Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uYVB3bIqYCCuYqtRYPHLTcjwU1Y.roa
File: uYVB3bIqYCCuYqtRYPHLTcjwU1Y.roa (raw, json)
Hash identifier: rk0XZ+dqrmhmmGBnytXol/0JXJhv7HiUZLyhfaLNKrY=
Subject key identifier: B9:85:41:DD:B2:2A:60:20:AE:62:AB:51:60:F1:CB:4D:C8:F0:53:56
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0188E1E627785174A02152F085D40BD9CFCB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uYVB3bIqYCCuYqtRYPHLTcjwU1Y.roa
Signing time: Thu 22 Jun 2023 06:58:56 +0000
ROA not before: Thu 22 Jun 2023 06:58:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.33.14.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
103.205.26.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
193.42.52.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
185.9.54.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.115.146.0/24 maxlen: 24
77.75.62.0/24 maxlen: 24
77.75.60.0/24 maxlen: 24
77.75.63.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.115.144.0/24 maxlen: 24
185.115.144.0/23 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
89.40.160.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
89.43.210.0/23 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
185.245.239.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
185.121.228.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
178.239.192.0/23 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:e6:27:78:51:74:a0:21:52:f0:85:d4:0b:d9:cf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 22 06:58:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b98541ddb22a6020ae62ab5160f1cb4dc8f05356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:25:3a:a3:69:1b:71:64:dc:72:54:d5:85:
e7:e6:34:b4:3e:ac:2d:07:40:6b:0c:11:e8:c3:82:
28:74:8b:ec:ca:67:bc:43:be:23:5b:13:cd:97:51:
d0:75:02:38:ee:29:b9:fc:76:c8:d1:c0:fd:b7:ba:
75:d7:aa:7d:bf:cf:0b:46:2c:d4:ba:ac:51:03:67:
d0:af:ea:e7:d4:f8:89:d6:b8:e3:c3:e9:a4:dd:be:
7c:ee:36:d4:c8:36:69:a8:f0:7e:1e:a9:c7:b3:59:
6e:42:36:0d:58:4c:fc:8d:1b:5c:8a:92:85:be:81:
c5:48:c8:57:99:77:d2:66:53:9b:93:a4:3b:17:37:
a7:16:c7:77:32:07:4f:29:6c:4b:fd:fd:44:aa:de:
00:6b:c7:01:44:af:ee:e7:be:7e:80:97:8e:92:6a:
55:ac:6c:d9:06:9c:cf:65:73:b8:1b:3f:ca:6e:5d:
43:8a:9f:21:90:93:9c:2f:09:cb:0c:ca:42:46:86:
94:34:a6:a8:65:23:38:e4:c0:ed:66:f7:9e:b8:d4:
ff:19:64:c4:de:2c:26:97:4a:09:01:d9:ea:a8:5e:
61:fc:63:f9:5b:46:52:af:37:07:e0:75:bb:48:34:
26:23:86:f0:a2:60:ce:d3:87:ef:ab:ee:ef:3b:e9:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:85:41:DD:B2:2A:60:20:AE:62:AB:51:60:F1:CB:4D:C8:F0:53:56
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/uYVB3bIqYCCuYqtRYPHLTcjwU1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.132.0/24
62.197.135.0/24
77.75.60.0/24
77.75.62.0/23
78.142.242.0/23
89.33.14.0/24
89.40.160.0/24
89.43.208.0/24
89.43.210.0/23
89.47.89.0/24
93.114.246.0/24
103.205.25.0-103.205.27.255
178.239.192.0-178.239.194.255
178.239.200.0/23
178.239.203.0/24
185.9.54.0/24
185.103.73.0/24
185.115.144.0-185.115.146.255
185.121.228.0/24
185.121.230.0/23
185.229.104.0/22
185.230.248.0-185.230.250.255
185.236.62.0/23
185.245.236.0/22
192.166.212.0/22
193.19.106.0/24
193.42.52.0/24
193.42.54.0/23
194.4.156.0/23
194.4.159.0/24
203.0.8.0/24
213.32.249.0/24
223.27.112.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ad:14:42:e0:60:07:21:c5:ee:93:66:da:d2:e6:a1:e3:2d:
22:e8:72:b8:ab:d1:46:a4:08:09:99:67:55:f1:0f:fb:49:dc:
8e:94:c7:f9:42:12:87:04:f5:b8:38:1d:36:83:7d:09:e9:58:
85:58:e6:fc:d0:0d:80:83:6b:fb:22:af:ac:a6:bc:17:23:30:
77:c9:2e:37:9c:85:dd:73:60:da:36:39:f9:6e:7d:6f:b4:f6:
7b:80:20:8f:85:45:4d:97:bb:fc:50:9b:b5:25:6e:e6:c2:b7:
33:99:64:4c:b5:82:79:e9:bc:d2:df:c9:4e:c4:41:22:48:41:
5e:01:3b:39:96:1b:31:55:8b:d8:b7:36:88:e5:8f:a3:9b:72:
36:80:da:dc:1a:ed:a8:89:d7:e3:58:94:ca:3f:4c:e3:88:5d:
9e:15:3e:92:c5:17:ed:1e:ad:99:76:22:83:74:57:31:97:9a:
fd:e1:6a:bc:03:60:29:c3:3f:c5:67:b0:7f:2a:06:19:26:36:
8f:9a:71:65:14:b5:11:c3:9a:d5:d9:1b:18:b6:e3:85:35:59:
e4:33:c9:62:ce:96:02:32:c7:fb:f0:bc:14:33:3f:a0:12:41:
15:d9:8a:90:85:f5:49:7b:1a:97:ba:6d:4e:da:21:b0:1b:79:
51:2e:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org