Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JtCkyX9ZG2cQMlh-KZAuxxlpcqg.roa
File: JtCkyX9ZG2cQMlh-KZAuxxlpcqg.roa (raw, json)
Hash identifier: i5v4OzVlDHAzuEJJQFgPond5cdsfywhiZA1Q4nTTjA8=
Subject key identifier: 26:D0:A4:C9:7F:59:1B:67:10:32:58:7E:29:90:2E:C7:19:69:72:A8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0188B6947835679D66125D04E3B580523080
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JtCkyX9ZG2cQMlh-KZAuxxlpcqg.roa
Signing time: Tue 13 Jun 2023 21:06:03 +0000
ROA not before: Tue 13 Jun 2023 21:06:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35196
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
45.9.73.184/32 maxlen: 32
45.9.73.179/32 maxlen: 32
94.142.136.0/21 maxlen: 21
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
94.142.136.67/32 maxlen: 32
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
45.9.73.236/32 maxlen: 32
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Jun 2023 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:94:78:35:67:9d:66:12:5d:04:e3:b5:80:52:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 13 21:06:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d0a4c97f591b671032587e29902ec7196972a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:91:14:7e:2c:00:1d:98:6e:40:9b:17:47:
6d:aa:18:93:1a:96:f0:4b:1a:e8:b1:fb:61:0d:a7:
81:58:d5:24:53:91:1b:9d:64:99:b1:49:58:fb:1c:
a4:46:75:75:17:6f:57:bb:9b:35:44:f0:26:f1:32:
3e:41:f7:29:f8:5d:8b:6d:9b:68:d7:e3:fe:1b:5e:
8f:48:91:17:6d:b8:a3:9a:30:60:47:f3:9a:ca:e1:
e4:b4:24:e5:c1:7c:34:88:10:2f:a7:ba:7f:a5:a3:
84:a4:75:a2:52:fa:e2:3f:a5:8f:2a:0e:a7:44:4c:
11:b0:74:87:40:f4:ef:e5:de:7f:17:38:dd:47:40:
48:53:1b:a9:6c:1f:dc:a0:7c:26:12:7f:39:90:05:
8d:0f:e5:d7:28:3b:92:15:5b:b6:70:01:73:c2:2c:
af:64:37:2a:2a:46:53:0f:00:4d:eb:d0:28:a0:4b:
d1:43:ee:d3:de:11:73:38:1d:3b:db:56:35:62:35:
bb:2a:a6:c6:0c:43:27:b9:bb:6a:25:61:43:dc:76:
0f:c1:5e:78:dc:51:ed:9c:4d:71:dc:f6:92:d1:97:
50:1b:98:fa:16:f7:a4:6b:27:16:d6:8b:d8:af:04:
a2:91:95:ac:2e:3e:7e:0a:3e:59:e6:81:3e:ff:dc:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:A4:C9:7F:59:1B:67:10:32:58:7E:29:90:2E:C7:19:69:72:A8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JtCkyX9ZG2cQMlh-KZAuxxlpcqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.105.119.0/24
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
49:09:39:ea:ec:5e:ee:42:eb:99:40:22:d2:1f:92:7b:1d:11:
bf:cc:42:dc:a2:9f:61:18:0c:eb:2b:bb:64:e0:21:41:40:ea:
e3:c7:8e:f3:49:eb:76:cd:78:50:ee:5f:4d:a4:db:f0:9f:35:
d2:aa:81:54:47:0e:0c:81:5b:de:9c:35:c8:65:11:31:25:3a:
02:dd:1e:eb:48:d3:cc:8c:b6:f3:fb:c0:62:ff:42:36:f2:35:
19:f1:fd:15:c5:f2:26:ac:82:c3:29:ed:02:3d:3f:a0:d1:29:
74:da:12:a5:34:ad:81:87:6d:16:60:33:17:55:c4:7e:63:32:
b3:cf:e3:9e:9d:4d:35:c3:0a:65:99:18:c2:35:74:16:28:ed:
5c:75:1a:6f:be:8d:fb:aa:1d:09:57:08:45:b4:cd:87:63:6f:
88:b6:b1:30:97:02:e6:b5:9b:99:44:f9:2f:0a:4d:39:c9:d3:
3d:8d:25:39:cc:fe:c3:5b:91:af:00:24:77:fe:30:2c:f3:7a:
b8:b9:78:ae:70:8e:54:49:b5:e9:bf:35:dc:6c:4b:e4:4b:04:
b3:8c:40:77:36:32:d9:64:eb:f2:90:29:dc:ac:e6:4e:83:df:
90:ca:8d:54:7d:d8:93:aa:37:50:6c:8c:d2:13:89:9a:35:f9:
67:84:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org