Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/r0TBjGX-loG-uWKsS-6I5BFrnvo.roa
File: r0TBjGX-loG-uWKsS-6I5BFrnvo.roa (raw, json)
Hash identifier: JwvGaOPjOZ2EXi5KmcOVm5mFGCmsOyS5TxgwcVQ9ziI=
Subject key identifier: AF:44:C1:8C:65:FE:96:81:BE:B9:62:AC:4B:EE:88:E4:11:6B:9E:FA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018842585420E166261580BC6A3D87E274FB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/r0TBjGX-loG-uWKsS-6I5BFrnvo.roa
Signing time: Mon 22 May 2023 07:24:24 +0000
ROA not before: Mon 22 May 2023 07:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.115.146.0/24 maxlen: 24
77.75.60.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.210.0/23 maxlen: 24
89.43.211.0/24 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
193.42.52.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
178.239.192.0/23 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:58:54:20:e1:66:26:15:80:bc:6a:3d:87:e2:74:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 22 07:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af44c18c65fe9681beb962ac4bee88e4116b9efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:e0:e9:3c:4c:aa:4f:dc:12:ca:73:76:8b:
b5:ef:d7:4d:01:02:8d:01:ba:9d:85:5e:39:a7:ef:
6c:66:ae:1a:9f:ee:ae:64:42:6b:4b:f2:d0:e2:e3:
a1:f2:86:8c:1e:d4:65:49:e6:41:43:c8:89:59:43:
21:ea:ed:44:e0:7f:d4:ab:cb:69:a8:a1:05:f4:97:
a7:17:70:18:40:4d:cc:6e:b9:eb:94:c4:ae:d2:2f:
93:e6:82:70:7b:67:db:63:d1:26:6f:b5:5b:44:c0:
16:f5:4b:34:a0:d1:a1:33:97:78:3d:38:8d:29:fc:
02:e2:4d:70:74:f7:5a:73:05:b0:60:cf:f5:c6:12:
fb:bc:15:d5:76:3b:50:36:86:be:5f:0d:7a:17:8a:
2d:f7:da:d5:09:b6:36:e9:25:16:28:39:59:7e:e3:
86:58:46:57:f5:9d:06:6b:58:17:97:83:9b:87:66:
cc:f9:a6:d3:7a:88:e2:fe:50:89:ab:14:64:82:cf:
4d:d0:0c:b3:05:ac:40:1c:5f:8c:6f:71:ed:75:db:
86:ea:cf:fd:4e:7c:f0:ff:d0:c0:bf:a1:6d:85:e1:
e0:9a:9e:ce:6e:43:63:88:ed:cb:d6:b8:71:35:d4:
57:ec:40:f7:5e:e6:cc:0f:8d:d7:53:b3:bc:cb:f6:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:C1:8C:65:FE:96:81:BE:B9:62:AC:4B:EE:88:E4:11:6B:9E:FA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/r0TBjGX-loG-uWKsS-6I5BFrnvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.132.0/24
62.197.135.0/24
77.75.60.0/24
78.142.242.0/23
89.43.208.0/24
89.43.210.0/23
103.205.25.0/24
178.239.192.0-178.239.194.255
178.239.200.0/24
178.239.203.0/24
185.103.73.0/24
185.103.75.0/24
185.115.145.0-185.115.146.255
185.121.230.0/23
185.229.104.0/22
185.230.248.0/23
185.236.62.0/23
185.245.236.0-185.245.238.255
192.166.212.0/22
193.19.106.0/24
193.42.52.0/24
194.4.156.0/23
194.4.159.0/24
203.0.8.0/24
213.32.249.0/24
Signature Algorithm: sha256WithRSAEncryption
41:79:f1:ef:f0:bc:44:ab:22:b6:8b:67:07:53:c3:c9:1e:3e:
c2:78:17:05:a3:fd:ee:96:57:3e:a4:bf:63:04:cf:83:b6:d8:
41:8b:86:af:fd:89:2e:d1:bd:76:ec:36:6c:a8:d3:d1:f4:94:
51:71:09:1c:b4:30:e9:14:a0:b2:79:55:df:2b:3a:d8:62:d3:
61:ee:12:ef:b7:ac:b9:87:0e:bc:3a:4f:b3:e2:43:f4:36:e0:
5e:af:18:e7:bf:43:7e:90:af:39:0a:14:48:c2:42:65:b4:cb:
21:2b:be:f7:6e:52:05:66:9a:aa:8d:e3:7c:c5:43:30:a7:32:
30:31:98:4c:18:e3:41:f5:03:29:29:20:b7:d5:cb:a0:35:66:
7f:41:1f:61:15:60:d6:49:a1:b6:f5:27:4a:31:f8:33:b4:e8:
7f:84:6e:93:66:5e:1a:bb:28:e7:d1:25:3a:ae:e8:ca:f7:20:
02:43:88:21:9c:9a:9a:19:42:ac:40:c6:01:68:71:18:c8:05:
37:ff:b8:2a:31:50:ef:65:40:3e:d6:95:dc:81:29:4b:26:a4:
31:2a:f6:0f:3b:99:6c:e5:b8:f6:ea:49:ae:87:ed:7d:5b:f9:
29:d2:e3:87:7b:c6:23:78:fe:2c:90:5e:b5:cc:f0:c4:8f:a9:
37:11:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org