Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o8p3kSk4yydKdAPOs9kU_PWFsEI.roa
File: o8p3kSk4yydKdAPOs9kU_PWFsEI.roa (raw, json)
Hash identifier: YuXnFht2gfE45ZbXhmdzYQep27WLwVMEcb6AfGV80J0=
Subject key identifier: A3:CA:77:91:29:38:CB:27:4A:74:03:CE:B3:D9:14:FC:F5:85:B0:42
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185CA883C491B2CF15A8CE677C453593701
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o8p3kSk4yydKdAPOs9kU_PWFsEI.roa
Signing time: Thu 19 Jan 2023 14:56:43 +0000
ROA not before: Thu 19 Jan 2023 14:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209641
IP address blocks: 185.5.248.0/23 maxlen: 23
185.5.248.0/22 maxlen: 22
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
139.28.220.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
95.214.10.0/24 maxlen: 24
95.214.11.0/24 maxlen: 24
95.214.9.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.138.0/24 maxlen: 24
185.105.119.0/24 maxlen: 24
94.142.139.0/24 maxlen: 24
94.142.143.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
185.125.216.0/22 maxlen: 22
185.105.118.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.58.205.0/24 maxlen: 24
185.58.206.0/24 maxlen: 24
185.58.204.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.207.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
185.125.228.0/22 maxlen: 22
185.125.230.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.196.0/22 maxlen: 22
194.67.194.0/23 maxlen: 23
194.67.193.0/24 maxlen: 24
193.124.176.0/21 maxlen: 21
193.124.176.0/20 maxlen: 20
193.124.184.0/21 maxlen: 21
45.128.176.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.177.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
195.47.250.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.202.0/24 maxlen: 24
194.67.200.0/23 maxlen: 23
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9300:d0::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Jan 2023 15:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:88:3c:49:1b:2c:f1:5a:8c:e6:77:c4:53:59:37:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 19 14:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ca77912938cb274a7403ceb3d914fcf585b042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:a5:5a:15:85:a0:f5:0f:ae:3c:38:11:ee:
c8:b4:f6:80:bf:96:3c:91:4a:34:2c:fb:8e:b4:12:
98:e3:7d:34:1d:6d:f4:b9:05:ff:ca:c3:ac:a4:c9:
4c:d4:84:61:51:6a:66:c9:32:b8:e1:90:3e:45:4d:
d1:b5:6b:57:21:7b:0b:74:6b:a5:d4:26:1a:d6:9d:
23:4b:30:69:ad:4a:7e:41:32:56:9e:65:39:1c:8d:
22:95:ed:a2:e6:ae:c4:1a:5a:b7:31:52:06:d9:4e:
5a:70:9f:63:fe:be:f6:50:50:6b:be:02:92:42:5d:
d3:6b:d7:15:b5:36:f6:41:e1:ca:af:58:ac:ea:75:
32:1e:d3:5d:d4:22:fe:d3:59:f1:2b:45:17:b1:4d:
0b:db:7c:78:3e:ef:0f:4b:9a:f4:de:d1:98:69:6f:
de:b4:31:ea:c6:44:15:34:dd:3a:80:8f:5b:15:aa:
24:d0:8c:84:be:92:a3:10:60:87:34:3a:0c:f9:7b:
c9:e7:32:d9:0c:f5:ea:28:56:30:8f:98:38:f8:dd:
dd:d5:95:a9:d5:6c:22:b3:54:e3:a6:64:a2:ac:6c:
98:24:42:25:d2:4c:65:9b:c9:f3:84:13:c0:8a:a5:
bc:cf:11:cf:92:4b:7c:93:f4:61:38:cc:95:11:d5:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:77:91:29:38:CB:27:4A:74:03:CE:B3:D9:14:FC:F5:85:B0:42
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o8p3kSk4yydKdAPOs9kU_PWFsEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/24
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
95.214.9.0-95.214.11.255
139.28.220.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/22
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
24:9d:fa:25:1a:42:7b:53:95:b7:6c:24:02:bd:54:40:e3:3f:
76:0a:61:dc:0e:43:18:31:32:75:e2:53:31:15:77:fb:02:b3:
8b:7c:b6:ec:9f:34:12:10:b8:44:4d:d0:62:9e:b0:ca:0b:5e:
fe:1e:0d:0f:a3:9f:b0:8d:0e:36:6a:b1:fc:8b:af:2c:c8:93:
90:6f:5e:18:62:cd:22:e5:9a:18:46:19:f9:35:b2:1e:b6:97:
43:b7:24:36:95:3d:c0:6b:0a:33:2e:5b:89:4a:a4:02:1f:23:
79:a4:fc:10:41:92:f5:b0:ae:e3:1b:97:3b:db:c6:b3:a1:fe:
15:f9:b6:bc:06:44:4d:86:bc:6c:83:2a:e9:d2:e6:d6:47:87:
05:5e:cc:23:d7:13:31:b3:90:51:07:32:48:23:8a:46:fb:06:
40:13:b7:42:53:86:c6:a1:96:a2:f6:50:d8:52:07:be:a1:65:
fe:8c:5c:28:fc:c2:a8:30:2a:25:87:97:bb:1f:a9:6b:64:3c:
b1:d3:a8:1e:34:92:97:44:aa:2a:f9:98:b6:06:99:92:c3:38:
53:48:9f:6d:e0:3e:ba:91:63:4f:45:57:c0:01:f8:2c:d0:ed:
0c:2e:74:1c:7f:67:63:a2:17:ab:59:0c:45:8b:ea:4b:15:db:
8e:f1:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org