Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GTgvRIsV22O0kuRvWji8oUYUpcc.roa
File: GTgvRIsV22O0kuRvWji8oUYUpcc.roa (raw, json)
Hash identifier: fx61YrL7VEh5XyfuRQGhdqakbw6MXgI8cPFwRN8kn3Q=
Subject key identifier: 19:38:2F:44:8B:15:DB:63:B4:92:E4:6F:5A:38:BC:A1:46:14:A5:C7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185CAA4A0BAC65BDD3F8318EADD854203DD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GTgvRIsV22O0kuRvWji8oUYUpcc.roa
Signing time: Thu 19 Jan 2023 15:27:44 +0000
ROA not before: Thu 19 Jan 2023 15:27:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.138.0/24 maxlen: 24
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jan 2023 13:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:a4:a0:ba:c6:5b:dd:3f:83:18:ea:dd:85:42:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 19 15:27:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19382f448b15db63b492e46f5a38bca14614a5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:03:4d:bc:2a:b0:b3:fe:8d:60:62:58:6e:
ed:8b:b0:f6:ca:f8:35:6d:d9:f2:e8:c1:c4:f5:2f:
ca:70:51:73:3c:de:88:7c:f5:8e:bf:20:1f:36:12:
94:d4:e2:3c:85:a2:87:b6:c6:8f:3c:16:30:c7:13:
b0:ab:48:e2:38:95:bb:a5:bb:7f:b5:98:3f:fe:fc:
76:83:77:53:5a:77:1b:86:ee:ef:32:e4:c8:b5:ab:
79:0b:05:19:4b:f9:18:19:ec:f4:4b:54:0b:ed:15:
46:66:68:07:b0:2b:72:02:ae:b1:7e:5f:9c:ee:02:
fb:49:a3:83:86:72:35:29:86:01:0c:79:06:e1:3f:
b6:8b:71:14:83:84:4f:e5:da:22:23:e3:e9:e2:6d:
b7:6f:b8:4e:03:0b:17:7e:5c:c5:8a:93:52:28:3a:
8e:d4:5d:f3:5b:04:f5:85:bf:ad:8b:48:91:2d:92:
73:d1:32:cd:54:f6:9b:cb:83:ad:e2:05:ef:08:69:
d8:24:08:f1:9d:13:48:17:60:7d:3b:23:ad:13:40:
97:03:ba:64:ff:94:b8:b5:97:6d:be:2e:f2:e9:34:
cc:40:5d:b0:e9:b6:68:57:48:0b:84:fb:0c:83:4b:
4c:10:7c:3a:d8:3f:c6:ae:30:91:73:ba:98:ad:f3:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:2F:44:8B:15:DB:63:B4:92:E4:6F:5A:38:BC:A1:46:14:A5:C7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/GTgvRIsV22O0kuRvWji8oUYUpcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/24
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
95.214.9.0-95.214.11.255
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
94:b4:2a:a1:82:aa:a2:0c:6c:04:5a:dd:58:5d:1e:aa:00:79:
71:01:d1:5c:ce:82:f0:a7:d6:b9:d0:60:80:d7:8d:6f:20:21:
ff:8d:9e:53:89:11:63:e0:cb:a7:01:9c:47:33:fe:50:c2:56:
eb:9e:36:5d:38:6d:de:77:3f:4e:61:bf:d2:26:73:62:de:a3:
9e:84:61:a6:b4:cd:d0:7c:69:83:8e:66:90:ea:0c:1d:c6:4e:
53:fd:11:38:67:29:2a:ac:01:41:72:30:48:dc:ae:61:87:e8:
d4:f5:fa:7f:bb:61:c4:c5:f1:1e:75:e2:21:aa:14:40:29:3c:
59:f1:a2:dd:bf:d1:63:1a:d5:e3:45:1e:9a:af:a7:f5:9b:a6:
25:f2:02:f3:d4:02:36:0c:84:28:c8:2e:d8:e4:cc:97:20:0a:
60:8b:c0:fb:16:28:ca:23:9a:7d:c6:13:5a:8a:84:dd:4e:32:
ec:ef:24:61:35:03:bd:fd:69:bb:31:a0:2b:7c:bd:e8:26:df:
56:0c:42:c4:85:59:57:fe:b8:34:5e:9a:0b:4e:56:df:93:df:
70:60:75:9b:49:4a:e4:61:bd:49:d3:11:30:4f:0b:dc:99:85:
34:df:f5:fa:46:35:5c:21:a3:4c:90:ac:ae:69:47:c3:59:2d:
19:86:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org