Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FyT05dmvDNVRlnXoAvPaQb_WZOo.roa
File: FyT05dmvDNVRlnXoAvPaQb_WZOo.roa (raw, json)
Hash identifier: SecZjTEOHkigzSKhgppgo05+54SkjYP4ylBnzr+Dj24=
Subject key identifier: 17:24:F4:E5:D9:AF:0C:D5:51:96:75:E8:02:F3:DA:41:BF:D6:64:EA
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185EE55A4F180354D0743358896E2433941
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FyT05dmvDNVRlnXoAvPaQb_WZOo.roa
Signing time: Thu 26 Jan 2023 13:47:48 +0000
ROA not before: Thu 26 Jan 2023 13:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jan 2023 15:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:55:a4:f1:80:35:4d:07:43:35:88:96:e2:43:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 26 13:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1724f4e5d9af0cd5519675e802f3da41bfd664ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:f2:10:1f:a7:28:fc:32:20:2a:89:a1:83:
9f:74:f8:10:c7:a2:d8:7a:04:2d:2d:46:c5:73:d5:
a4:cc:69:2e:0c:41:a6:6d:dc:6d:03:d7:f4:62:78:
0b:d5:eb:5c:be:54:5f:31:1f:d2:60:58:03:7a:81:
e8:0a:02:66:14:d9:f1:1a:34:82:5e:45:19:96:d7:
c5:2b:32:ac:c1:06:28:75:33:4d:33:3d:4e:5f:da:
5b:a9:b2:dd:f0:5e:3c:02:f7:58:a9:78:5a:89:c6:
80:2c:28:b7:2b:7f:b8:82:33:e5:08:d9:0e:df:0b:
d9:55:92:4b:de:9c:5c:4a:a9:1a:68:b8:b7:f1:98:
5a:ce:3a:a6:65:79:c7:db:cd:64:20:b5:ee:11:07:
bf:bc:d7:72:f5:ad:b3:5c:04:5b:66:30:eb:88:75:
ce:22:e6:fb:4b:32:42:e7:69:c3:50:2f:cc:2f:c9:
5b:cd:79:2a:83:01:11:f3:32:15:da:f2:aa:b5:c7:
b7:e5:ee:55:21:42:bb:17:87:cf:43:d5:0a:f4:07:
52:a5:20:1a:df:04:58:a0:f4:bd:bc:a4:0c:f9:5d:
83:82:5d:79:69:90:94:dc:bd:cf:ac:61:e9:db:d8:
6a:d3:36:85:21:00:43:1b:fa:f6:5e:27:e8:84:c1:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:F4:E5:D9:AF:0C:D5:51:96:75:E8:02:F3:DA:41:BF:D6:64:EA
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FyT05dmvDNVRlnXoAvPaQb_WZOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/24
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
95.214.9.0-95.214.11.255
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
49:fb:cf:f7:c3:d4:40:da:c7:03:e8:8b:a2:50:48:e4:15:d9:
aa:c5:83:be:44:b1:7f:2a:22:f0:e6:2a:82:95:a2:b9:a4:e4:
ef:02:b0:0e:f6:b0:6d:45:53:f8:2c:b1:76:50:46:3d:64:43:
b0:4e:4b:6c:04:02:67:a0:03:8c:28:ba:e8:78:d7:6b:d1:49:
c9:6c:5e:5d:93:d8:23:e8:1b:59:29:89:d5:04:fe:e0:8a:76:
b3:b4:57:a4:70:f4:2d:d3:83:ae:b0:97:ad:92:e2:0a:30:dc:
f9:4f:b9:0f:f0:a6:60:2e:cc:e9:e1:d3:8c:29:b0:5a:d7:60:
33:6e:48:57:5c:f3:13:1e:79:6d:e7:52:1f:73:01:91:86:fb:
a6:77:8f:2a:a2:34:ca:80:e1:ae:5d:f3:9c:4e:c8:e7:71:87:
da:f4:cf:a0:96:9c:36:ed:c9:67:16:a7:de:9b:9d:d8:0a:f2:
a4:66:54:01:d0:57:c7:50:e6:39:c4:0b:c3:46:51:9b:e4:c9:
4c:54:e4:4b:7f:41:aa:04:b5:a7:fb:ce:90:f5:2d:54:99:97:
2c:4a:14:52:cb:46:80:fe:f1:12:aa:83:41:77:61:5b:f3:af:
fd:04:ea:13:e6:be:d7:5c:32:c5:8d:fd:51:40:cb:98:d5:2e:
61:e8:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org