Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ilcZ6suU7M3-ynBxpyUq66aemlQ.roa
File: ilcZ6suU7M3-ynBxpyUq66aemlQ.roa (raw, json)
Hash identifier: oPqv81YCCOIYz4igLWdMP+lW2w/30SMhxJANQ8DwPjg=
Subject key identifier: 8A:57:19:EA:CB:94:EC:CD:FE:CA:70:71:A7:25:2A:EB:A6:9E:9A:54
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A5F33CC2E054923003994E23CB6C56177
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ilcZ6suU7M3-ynBxpyUq66aemlQ.roa
Signing time: Mon 04 Sep 2023 07:59:04 +0000
ROA not before: Mon 04 Sep 2023 07:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.83.148.0/22 maxlen: 24
2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:33:cc:2e:05:49:23:00:39:94:e2:3c:b6:c5:61:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 07:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a5719eacb94eccdfeca7071a7252aeba69e9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:b2:b8:ac:05:49:00:fa:9d:b4:e5:4f:9f:
8d:5f:26:bf:97:c5:cf:7c:12:90:bc:77:1a:50:54:
82:68:c5:3a:37:af:7c:2e:a7:2b:b6:a4:a5:88:cb:
63:30:35:e9:c7:0f:95:cc:a7:77:3b:72:5c:d4:f4:
28:8d:e4:1c:0b:8e:11:49:36:4b:20:25:63:08:6d:
d2:53:c3:36:1a:75:fa:d3:24:49:fc:5b:7b:1e:51:
6f:8f:ee:d4:7d:c2:8b:4b:dd:a5:20:7a:7c:cc:42:
c3:4a:70:9a:a3:b2:7e:f3:bc:bb:f5:05:0f:fe:40:
cc:cc:ec:a9:46:ff:ce:01:46:b3:52:04:13:58:b8:
7f:d7:71:1c:77:47:bc:6c:d0:40:c7:bc:9a:c5:e9:
0f:c9:68:54:36:d5:26:5d:cd:13:9a:97:63:61:2f:
d9:be:dc:42:1c:ba:b6:13:ce:c1:f5:04:cc:55:af:
6c:e4:82:77:c5:e7:17:0e:e7:09:c4:30:89:b2:36:
0d:d2:1e:f2:5d:b0:90:b5:2a:14:91:e7:80:c6:37:
17:3b:91:bf:1b:9d:e7:43:0c:fc:a5:76:de:7a:7c:
a4:8b:ef:ab:1a:33:a7:e2:a2:4c:0d:3e:00:29:64:
b6:92:7b:b7:7e:95:04:91:61:cc:39:af:fe:9a:fb:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:19:EA:CB:94:EC:CD:FE:CA:70:71:A7:25:2A:EB:A6:9E:9A:54
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ilcZ6suU7M3-ynBxpyUq66aemlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
92.119.40.0/22
95.214.248.0/22
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:64:db:c0:19:d0:b4:ff:46:57:75:49:3b:2b:26:d8:6b:7d:
6e:ff:41:27:a0:b8:61:0a:0e:c2:51:58:38:a2:58:dc:15:2a:
a3:af:29:7c:b5:ec:1f:50:72:f5:e9:15:40:a4:32:f9:35:59:
f2:04:e2:b1:c1:9c:0a:da:2c:86:c7:98:e5:b1:e1:15:67:ae:
15:2b:5b:d9:bc:a0:f8:fd:66:b3:e6:f6:27:91:fa:28:08:ce:
a5:93:57:11:16:c7:43:7e:54:32:c2:aa:ef:a0:ab:cf:50:b7:
96:a0:a2:d1:8e:5d:10:c6:39:ba:61:43:81:f1:fa:0e:3e:fe:
c5:a1:25:5f:41:68:0a:13:4a:84:c6:0f:17:08:10:84:e1:38:
45:8b:38:86:82:10:0e:fd:b2:6c:4c:e7:06:1d:6a:02:e4:e6:
ff:a3:84:00:2c:41:1d:15:e1:ee:2f:ea:5c:85:05:60:8d:de:
33:8c:a2:0b:d1:ff:4e:53:e5:94:1b:4d:94:fc:fe:a1:30:fc:
44:40:39:b6:9b:18:71:84:21:ef:c4:4a:65:52:18:ad:00:7f:
4c:ea:21:b1:01:58:28:51:85:83:1c:6e:00:4f:03:53:90:8f:
df:f0:d1:d0:02:ef:c2:20:1f:4d:38:6e:ca:3b:f0:fc:7a:fb:
c9:27:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 15:49:20 2023 by rpki-client on console-fra.rpki-client.org