Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dPAvUZ1apI3Mg62ISDZRvtzEHyA.roa
File: dPAvUZ1apI3Mg62ISDZRvtzEHyA.roa (raw, json)
Hash identifier: MWxSVgzCWKzcbZIm9IaXbhaazQIaEqtqEXQ0mUPna74=
Subject key identifier: 74:F0:2F:51:9D:5A:A4:8D:CC:83:AD:88:48:36:51:BE:DC:C4:1F:20
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0188DD84A050DBA7AAD791697FDA2AF33AE4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dPAvUZ1apI3Mg62ISDZRvtzEHyA.roa
Signing time: Wed 21 Jun 2023 10:33:56 +0000
ROA not before: Wed 21 Jun 2023 10:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35196
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.5.250.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.50.0/24 maxlen: 24
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
45.89.67.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
45.9.73.184/32 maxlen: 32
45.9.73.179/32 maxlen: 32
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.125.218.0/23 maxlen: 23
185.125.216.0/22 maxlen: 22
94.142.136.67/32 maxlen: 32
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.228.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
45.9.73.236/32 maxlen: 32
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Jul 2023 16:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:84:a0:50:db:a7:aa:d7:91:69:7f:da:2a:f3:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 21 10:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74f02f519d5aa48dcc83ad88483651bedcc41f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:3b:ea:70:65:8e:08:ee:47:10:b8:ea:8c:
1d:23:67:66:79:96:5e:59:ba:96:98:31:d3:06:9d:
70:d2:d6:d6:b4:9a:04:04:43:d7:f1:c6:ab:ad:7a:
ef:33:0d:40:d0:eb:fa:3f:be:46:4a:5d:da:4e:ec:
63:51:00:a1:30:3c:ad:00:f9:e0:ae:e3:d6:4c:ab:
c8:cb:ca:5f:08:c8:13:e8:c9:2a:81:22:8c:1e:7b:
3f:eb:65:4b:f0:59:49:4a:62:5b:75:ad:62:71:7a:
48:59:2c:ca:74:83:d1:e2:77:a0:9f:39:3b:b8:8d:
8a:59:fa:28:68:71:85:14:e0:a3:8c:ba:1a:cf:5c:
ce:00:b0:0c:27:ea:57:a3:24:ea:a9:30:33:24:e1:
a0:e3:cf:de:2a:e9:c6:24:70:17:94:35:f6:5f:fa:
a7:3b:03:a1:f9:05:46:db:86:80:b7:5a:88:7c:8c:
db:ed:ea:4c:87:18:26:d7:4f:4d:90:19:f9:7b:b5:
62:6c:cf:01:28:a8:fe:6a:3c:08:8b:0d:78:bf:19:
e6:7c:0c:e1:50:84:5e:e9:6a:db:4f:7d:d6:f7:43:
66:1c:9d:bd:f2:90:96:f0:bb:c7:e5:c5:42:d4:78:
63:8f:80:a5:4d:96:c3:0a:aa:8f:07:9c:36:65:c6:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:2F:51:9D:5A:A4:8D:CC:83:AD:88:48:36:51:BE:DC:C4:1F:20
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dPAvUZ1apI3Mg62ISDZRvtzEHyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
09:3e:52:8b:78:bf:73:39:9e:81:4e:9b:81:5e:38:72:55:70:
c8:4a:3c:bc:af:41:03:57:d6:9a:c1:e5:11:84:79:ef:0a:42:
4f:8a:09:7d:92:1d:78:ae:d5:88:fe:8c:51:d7:ef:78:70:3c:
df:5a:05:4b:51:b2:11:4b:3e:28:7c:30:7b:7c:85:45:60:4e:
db:c7:48:98:e8:62:1f:35:a3:a5:d6:a2:b0:dd:87:03:d7:44:
41:e0:b1:97:7a:9d:67:26:4f:e0:0c:05:cb:39:a2:0c:12:11:
42:01:d2:07:42:c9:87:c2:df:b7:c4:f5:41:54:0c:f2:b0:8d:
ed:cb:ce:d4:a4:bf:aa:62:11:42:a4:6f:44:e0:e5:8b:97:ef:
4d:aa:20:1d:d0:7f:81:f9:41:49:75:1e:f3:c0:78:63:64:14:
3f:3c:a5:07:da:18:b2:0b:ec:32:0d:a7:39:dc:6d:94:1d:f2:
64:2b:ad:c8:31:16:19:3e:dc:81:1b:c7:ae:4b:e9:59:ca:f1:
de:1f:b1:cf:0e:22:f2:37:34:ea:41:8a:e3:07:32:59:51:8c:
d4:f0:e6:fc:48:51:a6:8b:3e:67:db:95:6e:d6:f9:c0:1a:b4:
32:79:ac:b0:2b:3a:58:1b:19:96:d3:89:25:0b:95:d2:d7:40:
7c:73:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org