Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/I8eX8yOM0cqrrrR48fd20ScHoh4.roa
File: I8eX8yOM0cqrrrR48fd20ScHoh4.roa (raw, json)
Hash identifier: 8/tE7P0f7bwO8b87XJVqNVmKKzzRvp+0kqWEJb9v13k=
Subject key identifier: 23:C7:97:F3:23:8C:D1:CA:AB:AE:B4:78:F1:F7:76:D1:27:07:A2:1E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA92111E18859F231706820B39C61
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/I8eX8yOM0cqrrrR48fd20ScHoh4.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204997
IP address blocks: 45.144.64.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
185.255.132.0/24 maxlen: 24
185.255.134.0/24 maxlen: 24
185.255.133.0/24 maxlen: 24
185.255.135.0/24 maxlen: 24
185.252.146.0/24 maxlen: 24
185.252.147.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
185.244.172.0/24 maxlen: 24
185.244.173.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
2a04:5200:fff2::/48 maxlen: 48
2a04:5200:ff00::/48 maxlen: 48
2a04:5200:fff9::/48 maxlen: 48
2a04:5200:fff3::/48 maxlen: 48
2a04:5200:fff6::/48 maxlen: 48
2a04:5200:fff7::/48 maxlen: 48
2a04:5200:fff4::/48 maxlen: 48
2a04:5200:fff8::/48 maxlen: 48
2a04:5200:fff1::/48 maxlen: 48
2a04:5200:fff5::/48 maxlen: 48
2a04:5200:ff10::/48 maxlen: 48
2a04:5200:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 15:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a9:21:11:e1:88:59:f2:31:70:68:20:b3:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23c797f3238cd1caabaeb478f1f776d12707a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:f9:26:87:da:d5:21:b4:c4:b7:a2:46:d9:
a2:68:14:24:5f:f2:58:20:f0:77:cd:cc:4b:c9:2f:
0b:8f:6c:64:69:ca:79:45:ce:89:17:fd:88:f0:7e:
d3:bf:9d:ab:2d:32:63:36:fd:cb:c0:14:cd:53:3f:
0d:cb:1c:2e:b6:9a:65:21:e2:db:51:e9:d3:9f:38:
54:73:b6:59:56:54:4f:70:9c:e8:62:11:f4:74:ce:
a0:46:13:d4:93:61:b2:76:3d:0d:1d:35:4e:bc:52:
b0:19:13:b4:0d:13:9f:c5:a1:47:cd:b6:3c:ab:64:
d9:09:3d:d1:95:9d:98:b7:33:13:30:9a:4c:ed:77:
65:32:74:7c:22:5c:d6:01:21:8c:28:e3:7d:1b:46:
db:e2:af:c2:38:46:8a:67:a1:54:79:26:25:0c:f7:
64:7f:e4:38:42:ea:e1:63:b3:cb:26:79:d7:2b:95:
dc:c0:3f:5c:da:c7:f2:6f:b4:a5:3f:5c:17:eb:be:
18:4a:c6:37:60:cf:a2:56:28:9c:c1:3c:88:76:bd:
21:e5:74:75:2a:8a:5e:15:b3:fc:a5:0f:b8:78:94:
a6:6d:d6:6a:6d:b8:31:62:a8:e7:23:5e:b4:2e:81:
3d:be:7d:a8:92:30:73:93:b5:81:26:e4:82:aa:5a:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:97:F3:23:8C:D1:CA:AB:AE:B4:78:F1:F7:76:D1:27:07:A2:1E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/I8eX8yOM0cqrrrR48fd20ScHoh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.3.0/24
185.104.249.0/24
185.139.68.0/22
185.180.230.0/23
185.188.182.0/23
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
185.244.172.0/23
185.252.146.0/23
185.255.132.0/22
193.109.78.0/23
195.66.114.0/24
IPv6:
2a04:5200:ff00::/48
2a04:5200:ff10::/48
2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff
2a04:5200:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
02:a6:e4:a9:82:2b:e3:3d:de:ab:63:66:54:57:cc:c8:33:bf:
9d:bb:e5:67:51:ac:a9:cb:b3:27:57:a7:92:14:da:6f:2d:dd:
dd:c1:cd:2d:d2:86:b9:c5:5b:8b:8f:b8:0d:ae:78:e5:1d:7f:
84:5a:c5:37:a1:9b:3a:2d:15:8a:ec:3d:c8:f1:92:f9:ec:ae:
ed:3c:ad:17:11:c1:2b:a8:4d:86:2d:16:63:5c:85:db:09:11:
86:98:f4:6d:90:e2:cc:3b:72:94:78:da:47:ca:81:32:59:a1:
89:11:88:81:c3:94:8f:47:0d:9e:c8:52:7a:08:85:ea:7b:ce:
d5:01:4a:a2:43:ac:56:52:96:d9:14:ca:71:92:e0:b0:a6:75:
d6:c4:9a:39:48:eb:9d:a0:7c:79:b4:20:52:4b:c8:a2:60:ba:
99:3b:97:ed:d0:4f:78:22:7b:75:b5:93:ff:00:0b:3e:8e:c5:
5b:8e:2f:6b:37:c6:e9:ee:c9:97:ac:5d:8e:40:3e:5c:2f:e0:
5d:9b:59:a9:dc:6b:91:3e:ea:59:66:9f:e7:a7:ee:62:59:9d:
e6:3c:f7:07:4a:62:32:2b:39:42:70:76:a6:c3:19:13:cd:7e:
6a:c6:df:57:15:4b:86:86:c6:b2:9c:f8:47:34:c2:65:f8:17:
6e:c9:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:48 2024 by rpki-client on console-ams.rpki-client.org