03:64:3e:
fa:b7:ec:06:96:6a:9e:fb:73:b7:9b:97:19:32:e7:c5:4c:1e:
cf:fb:a2:a7:c3:88:8f:65:ac:48:43:ad:78:38:fd:9b:26:57:
db:ca:12:38:59:28:8e:4e:f7:aa:a1:7a:b8:b7:d7:f1:6e:7d:
2d:9d:82:b4:55:f8:c5:6f:92:3e:24:c3:67:1a:b3:e7:6e:d4:
0b:69:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org