Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/S_hAwzUvgxFMU6elhKbHP6Riv3c.roa
File: S_hAwzUvgxFMU6elhKbHP6Riv3c.roa (raw, json)
Hash identifier: blIPCAO1lSiuMbMxHx3dI5/HarMKz8ROnxb39u98YTM=
Subject key identifier: 4B:F8:40:C3:35:2F:83:11:4C:53:A7:A5:84:A6:C7:3F:A4:62:BF:77
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018B703754E65B0D7B1C35C9B11D4AC0FDC3
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/S_hAwzUvgxFMU6elhKbHP6Riv3c.roa
Signing time: Fri 27 Oct 2023 08:19:16 +0000
ROA not before: Fri 27 Oct 2023 08:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 194.56.148.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
185.36.228.0/24 maxlen: 24
185.141.105.0/24 maxlen: 24
185.141.104.0/24 maxlen: 24
185.141.104.0/22 maxlen: 22
185.141.107.0/24 maxlen: 24
185.141.106.0/24 maxlen: 24
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
213.109.199.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.173.129.0/24 maxlen: 24
185.173.130.0/24 maxlen: 24
91.247.171.0/24 maxlen: 24
195.211.44.0/22 maxlen: 22
195.211.44.0/24 maxlen: 24
195.211.47.0/24 maxlen: 24
195.211.45.0/24 maxlen: 24
195.211.46.0/24 maxlen: 24
195.110.38.0/23 maxlen: 23
185.233.131.0/24 maxlen: 24
80.71.149.0/24 maxlen: 24
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
185.213.195.0/24 maxlen: 24
152.89.44.0/24 maxlen: 24
152.89.44.0/22 maxlen: 22
152.89.47.0/24 maxlen: 24
185.170.8.0/24 maxlen: 24
152.89.46.0/24 maxlen: 24
152.89.45.0/24 maxlen: 24
185.234.14.0/24 maxlen: 24
185.58.240.0/22 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.200.0/22 maxlen: 22
130.193.77.0/24 maxlen: 24
185.112.150.0/23 maxlen: 23
185.112.150.0/24 maxlen: 24
185.206.231.0/24 maxlen: 24
185.112.151.0/24 maxlen: 24
185.112.149.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.130.0/23 maxlen: 23
88.135.36.0/22 maxlen: 22
88.135.38.0/24 maxlen: 24
88.135.36.0/24 maxlen: 24
88.135.37.0/24 maxlen: 24
185.141.132.0/22 maxlen: 22
185.141.132.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.252.200.0/24 maxlen: 24
185.235.245.0/24 maxlen: 24
188.209.152.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
188.209.153.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
185.128.136.0/22 maxlen: 22
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
2a0a:5e80::/48 maxlen: 48
2a0a:5e80::/64 maxlen: 64
2a0a:5e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:37:54:e6:5b:0d:7b:1c:35:c9:b1:1d:4a:c0:fd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Oct 27 08:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf840c3352f83114c53a7a584a6c73fa462bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:ca:b2:74:db:20:3d:ca:42:62:ba:7a:fc:
8b:00:95:a1:b2:08:2c:a5:db:89:32:de:fc:69:49:
1f:0b:56:90:79:55:9a:ce:a7:d8:35:1c:65:de:a8:
92:ae:c7:33:98:32:1c:63:cf:68:84:00:17:d9:50:
21:28:9c:f1:2d:b4:90:99:75:a1:01:f9:64:77:6a:
52:e5:39:82:18:f1:7b:c4:52:fb:13:ec:fb:b9:02:
68:ee:6e:d4:f3:f5:0b:ae:d9:2e:d6:96:66:9c:27:
c0:df:b0:1e:2e:90:3b:be:f4:05:5e:6d:f1:fe:06:
56:10:a9:09:0c:9f:85:b0:90:fa:1d:7d:41:3e:ad:
bc:ce:a9:ed:94:72:0d:37:aa:bc:13:a3:eb:df:ed:
3c:75:9a:70:6d:06:66:21:83:a6:c1:fb:12:9e:54:
72:85:5e:23:f2:95:54:76:89:6c:8d:91:9e:bc:ee:
7b:7a:d4:7d:a3:1e:80:d3:b8:fe:40:98:83:56:e1:
b8:a3:33:f4:4c:c3:d3:26:2e:65:fe:b4:93:a9:f5:
4e:24:06:12:c9:a9:b6:5b:2f:4c:c5:9d:aa:79:75:
83:7e:b6:2c:87:1a:93:c3:fc:15:6e:5f:be:38:b6:
4f:72:15:1f:6e:6e:1f:27:c3:b5:c5:c6:32:8a:11:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:40:C3:35:2F:83:11:4C:53:A7:A5:84:A6:C7:3F:A4:62:BF:77
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/S_hAwzUvgxFMU6elhKbHP6Riv3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.120.0/22
80.71.149.0/24
88.135.36.0/22
91.236.168.0/23
91.247.171.0/24
130.193.77.0/24
152.89.44.0/22
185.18.212.0/22
185.36.228.0/24
185.51.200.0/22
185.58.240.0/22
185.112.149.0-185.112.151.255
185.121.130.0/23
185.128.136.0/22
185.141.104.0/22
185.141.132.0/22
185.170.8.0/24
185.173.129.0-185.173.130.255
185.206.231.0/24
185.213.195.0/24
185.233.131.0/24
185.234.14.0/24
185.235.245.0/24
185.252.200.0/24
188.209.152.0/23
194.56.148.0/24
195.110.38.0/23
195.211.44.0/22
213.109.199.0/24
IPv6:
2a0a:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:fd:89:25:8e:c1:29:53:39:bf:63:3d:5e:53:77:3e:4f:a9:
ee:eb:97:7b:65:3c:de:92:18:00:73:e7:fd:f0:34:15:ab:f9:
37:49:fb:32:63:22:69:ce:63:a0:9c:19:c7:c2:b1:a6:e8:f2:
ca:c0:fb:72:a7:ef:8b:05:2e:18:61:81:61:48:68:26:0e:38:
e3:01:89:32:43:f2:76:87:a8:24:29:ea:ae:a8:24:fd:24:2b:
5c:d6:4e:b3:83:d5:ff:74:27:8a:20:c3:e3:c3:9c:5b:f7:02:
2b:55:95:e2:0e:d9:b4:fd:bc:6b:32:db:fa:8d:1b:ea:49:0e:
3d:50:c8:71:0d:14:e0:e4:5d:3f:ca:ef:05:7c:d0:f0:7e:03:
00:82:57:c8:5c:cb:f1:c8:1b:a0:f1:b7:e5:83:f7:96:23:89:
f6:86:aa:ba:66:ab:b2:dd:58:cb:00:2e:05:3f:1a:b9:c7:09:
0c:24:0a:eb:f4:d6:e5:f0:9c:9b:21:ea:3f:14:ce:4b:e3:41:
0f:70:51:4a:c7:dc:a7:5d:74:bc:52:f9:01:1c:f9:87:68:97:
4c:81:7b:9a:51:c4:5b:1f:5b:a6:2e:f4:55:a1:fe:e0:10:4b:
9b:fc:14:2b:6e:5a:a1:aa:2f:1c:e0:ea:66:e5:4e:6e:7e:46:
3b:1f:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org