Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Mf6oVGGXGadwzmgv1xvJmO1EiJc.roa
File: Mf6oVGGXGadwzmgv1xvJmO1EiJc.roa (raw, json)
Hash identifier: uBcj1L6L1iAJR3tmNE6hp/AHjQYRCAcJtR46XwheRQI=
Subject key identifier: 31:FE:A8:54:61:97:19:A7:70:CE:68:2F:D7:1B:C9:98:ED:44:88:97
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018FBD676CEB920AE4124B742384AFD2268A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Mf6oVGGXGadwzmgv1xvJmO1EiJc.roa
Signing time: Tue 28 May 2024 04:13:42 +0000
ROA not before: Tue 28 May 2024 04:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.83.188.0/22 maxlen: 24
45.86.248.0/22 maxlen: 24
45.87.22.0/24 maxlen: 24
45.88.120.0/24 maxlen: 24
45.88.122.0/24 maxlen: 24
45.129.232.0/22 maxlen: 24
45.130.143.0/24 maxlen: 24
45.133.252.0/24 maxlen: 24
45.133.254.0/24 maxlen: 24
45.136.72.0/22 maxlen: 24
45.143.192.0/24 maxlen: 24
45.143.194.0/24 maxlen: 24
45.144.216.0/22 maxlen: 24
45.146.52.0/24 maxlen: 24
45.146.56.0/22 maxlen: 24
45.148.24.0/24 maxlen: 24
45.149.0.0/24 maxlen: 24
45.150.92.0/24 maxlen: 24
45.150.94.0/24 maxlen: 24
45.154.136.0/24 maxlen: 24
45.154.139.0/24 maxlen: 24
45.157.96.0/22 maxlen: 24
45.157.113.0/24 maxlen: 24
45.157.114.0/23 maxlen: 24
45.159.244.0/22 maxlen: 24
89.36.36.0/24 maxlen: 24
89.38.38.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
89.251.1.0/24 maxlen: 24
89.251.3.0/24 maxlen: 24
136.144.16.0/24 maxlen: 24
136.144.18.0/24 maxlen: 24
136.144.24.0/24 maxlen: 24
136.144.26.0/23 maxlen: 24
136.144.32.0/24 maxlen: 24
136.144.34.0/24 maxlen: 24
185.51.193.0/24 maxlen: 24
185.51.194.0/23 maxlen: 23
185.114.60.0/22 maxlen: 22
185.227.32.0/24 maxlen: 24
185.243.244.0/24 maxlen: 24
185.243.246.0/24 maxlen: 24
188.208.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 31 May 2024 06:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bd:67:6c:eb:92:0a:e4:12:4b:74:23:84:af:d2:26:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 28 04:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31fea854619719a770ce682fd71bc998ed448897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:08:84:f1:97:93:52:7f:c4:61:85:65:95:
79:ea:86:fe:a6:7e:f3:15:2d:81:36:bb:98:91:f9:
6b:1d:c9:bf:14:9a:58:69:fa:cf:c0:fa:6c:3b:50:
9a:77:23:38:8e:3e:46:b2:26:b6:91:49:a0:d5:9c:
71:a6:6c:48:7f:58:7c:74:ef:d4:12:0e:34:bf:65:
a0:65:dd:d7:a6:39:f3:53:b4:cf:96:b8:91:c1:4f:
d4:ee:a4:f6:c7:46:a7:d6:b4:c5:47:c8:65:06:ee:
52:ae:9c:20:35:f1:eb:3d:8f:8f:1d:5f:f0:5c:fb:
53:9d:a7:69:d4:ca:c9:79:fd:f3:fb:20:84:17:a1:
e8:96:ee:34:e8:3f:c2:d8:62:8b:07:a2:b4:79:cf:
fb:e0:42:a4:e0:b5:42:18:86:79:07:ed:3e:45:05:
50:4f:2f:9c:54:bb:03:82:56:b9:dd:36:e8:f6:4f:
47:38:f7:af:e7:4c:23:6d:2f:e8:a7:55:bc:1c:6f:
22:89:5f:6c:99:de:04:2f:c3:51:0e:70:0b:ee:a1:
01:37:94:7b:b5:e2:09:43:cc:c8:34:db:83:3f:a8:
ca:04:93:51:9c:4b:f7:ac:6e:63:9e:88:76:af:f6:
43:5c:40:66:4b:d7:10:bd:f1:3a:1e:ce:4b:19:0b:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:A8:54:61:97:19:A7:70:CE:68:2F:D7:1B:C9:98:ED:44:88:97
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Mf6oVGGXGadwzmgv1xvJmO1EiJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.86.248.0/22
45.87.22.0/24
45.88.120.0/24
45.88.122.0/24
45.129.232.0/22
45.130.143.0/24
45.133.252.0/24
45.133.254.0/24
45.136.72.0/22
45.143.192.0/24
45.143.194.0/24
45.144.216.0/22
45.146.52.0/24
45.146.56.0/22
45.148.24.0/24
45.149.0.0/24
45.150.92.0/24
45.150.94.0/24
45.154.136.0/24
45.154.139.0/24
45.157.96.0/22
45.157.113.0-45.157.115.255
45.159.244.0/22
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
89.251.1.0/24
89.251.3.0/24
136.144.16.0/24
136.144.18.0/24
136.144.24.0/24
136.144.26.0/23
136.144.32.0/24
136.144.34.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
185.227.32.0/24
185.243.244.0/24
185.243.246.0/24
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
71:f3:a8:f2:ab:d5:b0:d4:cf:40:86:99:00:ce:74:23:9d:ef:
e2:29:51:04:09:e2:2f:ca:ce:a7:6b:0e:3a:bb:a5:b1:e5:ec:
60:9f:c7:d2:22:a9:45:59:d6:f0:7e:29:f9:f5:86:04:2c:f1:
bc:35:1b:83:01:51:39:d5:fc:62:a4:ba:08:59:dd:ca:be:b4:
bf:76:50:37:d8:f5:af:21:7d:4f:04:a1:79:d6:33:c4:bd:fc:
0a:4d:d7:29:2d:5f:07:35:9e:e4:cf:d9:ed:58:e9:40:64:4b:
1e:0f:0c:76:2d:4b:11:ed:b0:49:ad:7f:18:41:d6:9b:ef:dd:
5d:f5:37:85:6a:4a:f1:e9:b0:4f:c7:00:e3:9c:85:22:ce:c2:
94:72:ee:71:d5:58:71:81:ea:7d:65:31:91:cb:30:59:fd:9d:
50:83:71:f2:3e:e1:ec:73:33:38:c0:17:7a:25:5c:6f:a0:41:
18:43:4b:4d:91:ee:75:70:60:00:d7:8f:8c:95:a2:3a:59:ef:
95:f4:4d:2f:38:ca:53:72:6b:10:c4:fb:d8:0f:c0:95:92:7c:
3c:ed:af:14:3f:0a:58:ba:90:f5:fd:4f:5e:9e:bb:5c:9f:8f:
53:8a:5c:27:a5:ae:50:1d:9a:15:da:f8:96:c1:72:72:43:01:
d8:58:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org