Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Ggs6vsCm5-AyHHrz1hTZYpiPAY8.roa
File: Ggs6vsCm5-AyHHrz1hTZYpiPAY8.roa (raw, json)
Hash identifier: PBVoeJ5eLKww4EK5xD2Q0VcdfLEcirXDYmWMi5PUckw=
Subject key identifier: 1A:0B:3A:BE:C0:A6:E7:E0:32:1C:7A:F3:D6:14:D9:62:98:8F:01:8F
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 018AE01CD29EA0F84D430FAE7D376C837C98
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Ggs6vsCm5-AyHHrz1hTZYpiPAY8.roa
Signing time: Fri 29 Sep 2023 08:44:59 +0000
ROA not before: Fri 29 Sep 2023 08:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 213.156.0.0/20 maxlen: 24
91.211.160.0/22 maxlen: 24
212.19.192.0/19 maxlen: 19
195.238.86.0/23 maxlen: 24
212.26.192.0/19 maxlen: 19
185.116.12.0/22 maxlen: 24
45.151.116.0/22 maxlen: 24
5.183.132.0/22 maxlen: 24
212.57.48.0/20 maxlen: 24
217.8.96.0/20 maxlen: 20
45.95.252.0/22 maxlen: 24
2.56.216.0/22 maxlen: 24
93.188.64.0/22 maxlen: 24
193.105.183.0/24 maxlen: 24
213.173.56.0/22 maxlen: 22
77.73.224.0/21 maxlen: 24
185.249.136.0/22 maxlen: 24
45.10.124.0/22 maxlen: 24
185.251.152.0/22 maxlen: 24
194.61.84.0/24 maxlen: 24
194.61.86.0/24 maxlen: 24
195.184.86.0/23 maxlen: 24
195.184.90.0/23 maxlen: 24
171.22.176.0/22 maxlen: 24
45.140.156.0/22 maxlen: 24
85.184.8.0/21 maxlen: 24
185.234.152.0/23 maxlen: 24
185.239.168.0/23 maxlen: 24
185.234.154.0/24 maxlen: 24
185.239.170.0/24 maxlen: 24
37.148.184.0/21 maxlen: 24
91.216.34.0/24 maxlen: 24
185.253.48.0/22 maxlen: 24
2a02:690::/29 maxlen: 32
2001:6e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:1c:d2:9e:a0:f8:4d:43:0f:ae:7d:37:6c:83:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Sep 29 08:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0b3abec0a6e7e0321c7af3d614d962988f018f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:c8:3a:29:dd:5a:43:09:5d:5d:d7:3d:a1:
04:9b:d7:4c:60:bc:ea:5f:dd:be:dc:5b:7e:4a:58:
18:41:a7:e0:13:d6:75:2e:ea:f5:57:9c:c0:be:50:
d6:d4:7a:5f:47:6e:26:7c:d6:5b:fe:86:ef:59:14:
33:b8:61:95:08:2a:88:de:93:5d:bd:0b:6a:46:66:
92:b0:55:6c:dd:29:29:a4:0c:02:b5:fc:37:22:39:
9b:63:52:96:ae:f7:d0:9f:e0:18:5e:a2:d3:22:97:
af:26:bf:aa:e0:d3:e3:80:05:7f:00:af:1c:63:b0:
36:ae:28:10:8e:ba:79:1b:9b:2c:0c:97:0a:b8:11:
1e:5e:b9:3d:01:93:91:85:02:31:7c:29:f3:fc:29:
ec:ee:d2:5a:4e:03:4c:84:f5:09:5b:d0:14:58:f0:
e2:2c:43:41:2c:8d:2a:5c:63:2e:b9:11:a2:d0:ed:
13:f5:95:19:ab:9c:e9:d5:fe:90:b8:81:8e:5a:4c:
0f:bc:83:03:e7:b4:58:77:09:bf:45:88:01:e6:68:
35:d9:35:fa:73:ed:88:7d:e8:7f:29:bc:b9:37:7f:
db:46:ff:a8:6b:a1:af:65:f2:a0:87:e7:5f:98:32:
cd:2d:de:0b:48:af:b1:a4:8b:e3:a4:32:d5:ce:4b:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:3A:BE:C0:A6:E7:E0:32:1C:7A:F3:D6:14:D9:62:98:8F:01:8F
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Ggs6vsCm5-AyHHrz1hTZYpiPAY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.216.0/22
5.183.132.0/22
37.148.184.0/21
45.10.124.0/22
45.95.252.0/22
45.140.156.0/22
45.151.116.0/22
77.73.224.0/21
85.184.8.0/21
91.211.160.0/22
91.216.34.0/24
93.188.64.0/22
171.22.176.0/22
185.116.12.0/22
185.234.152.0-185.234.154.255
185.239.168.0-185.239.170.255
185.249.136.0/22
185.251.152.0/22
185.253.48.0/22
193.105.183.0/24
194.61.84.0/24
194.61.86.0/24
195.184.86.0/23
195.184.90.0/23
195.238.86.0/23
212.19.192.0/19
212.26.192.0/19
212.57.48.0/20
213.156.0.0/20
213.173.56.0/22
217.8.96.0/20
IPv6:
2001:6e0::/32
2a02:690::/29
Signature Algorithm: sha256WithRSAEncryption
27:ec:a2:e2:2e:7b:3c:bb:99:6c:17:1e:aa:0f:73:b3:4f:ca:
15:7d:02:5a:ec:04:0f:1f:1a:bc:38:14:85:f2:ec:e4:dc:27:
32:89:a7:ad:3d:a1:f3:34:a9:c8:6d:77:19:b7:5f:6e:e8:e8:
bb:3a:0a:43:14:e7:00:f5:45:3d:e8:e8:28:2d:d5:24:c6:95:
fd:00:39:8d:6b:81:e5:8e:e0:5c:5e:f2:00:a2:f1:7a:20:b3:
cc:16:26:a9:80:c7:62:b7:56:d0:a0:51:83:f9:f1:36:bf:6a:
31:7c:d1:d0:5d:cd:34:37:29:a2:58:ba:8e:04:9f:03:ed:4a:
9a:dd:a3:95:1e:40:ac:f1:07:87:fa:b2:3c:bb:b2:c7:64:c7:
fd:a0:28:81:59:1a:2b:24:ad:0f:fe:92:36:14:4f:a3:42:bb:
f2:f9:27:b2:fa:0a:19:d6:65:85:74:68:4f:15:57:33:00:70:
a2:1a:df:61:42:82:e7:81:a1:46:36:e4:61:33:79:85:cb:0d:
88:b8:db:3c:78:7a:de:1c:c7:a1:b9:f2:90:53:60:f8:c5:01:
9f:09:1b:c5:08:5c:43:85:cb:6e:5a:59:49:7f:b1:40:bc:8e:
f3:df:49:d6:98:a3:d9:d7:89:00:a5:4d:63:16:f1:d2:ca:9c:
ba:1b:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:30 2024 by rpki-client on console-ams.rpki-client.org