Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DzMuwcnu5h_GBeytqCEB2YVuzvc.roa
File: DzMuwcnu5h_GBeytqCEB2YVuzvc.roa (raw, json)
Hash identifier: YZNOfdf5NVZXgxyxC6IW0byX9y0j/RvEGH8mf7pG+aM=
Subject key identifier: 0F:33:2E:C1:C9:EE:E6:1F:C6:05:EC:AD:A8:21:01:D9:85:6E:CE:F7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0185FEAF6FB99E09FDB76DDB93110420CD9E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DzMuwcnu5h_GBeytqCEB2YVuzvc.roa
Signing time: Sun 29 Jan 2023 17:59:48 +0000
ROA not before: Sun 29 Jan 2023 17:59:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.15.140.0/24 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.134.0/24 maxlen: 24
194.76.136.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
92.118.229.0/24 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:af:6f:b9:9e:09:fd:b7:6d:db:93:11:04:20:cd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 29 17:59:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f332ec1c9eee61fc605ecada82101d9856ecef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:b9:98:60:c0:cf:f0:84:bd:cb:63:b6:6f:
ad:c3:0c:06:f3:29:a0:aa:7f:d8:b1:f5:b1:c9:0c:
79:b8:10:d5:7b:43:88:f4:b2:ac:23:f0:1e:fb:40:
7e:e9:4a:da:e6:ef:9c:19:5a:75:00:5d:1a:75:86:
c7:6c:91:a1:b1:dd:ed:17:41:64:20:87:b9:fa:89:
8e:d2:84:fe:de:c9:b2:9c:0a:27:20:02:da:7c:21:
2a:13:c7:67:d8:82:96:dd:6a:5a:74:56:55:58:4f:
dd:63:cb:00:18:c6:b4:a3:7b:05:79:2d:48:d8:36:
43:66:bd:92:70:a8:8e:7e:72:a1:11:28:b1:e2:6d:
e1:06:02:94:3e:83:b4:5d:03:de:fb:20:1a:4d:ee:
1c:91:49:c9:c3:2d:44:4d:25:4d:75:17:dd:17:cd:
87:ea:95:b1:6f:87:1e:7a:7b:fc:8a:7c:ad:52:eb:
a1:f0:09:fe:88:d5:d2:cb:1e:10:54:5b:ac:8f:fe:
ae:a5:5a:3d:84:f1:71:1f:f7:c5:bf:b2:6d:f9:3b:
dd:25:79:7a:b2:7f:75:58:57:29:53:58:0f:2f:d2:
ee:c6:60:48:db:30:d4:65:e7:b1:dd:a6:e2:2d:56:
22:cf:14:c4:00:f7:fa:fd:3d:52:68:49:53:85:97:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:2E:C1:C9:EE:E6:1F:C6:05:EC:AD:A8:21:01:D9:85:6E:CE:F7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/DzMuwcnu5h_GBeytqCEB2YVuzvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
00:5c:bf:d0:9a:c9:0a:f1:86:74:cd:5e:f0:f5:e2:62:e0:2e:
96:98:73:9d:d4:e3:d2:28:c0:99:10:90:a7:eb:ec:2c:bb:ec:
76:26:69:9e:88:66:ad:67:17:32:01:9a:da:c8:54:3c:85:81:
6f:54:e0:e6:df:2a:9b:bc:ce:e9:c1:c2:10:3e:26:e9:0a:58:
d3:45:26:73:0d:56:e5:a0:27:fb:af:75:85:80:c8:60:0b:81:
1f:a0:af:9b:25:a9:68:18:d1:c0:87:a1:ab:f4:fd:6c:ab:0e:
84:f1:e4:f8:8d:60:76:e5:7c:7c:a1:fb:88:e4:32:5f:00:70:
f3:7f:e1:20:a8:08:7c:07:d5:6d:4c:ad:1c:70:1b:8a:5e:b2:
1a:c9:b4:2f:31:3e:18:e6:49:76:12:7e:e5:a2:02:86:58:2e:
91:1a:ca:fa:02:b3:ab:5f:0c:17:27:60:c2:d6:51:6e:72:33:
4e:69:a8:47:10:af:3f:42:6f:d1:34:2a:46:d1:f6:ec:63:68:
c9:ad:57:90:da:59:db:e7:aa:dd:7f:99:39:6c:8f:64:b3:58:
85:c3:e5:e0:1c:e2:b1:d2:22:bd:74:69:a7:01:9b:b7:f8:bd:
bf:63:c9:32:27:b9:51:98:d6:8e:eb:1e:46:1f:8f:b3:62:ed:
d9:ae:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org