Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/oyAzF67bYoy3vWdPmW-rS4kQTLE.roa
File: oyAzF67bYoy3vWdPmW-rS4kQTLE.roa (raw, json)
Hash identifier: WhSJCTt2IKXuRKF+fiFHXmHoTigTo4UuAEBIXMlQ6Wg=
Subject key identifier: A3:20:33:17:AE:DB:62:8C:B7:BD:67:4F:99:6F:AB:4B:89:10:4C:B1
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 018A181F14B3B9D30BBC7025624B6B7E046F
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/oyAzF67bYoy3vWdPmW-rS4kQTLE.roa
Signing time: Mon 21 Aug 2023 12:43:24 +0000
ROA not before: Mon 21 Aug 2023 12:43:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 89.46.152.0/21 maxlen: 32
84.39.224.0/21 maxlen: 32
93.114.0.0/20 maxlen: 32
93.114.11.0/24 maxlen: 24
93.114.10.0/24 maxlen: 24
92.43.84.0/22 maxlen: 32
95.215.36.0/22 maxlen: 32
202.181.20.0/22 maxlen: 32
91.197.252.0/22 maxlen: 32
58.97.128.0/21 maxlen: 32
78.138.1.0/24 maxlen: 32
78.138.2.0/24 maxlen: 32
138.124.144.0/22 maxlen: 32
89.249.51.0/24 maxlen: 32
89.249.56.0/22 maxlen: 32
94.177.56.0/23 maxlen: 32
185.240.252.0/24 maxlen: 32
185.240.255.0/24 maxlen: 32
89.19.42.0/23 maxlen: 24
93.113.124.0/23 maxlen: 32
89.19.40.0/22 maxlen: 32
93.180.224.0/20 maxlen: 32
45.116.168.0/22 maxlen: 32
93.180.192.0/20 maxlen: 32
185.125.192.0/22 maxlen: 32
176.119.8.0/21 maxlen: 32
45.95.48.0/22 maxlen: 32
45.142.92.0/22 maxlen: 32
45.142.96.0/22 maxlen: 32
185.223.56.0/24 maxlen: 32
203.166.156.0/23 maxlen: 32
188.119.116.0/22 maxlen: 32
188.95.152.0/21 maxlen: 32
94.176.112.0/20 maxlen: 32
185.38.102.0/24 maxlen: 32
150.129.92.0/22 maxlen: 32
45.149.148.0/22 maxlen: 32
203.109.52.0/22 maxlen: 32
89.38.132.0/23 maxlen: 32
58.97.232.0/21 maxlen: 32
83.229.76.0/22 maxlen: 24
119.13.192.0/19 maxlen: 32
58.97.240.0/20 maxlen: 32
119.13.208.0/20 maxlen: 32
83.229.104.0/22 maxlen: 32
121.91.80.0/21 maxlen: 32
78.138.25.0/24 maxlen: 32
185.90.243.0/24 maxlen: 32
91.245.235.0/24 maxlen: 32
78.138.40.0/24 maxlen: 32
78.138.47.0/24 maxlen: 32
78.138.48.0/24 maxlen: 32
78.138.50.0/24 maxlen: 32
45.94.244.0/22 maxlen: 32
45.138.232.0/22 maxlen: 32
209.20.160.0/19 maxlen: 32
185.131.220.0/24 maxlen: 32
93.115.12.0/23 maxlen: 32
77.81.104.0/21 maxlen: 32
89.34.78.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:1f:14:b3:b9:d3:0b:bc:70:25:62:4b:6b:7e:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Aug 21 12:43:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3203317aedb628cb7bd674f996fab4b89104cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:4d:3c:dc:ee:19:ed:de:99:7d:d6:ef:16:
97:50:ce:c9:e2:c9:1d:a4:56:a0:a8:9c:d4:18:4f:
b1:ce:71:16:bb:e4:d6:42:d0:31:90:f1:12:04:58:
ea:db:66:8e:54:ce:19:8a:3e:3c:86:3f:99:de:84:
07:b8:54:57:19:12:73:14:d8:fd:99:2b:93:a8:df:
aa:de:bf:3d:64:66:ba:0d:65:71:81:ec:19:d0:14:
84:93:57:20:e1:8e:3a:fc:3d:6d:05:c1:e9:7c:45:
fd:e1:05:bb:cf:b6:ab:5a:8d:ff:03:c8:76:35:18:
8a:de:a2:1d:7e:ce:2a:22:48:ff:40:c4:80:d3:39:
b1:6a:c6:71:3c:58:b3:58:8c:a3:3b:36:d6:24:7d:
a0:4e:af:16:db:f0:5a:3e:56:71:12:19:f7:5f:ba:
e5:32:41:4a:10:dc:55:52:4d:ae:2c:c2:da:09:95:
57:bf:96:7c:08:4b:40:1b:1b:87:41:e9:49:9d:88:
bc:87:2b:2a:5a:ed:d4:04:26:ac:dd:53:26:75:a1:
c1:ad:ba:15:23:86:d7:d1:95:50:ca:6e:ae:34:7b:
0e:64:97:f5:fa:3c:35:aa:00:a3:d6:4b:3d:1d:ac:
6a:ca:c4:61:93:6f:10:03:88:ab:42:00:4d:22:97:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:20:33:17:AE:DB:62:8C:B7:BD:67:4F:99:6F:AB:4B:89:10:4C:B1
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/oyAzF67bYoy3vWdPmW-rS4kQTLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
77.81.104.0/21
78.138.1.0-78.138.2.255
78.138.25.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
89.19.40.0/22
89.34.78.0/23
89.38.132.0/23
89.46.152.0/21
89.249.51.0/24
89.249.56.0/22
91.197.252.0/22
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
93.180.192.0/20
93.180.224.0/20
94.176.112.0/20
94.177.56.0/23
95.215.36.0/22
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.119.8.0/21
185.38.102.0/24
185.90.243.0/24
185.125.192.0/22
185.131.220.0/24
185.223.56.0/24
185.240.252.0/24
185.240.255.0/24
188.95.152.0/21
188.119.116.0/22
202.181.20.0/22
203.109.52.0/22
203.166.156.0/23
209.20.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:0c:02:97:3f:06:a0:aa:3c:46:f3:08:dc:67:14:43:4d:2c:
0a:1b:e6:74:f7:96:0b:89:79:23:b6:20:c2:d7:70:85:c5:0e:
c7:f0:4e:4d:d2:c0:66:c5:87:90:41:41:72:f3:5a:2c:8f:8d:
93:31:cc:42:f6:62:18:3b:ce:5d:04:92:77:35:0d:74:d6:11:
9d:f7:77:99:74:3f:0e:be:0e:86:d6:a4:5d:26:2e:ca:2e:44:
66:00:e8:90:da:d3:21:22:70:41:db:e5:55:81:cf:c5:e0:50:
9e:01:1c:74:ed:e9:e7:11:ef:20:8f:1a:fc:62:75:4a:01:02:
20:6c:cd:8e:2c:8f:87:4b:e5:7c:a8:88:c4:32:26:62:73:6a:
1d:b3:1b:6f:be:08:51:7b:f4:19:b3:87:16:ac:e2:8a:00:c0:
df:8e:52:85:a7:dd:3e:db:50:31:6c:92:a5:44:4d:be:f5:53:
9e:82:6d:22:a1:c6:d6:64:1d:8a:8b:75:df:d9:bb:90:f5:72:
0b:01:d6:be:a9:b2:17:4f:67:2e:cf:d9:fd:99:6f:e7:47:22:
48:18:1e:f9:af:a1:4a:b6:06:54:1f:ae:d8:60:cf:03:af:9f:
39:62:35:8d:43:1b:13:1e:25:c2:4e:a6:d1:65:d1:5e:dc:cf:
08:cc:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:10 2024 by rpki-client on console-fra.rpki-client.org