Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NiYpFrsfXasrkgnlWTDimkpMJd8.roa
File: NiYpFrsfXasrkgnlWTDimkpMJd8.roa (raw, json)
Hash identifier: 3WBEkKgbx5mgn1UO2QqPweAPWA55wc1NNnS6fBDBlzA=
Subject key identifier: 36:26:29:16:BB:1F:5D:AB:2B:92:09:E5:59:30:E2:9A:4A:4C:25:DF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B462F6A657FEED7328062E993E628
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NiYpFrsfXasrkgnlWTDimkpMJd8.roa
Signing time: Sun 01 Jan 2023 18:14:59 +0000
ROA not before: Sun 01 Jan 2023 18:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.134.0/24 maxlen: 24
194.76.136.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:46:2f:6a:65:7f:ee:d7:32:80:62:e9:93:e6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36262916bb1f5dab2b9209e55930e29a4a4c25df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:a0:f2:ad:e0:7c:48:a8:13:2c:f2:75:bf:
f1:b5:b9:cb:91:8d:b2:98:e0:4b:d2:63:bd:07:af:
2b:4c:34:5e:fa:8e:49:46:c5:51:15:42:5d:9c:bd:
17:fd:16:f9:6c:fc:13:c8:a9:cc:c9:d4:a2:78:c7:
52:b2:31:ce:d1:b0:0c:5b:0e:89:da:3e:b8:c4:57:
40:e0:69:fb:56:f0:d1:2e:e5:d1:4b:5b:da:da:b0:
45:c8:09:fe:c7:cf:98:95:41:f9:60:8c:76:37:46:
8f:70:b1:2f:65:bc:11:93:8b:b5:43:ad:f3:2e:2a:
80:f1:45:7e:a5:b5:94:87:f3:16:3a:e6:4c:29:24:
7a:03:ed:f3:2f:1b:13:6a:f6:07:46:42:d9:9c:d5:
f6:89:3a:f7:ea:aa:df:69:97:fa:87:a1:bb:0a:57:
b0:43:cc:cb:ca:8d:e8:79:bb:fe:4b:b5:a2:14:2e:
e1:23:3c:48:84:d4:4f:47:94:48:e7:92:62:2e:d3:
45:09:f5:21:8a:d4:a8:1a:a8:88:4a:91:f5:f0:7d:
35:45:a2:5f:0c:6f:4a:da:93:00:2c:5f:97:ff:be:
60:de:ff:7f:d0:cd:4a:16:f9:d1:01:db:5d:87:e1:
de:db:cf:14:0e:3b:6a:76:16:b8:aa:91:0c:88:7c:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:29:16:BB:1F:5D:AB:2B:92:09:E5:59:30:E2:9A:4A:4C:25:DF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NiYpFrsfXasrkgnlWTDimkpMJd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:8d:16:e7:28:c8:9a:8b:ea:a3:3b:96:1b:fd:3f:09:05:06:
70:a0:f1:ac:3d:18:f3:e7:40:c4:bf:a6:3a:0a:df:6b:f3:8f:
fa:fe:88:2f:11:20:60:7b:55:6f:f5:a7:f1:76:cb:3b:19:02:
d9:e9:4b:98:2f:39:fd:57:af:c7:62:1b:40:cb:35:3a:19:78:
5f:62:1f:47:fd:4d:48:6f:b3:a6:86:02:82:da:57:9a:2e:05:
81:1b:ef:cd:38:f6:42:f1:f6:30:5f:f9:b4:dd:02:84:0b:3f:
76:e6:3f:23:ec:f2:c3:1f:d7:73:e6:2f:a8:21:a4:75:37:7e:
ef:f2:d9:8a:5c:c6:6a:ba:86:d2:7a:0c:3a:72:67:00:c2:2d:
7f:20:7a:39:9e:11:ab:35:df:41:4b:01:9b:fa:33:d6:7f:7e:
6f:5f:15:f5:1f:33:29:08:bc:f7:e6:f3:c5:de:fd:73:51:aa:
e7:a2:eb:52:18:d3:42:cc:1e:eb:4e:50:1d:11:d7:35:e5:6f:
95:c3:97:b3:a4:b6:74:e5:c8:c5:9a:5a:c7:d5:27:f8:11:39:
2e:ca:79:17:b9:53:59:78:07:06:7e:41:25:a9:99:da:ae:d2:
8d:45:12:03:04:a0:ba:43:f2:c8:61:7d:66:8b:d7:f0:4b:56:
c3:48:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org