Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ebp_CNiJob0vRnuQN15vcPBUnLg.roa
File: Ebp_CNiJob0vRnuQN15vcPBUnLg.roa (raw, json)
Hash identifier: HvC8C9JYd9w1zPUR19D6c1Uw6oFl+gqvB6k6Vb9qSL8=
Subject key identifier: 11:BA:7F:08:D8:89:A1:BD:2F:46:7B:90:37:5E:6F:70:F0:54:9C:B8
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018F94B07B22660485344B10F214CCBB326B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ebp_CNiJob0vRnuQN15vcPBUnLg.roa
Signing time: Mon 20 May 2024 06:29:04 +0000
ROA not before: Mon 20 May 2024 06:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.83.188.0/22 maxlen: 24
45.86.248.0/22 maxlen: 24
45.87.22.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
45.130.143.0/24 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
45.146.52.0/24 maxlen: 24
45.148.24.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.154.139.0/24 maxlen: 24
45.157.96.0/22 maxlen: 24
45.157.113.0/24 maxlen: 24
45.157.114.0/23 maxlen: 24
45.159.244.0/22 maxlen: 24
89.36.36.0/24 maxlen: 24
89.38.38.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.251.3.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.24.0/24 maxlen: 24
136.144.26.0/23 maxlen: 24
136.144.32.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
185.51.193.0/24 maxlen: 24
185.51.194.0/23 maxlen: 23
185.114.60.0/22 maxlen: 22
185.227.32.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.243.246.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 28 May 2024 04:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:b0:7b:22:66:04:85:34:4b:10:f2:14:cc:bb:32:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 20 06:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11ba7f08d889a1bd2f467b90375e6f70f0549cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:ae:8d:6f:ad:db:66:4c:d1:20:29:1e:61:
a5:e0:90:9c:01:82:43:35:12:0a:4c:57:d8:1a:29:
af:69:4e:6e:fc:0f:bc:62:5a:af:08:f2:2e:b0:ab:
3e:a4:0f:c1:31:07:60:e4:f6:08:86:59:8c:9d:99:
6a:2e:ef:7a:15:bc:3b:a9:f0:0c:7a:87:81:23:46:
ff:e7:07:a7:0d:8b:95:35:50:3e:24:fa:89:e5:ec:
5f:01:9c:8e:51:03:d8:ef:79:cd:16:b7:ae:93:c2:
4d:62:78:f5:89:1e:dc:18:f4:9f:fe:42:ad:9a:fa:
00:95:84:5d:9f:08:e6:a9:a1:dd:1d:6f:43:0f:7e:
57:da:ae:29:b7:3b:42:e5:3e:72:2f:a9:5d:3f:69:
76:60:a7:12:c2:af:f7:34:65:ad:58:c0:dd:46:47:
f3:44:bc:d1:8c:06:91:00:fa:71:ef:6e:5d:fe:4c:
7f:99:f3:6d:f8:53:70:a3:4c:cb:c8:2c:90:5d:a0:
42:c9:96:d9:c5:99:7a:2c:c3:6f:eb:66:c1:8b:00:
92:65:c9:89:da:88:bf:c4:96:96:50:eb:9b:65:2c:
fb:8a:0f:d1:92:23:bd:4d:6e:ce:05:06:ed:5d:7c:
07:d0:42:d6:9d:ff:ce:e0:5c:24:7a:a9:e6:bd:d3:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:7F:08:D8:89:A1:BD:2F:46:7B:90:37:5E:6F:70:F0:54:9C:B8
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ebp_CNiJob0vRnuQN15vcPBUnLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.86.248.0/22
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.130.143.0/24
45.133.252.0/24
45.133.254.0/24
45.143.192.0/24
45.143.194.0/24
45.146.52.0/24
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/22
45.157.113.0-45.157.115.255
45.159.244.0/22
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.24.0/24
136.144.26.0/23
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:5a:3d:da:d0:b3:08:13:9a:a5:c4:31:62:30:74:43:85:9d:
c9:b8:9a:b7:c0:55:3f:53:de:43:f2:ad:c3:66:f8:db:f6:ac:
87:38:a0:d2:b0:3e:17:67:0c:fc:7f:f6:18:19:e6:a4:56:2b:
fc:53:c8:d7:83:c3:ca:9a:19:ca:dc:7f:6d:f9:07:ca:f8:77:
b6:0f:54:12:a5:9d:4c:a1:d2:de:a0:c2:34:98:d4:46:db:f0:
f8:94:e5:46:3e:b1:ab:7c:59:f2:8c:35:03:39:69:98:78:22:
92:de:25:c9:d5:f1:55:24:70:8d:45:0c:53:d3:b6:10:b4:93:
ab:ca:fd:3b:f8:a9:ed:94:6a:9f:c8:b6:08:bb:35:06:1d:7b:
6e:09:e4:3b:52:a2:1c:ed:d8:31:69:2e:c2:8b:90:7c:35:95:
04:fe:75:b1:7b:bf:f1:42:4c:f5:3f:9a:93:f7:37:46:8a:f4:
61:3b:64:fa:7b:5f:25:e8:de:86:ac:29:db:bd:53:a0:a4:4b:
88:00:86:34:c4:8d:cd:48:e1:4d:50:c8:e1:05:93:0c:14:92:
85:f5:f5:96:a2:33:d4:bb:f6:f7:b4:41:1b:9b:3c:d9:a6:da:
c9:25:88:b0:63:4a:9f:9a:2a:fc:e5:f9:5c:54:0e:8d:8f:cd:
2b:0d:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org