Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/AJm3aVeqg4mNmnUCIeyV6vVX_mI.roa
File: AJm3aVeqg4mNmnUCIeyV6vVX_mI.roa (raw, json)
Hash identifier: 3S7q+f5LQYyU7lkpdT5PS5Vj/bNNb5VAxC5j2vwOSrU=
Subject key identifier: 00:99:B7:69:57:AA:83:89:8D:9A:75:02:21:EC:95:EA:F5:57:FE:62
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0187046CBB7BF6874D5708011491E6B01651
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/AJm3aVeqg4mNmnUCIeyV6vVX_mI.roa
Signing time: Tue 21 Mar 2023 13:47:27 +0000
ROA not before: Tue 21 Mar 2023 13:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Mar 2023 07:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:6c:bb:7b:f6:87:4d:57:08:01:14:91:e6:b0:16:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 21 13:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0099b76957aa83898d9a750221ec95eaf557fe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:67:ff:15:26:82:66:35:70:37:b6:9e:53:
5b:af:35:21:d4:ed:97:6f:93:a5:a3:5b:1e:f3:99:
0a:d1:65:f8:b5:7d:a2:36:44:80:6c:6a:18:4a:c8:
e9:c4:69:f1:01:65:e4:f3:78:6d:97:35:28:61:3a:
1c:05:e8:57:a4:8d:74:c1:15:31:47:87:35:1d:1d:
78:14:4d:87:26:4b:5a:24:3a:64:a3:9c:c2:e3:0c:
89:df:49:5e:5f:d1:77:d2:5d:07:22:c0:5d:fd:23:
dd:51:71:09:3b:aa:0f:68:fc:04:97:d9:5a:64:da:
94:62:d1:d0:97:d6:3a:49:9a:c1:fb:c3:0c:99:d8:
11:51:28:33:77:56:55:77:c0:67:0f:51:7d:38:89:
00:4e:81:8a:03:af:39:94:1e:02:dc:4b:18:85:cd:
4d:ef:91:94:37:aa:1a:95:0b:36:91:77:42:ec:77:
4d:32:df:12:84:24:08:4b:db:d1:2c:7b:f1:4c:4f:
a7:e1:e0:ce:c2:08:f9:ad:6c:53:6e:7a:3d:f5:7c:
02:56:54:b1:4d:65:e6:9c:c0:c0:a1:08:14:73:95:
9b:ea:a4:58:99:90:37:0c:01:ca:4e:e0:e0:c1:31:
f1:46:e3:94:93:a1:ce:19:d4:f1:ea:20:35:83:ce:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:B7:69:57:AA:83:89:8D:9A:75:02:21:EC:95:EA:F5:57:FE:62
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/AJm3aVeqg4mNmnUCIeyV6vVX_mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
95.214.9.0-95.214.11.255
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
33:d3:e0:80:61:ce:8f:18:ea:3d:ad:33:b4:c2:4d:91:c4:9a:
ad:97:21:b9:c2:12:0e:ec:11:fa:34:f1:33:75:de:5f:fd:53:
7a:ec:68:20:c8:bb:87:bd:0c:f4:e2:cd:df:ee:d2:04:93:cb:
d1:c1:60:11:7a:0e:bd:0a:48:d8:a2:16:6a:f4:30:3c:8f:17:
3f:54:1b:a3:f9:28:9e:1a:1a:98:5e:69:0d:98:a1:7a:f4:8d:
e2:d3:16:e2:5c:f4:3c:1e:a1:e4:a5:4c:ac:1a:5d:e7:32:ef:
e5:8f:72:68:2a:a1:41:59:c2:bf:2f:9b:2b:f7:91:9d:1a:6c:
be:23:92:95:dd:50:20:c4:4a:3c:2a:f8:75:47:08:e6:37:34:
d7:32:47:00:65:68:2f:8d:5f:3c:3d:06:fa:bd:c9:97:08:44:
76:dd:10:e8:c3:1d:f5:d4:3f:46:d7:f4:b2:f3:52:a2:1e:fd:
36:d4:d2:9d:4e:28:7d:af:77:ef:02:ff:b4:b6:c5:e1:d0:fd:
b3:db:af:46:ab:9b:e9:a4:1c:83:2a:5a:c4:ae:09:1a:71:8a:
78:a7:10:3f:60:f0:54:e7:48:9f:20:ee:8b:92:5a:2d:db:dd:
85:8e:0a:22:ec:40:fa:e5:89:c6:db:32:cf:75:e0:a9:94:d9:
78:ed:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org