Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Jlz8TLMI3lybLvHXeVEnRtWnmHs.roa
File: Jlz8TLMI3lybLvHXeVEnRtWnmHs.roa (raw, json)
Hash identifier: nbjcyM22gjD4ruS+DpRazD2kkXl/x9mctuUzucFA9u8=
Subject key identifier: 26:5C:FC:4C:B3:08:DE:5C:9B:2E:F1:D7:79:51:27:46:D5:A7:98:7B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0188DD84A0F075ABDD7C96C0EA2D62CBD93C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Jlz8TLMI3lybLvHXeVEnRtWnmHs.roa
Signing time: Wed 21 Jun 2023 10:33:56 +0000
ROA not before: Wed 21 Jun 2023 10:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
193.109.85.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
185.125.228.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jul 2023 12:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:84:a0:f0:75:ab:dd:7c:96:c0:ea:2d:62:cb:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 21 10:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=265cfc4cb308de5c9b2ef1d779512746d5a7987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:29:ad:f8:fd:2e:07:bc:09:c8:dc:6d:c5:
27:6e:9a:a8:23:19:85:f8:8b:22:60:1a:cc:b6:45:
88:83:a9:27:93:f6:90:21:ec:b9:52:38:92:75:79:
6d:72:75:76:dd:bc:ee:3b:b2:89:f2:20:4c:b7:8e:
32:78:4a:4e:f9:4d:06:90:b1:08:12:a5:a9:fe:08:
27:c8:9f:79:55:6e:5f:b9:f4:1c:22:19:5b:d4:1b:
1a:e4:5f:c3:39:d7:84:9d:6c:63:91:aa:b0:89:67:
0f:ec:c4:71:af:e4:9a:97:2d:e4:64:c0:4d:dc:a8:
bd:29:29:22:3c:e8:fb:d9:d1:18:d0:a1:0f:e3:70:
ec:df:7f:ba:a9:48:08:7a:08:98:5d:e8:ae:3d:7b:
7b:92:07:5a:31:32:78:df:54:31:a2:6c:a2:30:a1:
48:29:bd:5d:7e:8f:93:ed:2d:51:36:cb:f7:ac:27:
f1:32:52:cb:ea:15:23:f9:67:9c:fd:44:5a:d4:3a:
1a:cf:67:de:54:7e:c3:98:b0:04:68:48:e3:79:61:
08:1f:af:dd:48:b1:21:f8:a6:de:1c:77:e8:b4:07:
56:44:21:a8:e1:2e:19:cd:e8:2c:2f:5b:09:1f:52:
fa:f7:48:5c:c4:02:3f:78:4b:1f:f8:46:e1:65:d3:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:FC:4C:B3:08:DE:5C:9B:2E:F1:D7:79:51:27:46:D5:A7:98:7B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Jlz8TLMI3lybLvHXeVEnRtWnmHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.109.85.0/24
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
45:4a:0c:38:f4:f1:77:11:43:6f:b2:77:85:c2:31:16:f7:42:
b3:77:98:a7:df:af:b2:0a:b2:59:1c:6a:d3:3b:49:b9:e1:86:
04:bb:33:f6:dd:3f:33:18:c9:58:c6:e0:6c:ba:57:e9:1c:fe:
af:7a:4e:75:d2:41:bc:35:b1:18:d5:fc:77:46:36:a3:ea:f5:
38:3a:b1:1e:46:43:7d:d2:e8:ef:92:91:29:31:d2:7f:2c:d5:
a2:23:6f:31:cc:99:b6:f3:c8:5f:78:28:d5:90:e0:1d:db:5b:
d4:a2:76:73:d2:b3:23:b1:13:c1:34:9c:69:23:ac:5b:8f:13:
fb:88:32:a3:64:c7:42:cc:37:6a:d3:4c:5c:b2:5b:a2:eb:d3:
89:8a:c4:91:6e:a4:b7:c3:1d:67:2c:90:d8:05:2d:18:8d:b5:
24:ee:7f:86:be:2b:c8:65:a9:b0:b1:2b:b4:da:e0:be:f5:2f:
b8:62:e5:62:3b:55:72:3a:11:88:9e:c6:18:59:37:66:0b:fc:
c0:34:f1:ed:da:da:4b:73:ef:07:07:1e:6b:3d:4b:78:62:ff:
b0:c8:a9:09:e1:1c:fe:56:b2:a5:10:6e:39:d2:e5:93:18:41:
51:b6:e2:f3:67:dc:78:7c:d1:4e:bd:7d:93:2c:2b:45:27:d2:
22:c4:b5:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org