Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/0vdQjSGkraSEgw-7Q4gj9hcyyDo.roa
File: 0vdQjSGkraSEgw-7Q4gj9hcyyDo.roa (raw, json)
Hash identifier: 0epg3UCpw/edz0N5ONWdmO/x5waUNdJqQSXxCTQZF+4=
Subject key identifier: D2:F7:50:8D:21:A4:AD:A4:84:83:0F:BB:43:88:23:F6:17:32:C8:3A
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01869C9488B93DC2118755DECA2D4FFF208A
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/0vdQjSGkraSEgw-7Q4gj9hcyyDo.roa
Signing time: Wed 01 Mar 2023 09:50:25 +0000
ROA not before: Wed 01 Mar 2023 09:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 185.221.192.0/24 maxlen: 24
185.221.192.0/22 maxlen: 22
185.221.194.0/24 maxlen: 24
185.221.193.0/24 maxlen: 24
185.221.195.0/24 maxlen: 24
195.191.44.0/24 maxlen: 24
195.191.45.0/24 maxlen: 24
185.121.58.0/24 maxlen: 24
185.121.57.0/24 maxlen: 24
185.121.56.0/22 maxlen: 22
185.121.56.0/24 maxlen: 24
185.121.59.0/24 maxlen: 24
195.8.112.0/24 maxlen: 24
195.8.110.0/24 maxlen: 24
195.8.114.0/24 maxlen: 24
185.238.44.0/24 maxlen: 24
185.238.47.0/24 maxlen: 24
185.238.46.0/24 maxlen: 24
185.238.45.0/24 maxlen: 24
195.191.23.0/24 maxlen: 24
195.191.22.0/24 maxlen: 24
185.137.60.0/22 maxlen: 24
185.142.95.0/24 maxlen: 24
185.142.92.0/22 maxlen: 22
185.142.92.0/24 maxlen: 24
193.246.200.0/24 maxlen: 24
185.142.94.0/24 maxlen: 24
185.142.93.0/24 maxlen: 24
193.246.201.0/24 maxlen: 24
185.142.124.0/24 maxlen: 24
185.142.124.0/22 maxlen: 22
185.142.125.0/24 maxlen: 24
185.142.127.0/24 maxlen: 24
185.142.126.0/24 maxlen: 24
195.8.102.0/24 maxlen: 24
195.230.97.0/24 maxlen: 24
195.230.105.0/24 maxlen: 24
91.213.151.0/24 maxlen: 24
195.230.107.0/24 maxlen: 24
91.213.157.0/24 maxlen: 24
185.82.64.0/24 maxlen: 24
185.82.64.0/22 maxlen: 22
195.230.124.0/24 maxlen: 24
185.82.66.0/24 maxlen: 24
185.82.67.0/24 maxlen: 24
185.82.65.0/24 maxlen: 24
91.213.172.0/24 maxlen: 24
91.213.167.0/24 maxlen: 24
185.47.48.0/23 maxlen: 23
185.47.50.0/23 maxlen: 23
45.155.192.0/24 maxlen: 24
193.246.175.0/24 maxlen: 24
193.246.174.0/24 maxlen: 24
45.155.195.0/24 maxlen: 24
45.155.193.0/24 maxlen: 24
45.155.194.0/24 maxlen: 24
185.125.22.0/24 maxlen: 24
185.125.21.0/24 maxlen: 24
185.125.23.0/24 maxlen: 24
185.212.192.0/24 maxlen: 24
185.212.193.0/24 maxlen: 24
185.212.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:94:88:b9:3d:c2:11:87:55:de:ca:2d:4f:ff:20:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Mar 1 09:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f7508d21a4ada484830fbb438823f61732c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:66:ef:5e:8b:20:3e:f2:b6:16:3f:dc:05:9b:
1f:54:6e:04:e7:33:20:4e:b7:b9:61:22:97:6d:d9:
b2:96:95:4d:2c:b6:97:59:d7:12:be:b6:1c:9b:fa:
53:45:07:75:b1:10:c4:81:45:87:34:1f:d5:bd:90:
6b:fa:ca:83:34:27:73:1a:08:1b:e9:3a:d1:03:76:
4e:1b:3f:97:e6:9e:f6:e2:04:83:49:50:9e:e7:41:
43:75:cd:ba:20:3d:4b:aa:06:ba:03:c0:b7:09:f5:
47:11:e7:84:7b:14:9b:3f:30:c2:da:da:ca:b8:7f:
96:8f:5c:0d:48:60:5d:87:58:58:73:8d:2c:4f:08:
f1:31:5c:d0:21:10:7f:64:24:e1:e2:94:35:3b:8f:
b7:be:61:6f:fc:2d:53:89:3e:e0:5e:f0:c3:91:20:
86:1e:16:65:15:80:4e:77:1c:81:49:86:12:85:c9:
9d:4a:ce:94:df:17:e4:ef:71:2c:e1:34:6e:40:15:
cb:fc:32:36:64:09:2f:1f:ad:39:a4:d7:63:a1:98:
5d:5f:45:96:e9:68:2d:9f:1d:c4:b5:2f:06:ac:e5:
e8:5a:1a:96:17:39:f1:47:7f:55:fd:67:eb:8b:0c:
ba:68:ce:f1:b1:3b:4e:cd:83:3d:31:f9:2a:1e:14:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:50:8D:21:A4:AD:A4:84:83:0F:BB:43:88:23:F6:17:32:C8:3A
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/0vdQjSGkraSEgw-7Q4gj9hcyyDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.192.0/22
91.213.151.0/24
91.213.157.0/24
91.213.167.0/24
91.213.172.0/24
185.47.48.0/22
185.82.64.0/22
185.121.56.0/22
185.125.21.0-185.125.23.255
185.137.60.0/22
185.142.92.0/22
185.142.124.0/22
185.212.192.0/23
185.212.195.0/24
185.221.192.0/22
185.238.44.0/22
193.246.174.0/23
193.246.200.0/23
195.8.102.0/24
195.8.110.0/24
195.8.112.0/24
195.8.114.0/24
195.191.22.0/23
195.191.44.0/23
195.230.97.0/24
195.230.105.0/24
195.230.107.0/24
195.230.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7e:3e:0f:aa:a0:be:14:91:28:e3:bf:7c:f1:18:14:9a:f9:
f7:95:b6:a7:7f:72:2b:20:d3:63:46:d7:12:e9:c6:da:16:91:
9d:93:40:1c:34:2d:1c:c3:4f:c0:74:8e:39:c7:0a:ba:ab:b5:
ed:03:e9:bc:76:ed:ec:61:d4:4a:59:02:d5:96:59:ee:0c:86:
b9:7d:d3:a2:c1:db:7c:61:47:8f:82:55:d7:c6:2f:4e:d9:1e:
ae:87:00:3f:bb:59:19:65:76:5c:b3:b1:7a:95:fd:6d:96:3a:
47:c7:a7:97:90:92:71:81:d7:b5:28:b1:61:74:4a:11:21:1a:
af:05:9d:d9:c5:2a:55:3e:68:78:69:cd:f0:e7:5f:d6:15:5b:
6f:04:3a:20:a6:7d:34:e2:97:ab:cb:4f:b6:98:23:82:ec:81:
cf:fc:c8:d9:f7:7c:9b:31:36:7d:93:71:c4:cd:97:5d:c8:45:
ba:84:a3:bc:6a:93:18:81:93:b0:6e:1c:a1:ba:f6:02:9b:57:
f5:90:d9:b8:56:d1:b2:08:a3:53:74:c0:a5:36:00:db:31:45:
f2:84:44:1a:1d:f4:05:56:6e:21:33:b3:7a:02:18:ea:b9:2e:
44:79:d4:f5:7c:93:99:6b:79:0c:ae:e3:da:2e:62:66:53:35:
05:9e:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org