Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/C7JpxR05teYO8F9Y7IXQGfwDQG0.roa
File: C7JpxR05teYO8F9Y7IXQGfwDQG0.roa (raw, json)
Hash identifier: jAXdxbe5GKrdRqVcy69YfFml8RDHBBhfdCr3xRa0M2Y=
Subject key identifier: 0B:B2:69:C5:1D:39:B5:E6:0E:F0:5F:58:EC:85:D0:19:FC:03:40:6D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018B67151268F5534D66F3511E1D83B2522A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/C7JpxR05teYO8F9Y7IXQGfwDQG0.roa
Signing time: Wed 25 Oct 2023 13:45:16 +0000
ROA not before: Wed 25 Oct 2023 13:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
193.168.224.0/24 maxlen: 24
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0c:74c0::/29 maxlen: 29
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a07:4a00::/29 maxlen: 29
2a0b:9800::/29 maxlen: 29
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0d:2cc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:15:12:68:f5:53:4d:66:f3:51:1e:1d:83:b2:52:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 25 13:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bb269c51d39b5e60ef05f58ec85d019fc03406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:95:39:69:d9:c9:a6:d2:cb:eb:12:a8:97:
0c:ec:56:44:dc:e8:e1:69:ee:55:46:75:6a:4b:9f:
5a:fa:f9:23:e5:f0:f3:13:82:2d:9c:c5:4c:ae:e3:
1a:47:17:6b:1c:e1:98:36:71:55:98:54:54:a4:9d:
df:96:01:be:20:60:b4:fe:7b:09:c5:fd:62:94:a7:
8e:83:37:ac:c7:b3:3a:11:aa:22:83:6a:4f:29:23:
0a:af:68:b4:76:19:2e:2f:36:72:c5:fd:8b:ce:60:
b6:ad:8c:56:ed:48:9b:53:ce:5f:2a:01:76:00:a1:
f8:95:3e:12:2c:46:0a:12:ac:e2:51:b4:9f:91:2d:
0e:20:f6:7c:cc:10:b0:ab:7e:b9:d3:20:0d:1b:8e:
70:d4:c7:a3:8a:1a:17:f4:b2:d9:a7:8d:f9:20:2a:
e9:dd:74:78:c9:6d:2a:80:41:c0:4e:c9:63:1c:eb:
63:56:76:aa:4b:d3:e6:89:93:cc:a8:75:fa:2c:8f:
e2:20:a9:6b:3f:02:1b:c9:ed:b9:b4:2d:84:02:0d:
83:62:54:59:a8:87:58:3f:15:33:df:47:75:cc:dc:
1f:b8:f8:54:e2:c6:13:2c:e6:c0:ca:e8:b3:b2:19:
bb:23:09:13:5d:29:d9:9f:c7:17:7f:9e:ad:d2:d1:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B2:69:C5:1D:39:B5:E6:0E:F0:5F:58:EC:85:D0:19:FC:03:40:6D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/C7JpxR05teYO8F9Y7IXQGfwDQG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a07:4a00::/29
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:9800::/29
2a0c:74c0::/29
2a0d:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:88:b5:ab:0a:e6:04:57:b2:4b:c6:37:53:1f:e3:92:39:81:
1c:7d:99:77:ca:fb:d8:53:d5:b2:73:0a:c1:a3:42:78:68:a6:
a3:de:c3:84:8b:5e:ee:d4:ed:58:28:4f:b4:7f:bd:a4:78:eb:
8b:ef:14:36:df:d4:e3:0e:14:3b:ec:74:49:80:7e:72:8b:02:
35:45:77:f1:b3:cb:7f:a9:dd:e2:2f:ef:55:02:16:c4:f8:46:
41:ea:43:e8:13:15:f3:78:c9:c9:18:53:d0:a2:af:69:d1:70:
4b:7b:97:3b:66:65:04:26:64:e2:21:5f:4f:2d:b3:e8:7d:77:
96:b8:66:35:6d:dd:6b:89:9d:68:71:0a:f5:10:b5:93:d6:90:
ca:27:5f:86:81:f6:26:a6:8a:0c:59:55:4b:7e:67:94:51:8c:
56:ac:e6:8d:6f:7a:48:a9:98:5e:8a:c3:49:3b:2b:19:6a:c1:
6e:d7:ac:df:9c:19:4a:68:9e:1b:66:48:2f:d3:81:2a:c1:85:
20:2b:e0:92:08:ab:b1:8f:49:d3:82:cf:50:03:17:b0:0d:1d:
9d:85:fe:8c:85:5e:23:6c:26:f4:3d:50:02:4f:fe:d0:a5:08:
1a:f2:70:0d:8a:47:80:13:2b:4e:16:6c:94:ba:d9:3f:1e:cf:
f0:c0:e2:de
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 27 14:26:57 2023 by rpki-client on console-ams.rpki-client.org