Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/0PsMboqUG0zW-J6QVpB13fDYUuM.roa
File: 0PsMboqUG0zW-J6QVpB13fDYUuM.roa (raw, json)
Hash identifier: bh/MoXtDoRVuZtG9BLBmvRgYcUboBRYIrjVN1vJJWNc=
Subject key identifier: D0:FB:0C:6E:8A:94:1B:4C:D6:F8:9E:90:56:90:75:DD:F0:D8:52:E3
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 0187286E4B17E2B1EE2BA072765527EFA799
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/0PsMboqUG0zW-J6QVpB13fDYUuM.roa
Signing time: Tue 28 Mar 2023 13:35:29 +0000
ROA not before: Tue 28 Mar 2023 13:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200000
IP address blocks: 185.233.120.0/22 maxlen: 22
185.124.8.0/22 maxlen: 22
185.233.136.0/22 maxlen: 22
37.139.64.0/21 maxlen: 21
185.39.224.0/22 maxlen: 22
185.233.152.0/22 maxlen: 23
185.149.40.0/22 maxlen: 22
185.233.116.0/22 maxlen: 22
185.235.168.0/22 maxlen: 22
109.205.96.0/21 maxlen: 21
45.154.218.0/24 maxlen: 24
173.242.48.0/20 maxlen: 20
91.105.208.0/21 maxlen: 21
185.104.44.0/22 maxlen: 22
185.104.45.0/24 maxlen: 24
185.65.244.0/22 maxlen: 22
217.173.208.0/20 maxlen: 20
185.226.24.0/22 maxlen: 22
185.225.212.0/22 maxlen: 22
185.25.116.0/22 maxlen: 22
185.68.16.0/24 maxlen: 24
185.68.16.0/22 maxlen: 22
185.233.36.0/22 maxlen: 22
185.233.40.0/22 maxlen: 22
185.233.44.0/22 maxlen: 22
185.130.120.0/22 maxlen: 22
185.209.168.0/22 maxlen: 22
185.69.152.0/22 maxlen: 22
185.239.180.0/22 maxlen: 22
185.234.176.0/22 maxlen: 22
2a0c:c80::/29 maxlen: 29
2a0c:6080::/29 maxlen: 29
2a0c:684::/30 maxlen: 30
2a0c:d80::/29 maxlen: 29
2a0c:e80::/29 maxlen: 29
2a04:8000::/29 maxlen: 29
2a0d:6500::/29 maxlen: 29
2a0d:1100::/29 maxlen: 29
2a05:480::/29 maxlen: 29
2a0c:680::/29 maxlen: 29
2a0c:780::/29 maxlen: 29
2a00:7a60::/32 maxlen: 32
2a0c:880::/29 maxlen: 29
2a06:6440::/29 maxlen: 29
2a0c:681::/32 maxlen: 32
2a0c:682::/31 maxlen: 31
2a0c:a80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Apr 2023 11:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:6e:4b:17:e2:b1:ee:2b:a0:72:76:55:27:ef:a7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Mar 28 13:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0fb0c6e8a941b4cd6f89e90569075ddf0d852e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:37:2f:57:50:8f:77:ae:36:6c:2e:12:06:
fc:26:a1:ca:b0:ef:49:97:0e:1e:3d:3f:6c:80:87:
97:73:0d:e1:f0:0f:9c:ac:7c:56:2a:e2:68:04:55:
c6:d2:91:e8:f4:98:d0:65:ac:3c:bd:bb:87:8d:28:
fd:cb:7a:be:44:4a:a2:cc:ec:47:80:ca:c2:d8:32:
6e:1f:64:75:23:56:e6:65:f4:12:d3:20:1b:43:bf:
5f:ba:90:16:88:5d:f8:63:c4:62:ec:2a:10:6c:8d:
c1:45:54:10:9c:3c:82:a8:a1:94:29:31:c8:94:44:
34:c8:b8:a5:6a:1b:39:79:f5:09:f8:54:80:be:a9:
66:95:24:c2:61:24:21:7b:fb:c8:ce:71:30:0b:6b:
4a:0d:d9:95:b4:7a:63:09:51:0c:9c:cb:ac:07:e0:
2b:e0:e6:b2:04:fe:5c:a3:bd:55:46:28:7e:7b:a2:
47:1c:b4:ae:2d:8c:17:16:47:cc:aa:05:45:14:47:
29:68:40:98:0d:c2:d5:51:93:fd:d1:1f:99:01:c6:
4b:c7:1d:dc:27:aa:38:b2:78:84:98:85:14:b5:71:
b2:d5:d9:33:2b:8c:05:1a:eb:b8:25:e6:84:07:1f:
ab:81:41:0c:df:0c:2d:2b:56:80:39:fe:61:c5:90:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:0C:6E:8A:94:1B:4C:D6:F8:9E:90:56:90:75:DD:F0:D8:52:E3
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/0PsMboqUG0zW-J6QVpB13fDYUuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.64.0/21
45.154.218.0/24
91.105.208.0/21
109.205.96.0/21
173.242.48.0/20
185.25.116.0/22
185.39.224.0/22
185.65.244.0/22
185.68.16.0/22
185.69.152.0/22
185.104.44.0/22
185.124.8.0/22
185.130.120.0/22
185.149.40.0/22
185.209.168.0/22
185.225.212.0/22
185.226.24.0/22
185.233.36.0-185.233.47.255
185.233.116.0-185.233.123.255
185.233.136.0/22
185.233.152.0/22
185.234.176.0/22
185.235.168.0/22
185.239.180.0/22
217.173.208.0/20
IPv6:
2a00:7a60::/32
2a04:8000::/29
2a05:480::/29
2a06:6440::/29
2a0c:680::/29
2a0c:780::/29
2a0c:880::/29
2a0c:a80::/29
2a0c:c80::/29
2a0c:d80::/29
2a0c:e80::/29
2a0c:6080::/29
2a0d:1100::/29
2a0d:6500::/29
Signature Algorithm: sha256WithRSAEncryption
94:21:77:70:e4:2c:09:10:68:24:fe:7f:a9:a4:ab:28:35:d6:
4a:7d:68:83:87:b0:61:b0:00:91:b4:c7:65:84:4e:d3:53:9f:
a7:45:fd:60:be:d5:59:8f:37:82:bb:8e:b2:5a:91:26:35:4b:
4c:80:41:0c:32:37:6d:95:6b:f5:e9:54:64:98:d4:c5:c3:d4:
ce:4a:6d:00:62:a4:48:e9:4e:6e:bf:ec:b6:86:a7:86:7e:14:
50:e8:a3:f8:ca:5f:5c:5a:59:16:de:57:05:66:85:09:a8:2d:
35:0d:77:9b:af:64:77:ff:39:9d:94:75:ea:4c:8d:92:0d:24:
82:f8:a3:6d:3a:d8:c2:c8:23:ad:b6:f1:7c:90:43:db:ba:91:
e2:62:5c:33:99:f0:b3:27:26:18:6a:ac:55:f4:a8:98:a4:51:
e6:93:0a:75:9f:0a:ee:05:76:de:e0:a6:b1:cc:f1:65:29:f3:
b7:63:a6:e2:3c:6d:dd:c6:4c:4c:1c:2c:e4:1f:19:02:8c:44:
6a:d7:47:d0:5d:d8:4b:68:18:df:32:3d:51:fa:3d:72:b0:36:
70:9b:b0:07:7b:e1:99:d4:34:d4:9e:eb:d7:25:88:de:04:61:
65:b8:91:61:b9:46:09:f2:6f:5d:d7:cc:e1:41:4a:e8:3e:20:
a3:cc:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:07 2024 by rpki-client on console-ams.rpki-client.org