Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Co5JMFu6ipy_VEARRxUfYmLyO2s.roa
File: Co5JMFu6ipy_VEARRxUfYmLyO2s.roa (raw, json)
Hash identifier: q1VudACuZJuCy50RO1pBkl9zyW0KkTqOu2VwfNiVYzg=
Subject key identifier: 0A:8E:49:30:5B:BA:8A:9C:BF:54:40:11:47:15:1F:62:62:F2:3B:6B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018A616419FE8A573D98120F5F64E5734F06
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Co5JMFu6ipy_VEARRxUfYmLyO2s.roa
Signing time: Mon 04 Sep 2023 18:11:04 +0000
ROA not before: Mon 04 Sep 2023 18:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.241.243.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
93.115.255.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:64:19:fe:8a:57:3d:98:12:0f:5f:64:e5:73:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 4 18:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8e49305bba8a9cbf54401147151f6262f23b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:11:73:8e:73:96:a5:75:1c:06:43:bc:ed:
c6:c8:27:75:8c:ff:34:72:9f:26:b2:b6:54:36:75:
55:de:23:4c:17:cd:25:b8:c2:c3:63:d2:53:ab:e9:
d3:b9:67:b2:48:8e:c5:e9:8c:8d:dc:50:79:6b:0e:
01:b5:42:44:c5:f6:25:b8:70:d5:83:ae:54:7f:e2:
14:e5:a2:02:28:73:16:78:f2:07:0e:73:44:38:f5:
f6:bd:7b:60:5a:e4:09:6e:a7:3f:51:a5:29:3e:e5:
67:30:ae:b4:ec:02:58:71:43:1e:aa:21:bc:51:fb:
6e:6d:10:07:b2:70:ea:d8:ff:46:1a:72:55:79:58:
65:2f:88:12:9d:8d:6e:de:7a:ad:4a:72:04:ec:a9:
8b:c4:f4:24:3d:4b:6a:05:5a:b9:c9:ce:23:a0:fb:
78:fe:17:f7:47:b2:63:6b:f5:49:aa:09:50:82:fe:
2d:cd:26:22:7e:82:0e:7b:89:f4:83:66:e3:9f:0f:
ce:ca:96:e1:44:bf:52:59:43:8e:16:e5:83:68:eb:
88:1d:3c:13:20:ef:d1:b0:86:d2:9e:d2:cb:43:6a:
6b:fc:dd:76:5d:14:8a:ef:ca:b4:10:67:e9:8f:b6:
62:8b:ac:64:1b:5c:58:c4:70:31:cb:78:53:05:4b:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:49:30:5B:BA:8A:9C:BF:54:40:11:47:15:1F:62:62:F2:3B:6B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Co5JMFu6ipy_VEARRxUfYmLyO2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
87.247.148.0/22
89.33.84.0/23
89.35.154.0/23
89.37.63.0/24
91.188.204.0/22
93.115.254.0/23
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.133.0/24
188.212.155.0/24
188.212.158.0/24
188.213.202.0/23
188.214.209.0/24
188.240.224.0/23
188.240.227.0/24
188.240.233.0/24
188.241.110.0/24
188.241.243.0/24
193.23.128.0/23
213.232.92.0/22
217.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0c:34:2e:5d:a7:af:7d:31:f5:10:7e:6e:09:07:7f:0a:c8:
56:c3:b6:b9:6a:79:fe:02:87:15:0c:0e:ff:dd:e5:87:b1:71:
eb:82:62:17:e9:9a:c7:51:70:de:d8:e9:0e:66:3c:fe:62:78:
62:ab:f5:17:b7:3f:65:78:5e:8a:f9:fb:ee:bd:fb:d2:ae:b1:
83:01:90:e5:a5:c0:e8:22:4e:5a:68:9e:0f:65:51:79:60:a8:
e2:19:91:af:05:b1:f8:34:73:c5:39:ac:f8:ec:45:f2:80:78:
55:2a:b0:14:80:0f:93:7e:28:a2:ae:69:15:b8:9c:83:5e:b3:
f6:b4:35:42:d4:96:7b:c2:cf:71:87:57:2b:ba:93:06:b2:6f:
19:e7:a7:af:cc:35:83:81:12:79:48:36:15:29:6f:12:73:8b:
a7:19:40:b2:9d:4f:4d:87:38:54:2a:64:c5:06:43:6a:13:87:
74:42:31:12:f0:bf:5f:56:5a:05:f9:a1:25:03:4b:44:7a:48:
a2:92:76:7f:b3:92:be:08:60:a3:c2:b7:08:68:75:e3:cc:68:
dc:e8:06:93:3d:1a:19:56:81:43:88:82:4a:46:4e:13:4c:89:
0a:04:9f:36:3f:a7:eb:d6:a1:d9:c2:80:5d:e3:51:3e:84:d6:
ae:ed:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 18:40:49 2023 by rpki-client on console-ams.rpki-client.org