Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/TYnYhCMC1j05UqOdiv3zhqBgKD0.roa
File: TYnYhCMC1j05UqOdiv3zhqBgKD0.roa (raw, json)
Hash identifier: RHwyTLfkr36mL5ut774xIFPDDF/TtF9BLMDr3J8YNd4=
Subject key identifier: 4D:89:D8:84:23:02:D6:3D:39:52:A3:9D:8A:FD:F3:86:A0:60:28:3D
Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial: 018B3CE4F5C7B5A93DED3673B5E821ABAEFB
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/TYnYhCMC1j05UqOdiv3zhqBgKD0.roa
Signing time: Tue 17 Oct 2023 09:08:39 +0000
ROA not before: Tue 17 Oct 2023 09:08:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6752
IP address blocks: 80.80.85.0/24 maxlen: 24
80.80.84.0/22 maxlen: 22
80.80.84.0/24 maxlen: 24
80.80.92.0/22 maxlen: 22
185.87.36.0/22 maxlen: 22
185.33.0.0/22 maxlen: 22
194.158.64.0/22 maxlen: 22
194.158.64.0/24 maxlen: 24
194.158.64.0/19 maxlen: 19
194.158.68.0/22 maxlen: 22
194.158.78.0/24 maxlen: 24
194.158.72.0/23 maxlen: 23
194.158.72.0/22 maxlen: 22
194.158.76.0/22 maxlen: 22
185.87.40.0/22 maxlen: 22
185.87.44.0/22 maxlen: 22
185.87.46.0/23 maxlen: 23
188.241.26.0/23 maxlen: 23
91.187.64.0/19 maxlen: 19
91.187.64.0/22 maxlen: 22
91.187.68.0/22 maxlen: 22
91.187.76.0/22 maxlen: 22
91.187.72.0/22 maxlen: 22
91.187.84.0/22 maxlen: 22
91.187.83.0/24 maxlen: 24
91.187.80.0/22 maxlen: 22
91.187.88.0/22 maxlen: 22
89.150.4.0/22 maxlen: 22
89.150.2.0/23 maxlen: 23
89.150.8.0/22 maxlen: 22
89.150.12.0/22 maxlen: 22
91.187.93.0/24 maxlen: 24
91.187.92.0/22 maxlen: 22
185.194.56.0/22 maxlen: 22
185.194.59.0/24 maxlen: 24
46.172.224.0/19 maxlen: 19
46.172.232.0/22 maxlen: 22
185.4.52.0/22 maxlen: 22
94.125.138.0/23 maxlen: 23
94.125.140.0/23 maxlen: 23
185.132.200.0/22 maxlen: 22
109.111.96.0/24 maxlen: 24
109.111.96.0/22 maxlen: 22
109.111.96.0/19 maxlen: 19
109.111.100.0/22 maxlen: 22
109.111.104.0/22 maxlen: 22
109.111.108.0/22 maxlen: 22
109.111.112.0/22 maxlen: 22
109.111.111.0/24 maxlen: 24
109.111.116.0/22 maxlen: 22
85.94.164.0/22 maxlen: 22
109.111.124.0/22 maxlen: 22
109.111.120.0/22 maxlen: 22
85.94.160.0/19 maxlen: 19
85.94.160.0/22 maxlen: 22
85.94.168.0/22 maxlen: 22
85.94.172.0/22 maxlen: 22
85.94.176.0/22 maxlen: 22
85.94.184.0/22 maxlen: 22
85.94.180.0/22 maxlen: 22
194.158.80.0/22 maxlen: 22
194.158.84.0/22 maxlen: 22
194.158.84.0/24 maxlen: 24
194.158.85.0/24 maxlen: 24
194.158.88.0/22 maxlen: 22
194.158.95.0/24 maxlen: 24
194.158.92.0/22 maxlen: 22
85.94.188.0/22 maxlen: 22
46.175.158.0/24 maxlen: 24
46.175.157.0/24 maxlen: 24
46.175.156.0/24 maxlen: 24
46.175.156.0/22 maxlen: 22
46.175.159.0/24 maxlen: 24
2a02:8060::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:e4:f5:c7:b5:a9:3d:ed:36:73:b5:e8:21:ab:ae:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Validity
Not Before: Oct 17 09:08:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d89d8842302d63d3952a39d8afdf386a060283d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:01:f9:aa:ef:a2:55:c3:75:1f:5f:dd:4d:
ac:52:3c:4b:41:29:68:97:de:57:20:2a:8e:9e:fe:
93:1e:33:34:ae:32:66:eb:d5:7e:5d:1f:04:e6:bc:
83:10:e0:bc:4f:ce:ff:e6:b8:47:ec:e0:83:cb:eb:
d1:ae:b4:d0:01:ea:88:3a:ff:d4:95:06:3d:22:8b:
b5:a1:20:61:88:1b:36:b7:a2:62:40:0f:ca:cb:e8:
91:31:45:3b:7d:d6:99:e7:55:ac:23:b4:ef:2b:fa:
18:73:f1:3f:d5:a3:a0:4c:f5:49:63:c0:f3:6a:d6:
44:fd:e8:99:65:28:91:ae:0c:97:6f:ae:e3:c9:bd:
9b:11:7a:3b:65:94:53:6f:fd:65:82:26:d9:c3:85:
00:26:5f:26:99:75:8c:fd:11:76:f9:a9:13:31:c6:
93:fd:58:44:64:7f:46:8d:af:6f:59:76:f1:49:13:
0d:37:e9:c7:f9:7c:f0:dc:38:df:be:72:27:ee:60:
e5:ec:5d:03:36:cb:66:65:98:4f:29:ac:70:43:04:
a0:2e:d4:05:4c:da:5b:3f:1f:61:52:70:37:f4:56:
4b:fe:76:03:44:a4:d9:79:13:97:48:c7:94:39:52:
7c:00:be:c2:12:b7:89:b0:59:56:91:23:9c:ea:de:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:D8:84:23:02:D6:3D:39:52:A3:9D:8A:FD:F3:86:A0:60:28:3D
X509v3 Authority Key Identifier:
keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/TYnYhCMC1j05UqOdiv3zhqBgKD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.224.0/19
46.175.156.0/22
80.80.84.0/22
80.80.92.0/22
85.94.160.0/19
89.150.2.0-89.150.15.255
91.187.64.0/19
94.125.138.0-94.125.141.255
109.111.96.0/19
185.4.52.0/22
185.33.0.0/22
185.87.36.0-185.87.47.255
185.132.200.0/22
185.194.56.0/22
188.241.26.0/23
194.158.64.0/19
IPv6:
2a02:8060::/31
Signature Algorithm: sha256WithRSAEncryption
5e:03:c4:56:88:3c:45:e8:26:0b:54:89:3d:ee:f4:47:97:a1:
e5:23:1b:56:4a:9d:c4:6a:72:95:b0:09:be:5c:85:f2:d0:48:
67:02:a0:79:80:a7:ad:be:0b:84:fd:d1:2f:5b:bd:06:27:c2:
b9:61:92:72:c2:af:1a:6c:f2:1c:1c:96:fe:9e:57:52:fd:af:
16:5c:a9:6b:78:ea:9f:7d:04:f5:59:17:b1:81:86:49:fc:aa:
85:27:55:74:a8:f0:a7:ae:ed:ed:7e:e9:49:b8:2a:4c:86:66:
4b:84:a1:29:4a:3d:3d:de:a0:5b:38:ec:a1:1f:5c:83:53:1f:
e3:50:1b:af:8e:b1:59:f8:f3:d2:95:a9:56:9f:46:7c:e7:59:
b5:65:40:5a:4c:52:20:67:5d:6f:8a:23:d0:d5:3e:d8:5d:1a:
bc:36:b7:82:f5:f7:c8:b2:9c:4c:cf:f9:5f:71:2f:18:81:6d:
69:8e:37:74:94:ad:3a:ce:c5:6a:f9:36:bf:74:af:4a:03:f4:
01:95:03:80:3a:2d:c3:04:74:ac:4b:c3:a9:16:34:d1:d3:b4:
3a:c7:92:1e:35:12:fd:57:4b:c0:5c:26:25:83:79:86:cb:bd:
5a:c0:13:15:a5:49:62:34:d9:ed:17:5f:ff:2a:4b:70:57:5e:
45:3f:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:42 2024 by rpki-client on console-ams.rpki-client.org