Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EejzC5V_hruSfh0acEM4Ou25bp0.roa
File: EejzC5V_hruSfh0acEM4Ou25bp0.roa (raw, json)
Hash identifier: N1VbvquuoP7B7hI178aMZfsnqKLwaOYczSbhmEIuucg=
Subject key identifier: 11:E8:F3:0B:95:7F:86:BB:92:7E:1D:1A:70:43:38:3A:ED:B9:6E:9D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A5F2E4DFA051502F8AC01E497D9E36ED1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EejzC5V_hruSfh0acEM4Ou25bp0.roa
Signing time: Mon 04 Sep 2023 07:53:04 +0000
ROA not before: Mon 04 Sep 2023 07:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:2e:4d:fa:05:15:02:f8:ac:01:e4:97:d9:e3:6e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 07:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e8f30b957f86bb927e1d1a7043383aedb96e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:11:81:dd:ff:8f:ea:58:91:6d:4c:20:26:
5a:56:b6:c1:64:08:68:99:4a:1f:6f:0b:d6:5e:fb:
26:a3:4f:bb:31:c1:6c:b1:d9:7f:09:19:88:23:d7:
25:72:98:ce:93:1d:63:ba:13:62:23:02:67:16:09:
63:60:5a:91:1d:9b:95:69:47:2a:e1:25:7d:08:e5:
0d:a7:e1:86:04:52:c7:e8:6c:53:40:d8:7a:a0:56:
ac:d5:c8:68:37:05:e9:af:f2:42:25:6f:ed:cf:0b:
ad:64:7c:4b:0a:c7:7e:0d:39:3e:fa:b1:61:53:6f:
85:62:7d:a7:cd:0d:95:2c:a4:6d:ba:fb:b8:22:bd:
ea:ee:e4:8a:50:4c:e0:9c:c4:d2:ed:a4:83:86:71:
9c:80:4d:db:4a:21:72:04:5e:5b:74:1e:65:dc:a9:
3b:95:7a:63:8b:c7:e8:79:ff:9f:ec:72:1d:79:89:
e5:0a:36:d2:89:66:3c:1c:e2:b3:8d:09:46:f7:10:
4c:dc:0c:ec:11:3b:8a:0e:3b:2d:0d:e7:99:ec:31:
cf:08:e0:25:c1:f6:89:6b:dc:f8:bb:d3:09:79:18:
78:c9:83:b1:6d:77:9f:a1:18:63:af:42:a7:89:3b:
7e:0f:15:d6:de:91:0f:f3:bc:0d:82:c8:fc:69:8f:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:F3:0B:95:7F:86:BB:92:7E:1D:1A:70:43:38:3A:ED:B9:6E:9D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EejzC5V_hruSfh0acEM4Ou25bp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
Signature Algorithm: sha256WithRSAEncryption
83:32:9b:27:56:75:00:ac:0e:2f:11:84:94:de:f6:59:b0:53:
9f:3a:45:48:4d:2b:14:4b:48:b2:d9:fe:a4:19:b4:bf:f2:c6:
7f:38:9e:f3:6a:01:f9:00:b4:a2:5d:c7:e3:5d:ae:e6:75:b8:
fe:0f:a6:48:0e:99:ce:43:b7:49:c5:ad:06:06:01:ed:2b:2c:
fb:5a:72:10:e3:db:45:ad:ad:fe:e4:89:21:a7:80:f7:0f:59:
60:14:40:eb:ef:4b:d7:68:ea:a8:6a:c6:72:35:73:94:33:6d:
c1:31:73:4b:b0:e2:57:e2:e3:79:38:ca:88:06:b5:c0:52:34:
a8:60:ab:2d:ab:22:cd:2b:cc:79:29:97:84:7a:8a:fa:d0:c8:
21:21:83:5c:7a:6b:b2:ef:94:ba:75:60:23:c3:56:03:a3:83:
42:61:c5:3f:fd:a4:3e:04:5d:0b:7f:20:50:9f:13:29:a5:fa:
90:66:61:10:a9:bc:71:00:bc:a0:a4:9f:60:10:33:27:d3:7b:
35:1e:c1:7f:43:18:d5:03:f8:8e:24:5f:ad:85:14:a0:e8:18:
a9:04:ed:40:cf:1a:d7:32:19:e2:9a:fc:bb:b5:c7:c1:bc:ee:
fe:d8:1a:31:3a:7a:f9:bb:97:e2:89:44:5b:fa:86:0e:fd:7e:
2e:0e:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org