Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ykzI2CsqMSGITs62lVLTj9o1kMo.roa
File: ykzI2CsqMSGITs62lVLTj9o1kMo.roa (raw, json)
Hash identifier: PRi5dQvUbWfyKvcQKPBkJ/vmWYgMpeRIBGWVVgSDUBs=
Subject key identifier: CA:4C:C8:D8:2B:2A:31:21:88:4E:CE:B6:95:52:D3:8F:DA:35:90:CA
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01857295AFBAFC19EBF450886D5CEC77E522
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ykzI2CsqMSGITs62lVLTj9o1kMo.roa
Signing time: Mon 02 Jan 2023 13:04:50 +0000
ROA not before: Mon 02 Jan 2023 13:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44252
IP address blocks: 93.113.250.0/24 maxlen: 24
188.215.30.0/24 maxlen: 24
89.46.127.0/24 maxlen: 24
94.228.233.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.227.0/24 maxlen: 24
94.228.238.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.234.0/24 maxlen: 24
5.154.225.0/24 maxlen: 24
185.36.255.0/24 maxlen: 24
89.39.144.0/24 maxlen: 24
89.39.145.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
213.196.97.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
178.17.19.0/24 maxlen: 24
178.17.23.0/24 maxlen: 24
178.17.24.0/24 maxlen: 24
178.17.22.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
178.17.27.0/24 maxlen: 24
178.17.28.0/24 maxlen: 24
178.17.26.0/24 maxlen: 24
178.17.30.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.235.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
176.67.192.0/24 maxlen: 24
176.67.196.0/24 maxlen: 24
176.67.198.0/24 maxlen: 24
176.67.193.0/24 maxlen: 24
176.67.194.0/24 maxlen: 24
89.47.40.0/24 maxlen: 24
89.47.41.0/24 maxlen: 24
176.67.200.0/23 maxlen: 24
176.67.204.0/24 maxlen: 24
176.67.202.0/23 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
62.101.130.0/24 maxlen: 24
176.67.212.0/24 maxlen: 24
176.67.208.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.214.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
185.27.131.0/24 maxlen: 24
185.27.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 11:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:af:ba:fc:19:eb:f4:50:88:6d:5c:ec:77:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 2 13:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca4cc8d82b2a3121884eceb69552d38fda3590ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:91:6a:f6:ea:55:65:ca:3d:32:09:9f:a7:
47:7d:50:63:c3:68:96:67:37:56:fa:f8:46:0d:16:
c7:40:ee:7f:4b:a5:2a:0a:ab:8e:92:8b:d8:88:05:
5f:dd:ce:60:13:d8:5d:95:61:34:89:ea:db:35:b0:
e2:38:3d:2b:66:8a:01:3d:1e:0d:f8:22:c9:87:57:
5b:e1:d1:bc:e4:50:7a:18:3b:77:00:9c:35:20:a1:
9d:3b:02:69:5c:49:75:9d:b5:b9:ed:de:23:39:d8:
0d:1b:06:ce:84:25:51:e6:ae:18:b3:8d:27:92:4a:
3f:3a:03:b3:3e:ce:b3:6c:9e:2f:ae:9d:aa:fc:11:
8d:81:a3:da:0a:5e:cc:30:54:44:74:c3:31:32:62:
3b:68:f6:7d:e1:fa:d9:c4:70:6e:21:a9:61:42:b9:
3c:37:f2:c0:b3:d2:77:32:b9:d8:5d:c3:09:a9:c9:
5e:64:09:a3:53:8c:87:57:98:39:e7:70:89:07:aa:
cf:2c:df:90:2e:6d:25:44:2e:94:2f:9c:57:4a:f1:
c8:2d:79:a8:71:17:3f:81:e9:a4:6e:30:db:26:07:
21:e5:4a:ec:1d:f4:85:2b:3c:0e:69:12:f7:ce:9d:
12:eb:97:a3:57:93:52:26:84:24:8d:3c:9f:cd:e0:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:C8:D8:2B:2A:31:21:88:4E:CE:B6:95:52:D3:8F:DA:35:90:CA
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ykzI2CsqMSGITs62lVLTj9o1kMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
37.153.174.0/24
62.101.130.0/24
89.39.144.0/23
89.46.127.0/24
89.47.40.0/23
92.60.224.0-92.60.233.255
92.60.235.0/24
92.60.237.0-92.60.239.255
93.113.250.0/24
94.228.227.0/24
94.228.229.0-94.228.231.255
94.228.233.0-94.228.234.255
94.228.237.0-94.228.238.255
176.67.192.0-176.67.194.255
176.67.196.0/24
176.67.198.0/24
176.67.200.0-176.67.208.255
176.67.210.0-176.67.212.255
176.67.214.0/24
176.67.217.0-176.67.221.255
176.67.223.0/24
178.17.19.0/24
178.17.22.0-178.17.24.255
178.17.26.0-178.17.28.255
178.17.30.0/24
185.27.128.0/24
185.27.131.0/24
185.36.255.0/24
188.215.30.0/24
188.240.200.0/24
213.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:00:a7:e4:1d:79:70:bb:2e:35:37:4a:f5:99:31:2f:c5:76:
27:be:e5:54:9b:11:0c:6d:64:e8:17:f8:e6:73:87:27:d2:94:
37:0c:70:d6:86:37:4d:d7:fd:5c:7d:e8:9a:23:00:e6:5f:be:
e0:3e:00:31:20:b2:a9:c8:9c:bc:aa:91:e8:5d:c5:4b:52:b5:
6c:a8:19:c2:2b:46:24:e3:73:16:96:e0:f1:8f:71:e2:c8:98:
76:67:9f:9f:84:93:08:7c:ed:b6:fd:7e:06:d7:2a:25:12:aa:
4c:71:85:7a:86:72:fa:86:4f:2c:5b:4d:2d:e1:5f:4f:46:c7:
84:4b:33:e1:ec:0f:ca:3b:60:f6:3a:7c:b4:a2:96:8c:99:d6:
84:db:98:bd:61:5f:55:42:98:6c:e5:83:8c:e0:11:84:89:2f:
a5:b8:de:a3:23:d3:f4:96:12:4e:02:64:81:ad:68:67:47:61:
e7:ff:5e:51:34:14:2c:fb:fb:b5:34:b0:30:a4:5b:96:d0:40:
c2:0a:c2:8c:ab:94:1d:f6:fc:0b:2e:e7:32:74:fb:14:41:2d:
79:05:09:68:63:30:1b:b4:57:71:e0:5c:14:14:6a:74:77:7d:
25:ac:a8:77:dc:75:3d:41:88:7a:31:56:7d:e8:f6:6e:cd:6f:
62:62:58:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org