Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sbaIzczE748kXx25AFSfSiCS-e4.roa
File: sbaIzczE748kXx25AFSfSiCS-e4.roa (raw, json)
Hash identifier: U2/53wsasOY5iCJjIdLM5OVdIgfjGTLhLoW91xMbxJA=
Subject key identifier: B1:B6:88:CD:CC:C4:EF:8F:24:5F:1D:B9:00:54:9F:4A:20:92:F9:EE
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018CC86F25CCE264787CDDD9544D7DAAC508
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sbaIzczE748kXx25AFSfSiCS-e4.roa
Signing time: Tue 02 Jan 2024 04:29:36 +0000
ROA not before: Tue 02 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
94.26.76.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.78.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.150.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:25:cc:e2:64:78:7c:dd:d9:54:4d:7d:aa:c5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1b688cdccc4ef8f245f1db900549f4a2092f9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:44:36:7b:0f:07:d5:ea:8c:60:de:69:80:
e7:19:c5:d8:60:02:c6:f3:ab:a3:42:23:ff:59:a5:
ed:54:8d:34:5a:51:da:69:95:b3:31:2e:92:a2:8c:
93:c7:3c:89:9f:48:80:c1:f0:1c:c7:1f:15:45:f4:
84:cc:5c:cf:3e:0c:9b:bb:64:12:7e:ff:a3:bb:c8:
09:98:85:03:cb:c2:ab:9c:07:24:d4:52:0a:62:c8:
12:57:54:ec:6e:c6:21:3e:e9:98:ec:f4:e6:f7:1c:
51:d8:74:62:8c:9b:cf:42:46:65:f6:1e:93:3d:f1:
74:10:cf:c7:69:c0:5f:f3:1a:4b:c5:5e:40:45:b0:
ac:7a:55:eb:cf:27:d2:c4:b1:5f:12:07:5f:ec:29:
07:5d:29:1f:1b:b1:83:d0:52:d6:1c:2d:a1:a5:8e:
80:24:3c:ae:07:83:ec:53:a6:e2:1b:1b:4b:7f:7e:
d7:78:8d:82:d5:c4:f7:23:60:ed:ce:bd:d0:20:31:
c0:ec:1e:c0:1c:25:95:29:14:20:d1:79:dc:f5:16:
8e:be:6b:4b:b4:ff:04:49:70:1d:01:f8:a1:d4:8f:
fe:8e:70:e1:ea:77:36:6a:89:ef:ca:3e:45:24:71:
33:3e:41:bc:9e:0c:e3:22:d5:fa:19:67:c9:18:6a:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:88:CD:CC:C4:EF:8F:24:5F:1D:B9:00:54:9F:4A:20:92:F9:EE
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/sbaIzczE748kXx25AFSfSiCS-e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/23
45.141.235.0/24
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0/21
91.92.49.0-91.92.53.255
93.152.205.0-93.152.227.255
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4f:9f:14:55:67:b0:bd:fa:87:4d:c0:1b:29:7d:d8:79:30:
36:9f:a2:62:bc:dd:8e:1f:c7:a8:fe:1f:1c:33:8e:c3:f6:a9:
d7:33:a9:31:7a:cf:86:7c:79:79:43:d2:bc:fd:c3:93:6a:6e:
79:e1:5a:c3:72:6d:6d:26:ab:a2:a7:67:67:ac:81:fb:93:6c:
0a:a2:c1:b8:1e:99:71:89:54:3e:00:0d:52:1d:20:ae:22:8f:
42:cf:a7:0d:a4:1c:65:88:1a:21:cc:37:2d:e5:4e:4c:11:e7:
92:9f:0a:32:ae:74:bb:bf:5b:af:9f:1a:d8:02:83:6e:30:0b:
5c:b5:1b:1e:72:ea:cb:9a:fd:76:43:65:1f:33:b0:37:20:cf:
a8:94:a7:e1:e5:fc:0b:ee:99:c4:42:23:a4:8f:09:e3:98:41:
a0:be:e6:c3:df:d5:9a:9c:c2:42:c9:70:8d:13:c8:94:de:d7:
52:f1:50:c3:df:f9:a5:c3:38:b4:65:7e:f6:24:55:98:6b:5d:
fe:41:61:6d:b8:8b:74:ce:c1:ed:aa:2f:ab:75:54:ac:2e:de:
ce:05:cd:86:4f:9d:a5:45:df:08:e2:15:92:b6:85:6f:36:57:
74:36:35:d4:c0:68:a7:b1:07:b2:3b:5e:36:08:3b:17:61:48:
ee:88:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 20:33:40 2024 by rpki-client on console-fra.rpki-client.org