Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/szMKioPrs1lRSAC2GXaz2II3MLY.roa
File: szMKioPrs1lRSAC2GXaz2II3MLY.roa (raw, json)
Hash identifier: Tc1Ogumb41eP/WndC0aDPVfK932/7wBGJ8ZvRVXEvt8=
Subject key identifier: B3:33:0A:8A:83:EB:B3:59:51:48:00:B6:19:76:B3:D8:82:37:30:B6
Certificate issuer: /CN=78d778fe5754dc3e16d92270424be21b9281ec72
Certificate serial: 018A1BD47D14CD9B61E63DC6E7BC3A6A4341
Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/szMKioPrs1lRSAC2GXaz2II3MLY.roa
Signing time: Tue 22 Aug 2023 06:00:25 +0000
ROA not before: Tue 22 Aug 2023 06:00:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51018
IP address blocks: 178.22.36.0/22 maxlen: 22
178.22.32.0/22 maxlen: 22
178.22.32.0/21 maxlen: 21
95.159.97.0/24 maxlen: 24
95.159.95.0/24 maxlen: 24
95.159.96.0/20 maxlen: 20
95.159.96.0/24 maxlen: 24
95.159.93.0/24 maxlen: 24
95.159.94.0/24 maxlen: 24
95.159.92.0/24 maxlen: 24
95.159.98.0/24 maxlen: 24
95.159.104.0/24 maxlen: 24
95.159.102.0/24 maxlen: 24
95.159.104.0/22 maxlen: 22
95.159.103.0/24 maxlen: 24
95.159.100.0/24 maxlen: 24
95.159.101.0/24 maxlen: 24
95.159.99.0/24 maxlen: 24
95.159.105.0/24 maxlen: 24
95.159.111.0/24 maxlen: 24
95.159.109.0/24 maxlen: 24
95.159.110.0/24 maxlen: 24
95.159.107.0/24 maxlen: 24
95.159.108.0/24 maxlen: 24
95.159.106.0/24 maxlen: 24
95.159.112.0/24 maxlen: 24
95.159.117.0/24 maxlen: 24
95.159.118.0/24 maxlen: 24
95.159.116.0/24 maxlen: 24
95.159.114.0/24 maxlen: 24
95.159.112.0/20 maxlen: 20
95.159.112.0/21 maxlen: 21
95.159.115.0/24 maxlen: 24
95.159.113.0/24 maxlen: 24
95.159.124.0/24 maxlen: 24
95.159.125.0/24 maxlen: 24
95.159.123.0/24 maxlen: 24
95.159.120.0/21 maxlen: 21
95.159.121.0/24 maxlen: 24
95.159.122.0/24 maxlen: 24
95.159.119.0/24 maxlen: 24
95.159.120.0/24 maxlen: 24
95.159.126.0/24 maxlen: 24
95.159.127.0/24 maxlen: 24
95.159.64.0/20 maxlen: 20
95.159.64.0/24 maxlen: 24
95.159.69.0/24 maxlen: 24
95.159.70.0/24 maxlen: 24
95.159.67.0/24 maxlen: 24
95.159.68.0/24 maxlen: 24
95.159.65.0/24 maxlen: 24
95.159.66.0/24 maxlen: 24
95.159.64.0/18 maxlen: 18
95.159.71.0/24 maxlen: 24
95.159.76.0/24 maxlen: 24
95.159.74.0/24 maxlen: 24
95.159.75.0/24 maxlen: 24
95.159.72.0/24 maxlen: 24
95.159.73.0/24 maxlen: 24
95.159.77.0/24 maxlen: 24
95.159.78.0/24 maxlen: 24
95.159.83.0/24 maxlen: 24
95.159.81.0/24 maxlen: 24
95.159.82.0/24 maxlen: 24
95.159.82.0/23 maxlen: 23
95.159.84.0/22 maxlen: 22
95.159.84.0/23 maxlen: 23
95.159.84.0/24 maxlen: 24
95.159.85.0/24 maxlen: 24
95.159.79.0/24 maxlen: 24
95.159.80.0/24 maxlen: 24
95.159.80.0/23 maxlen: 23
95.159.80.0/22 maxlen: 22
95.159.80.0/20 maxlen: 20
95.159.90.0/24 maxlen: 24
95.159.91.0/24 maxlen: 24
95.159.88.0/22 maxlen: 22
95.159.88.0/23 maxlen: 23
95.159.88.0/24 maxlen: 24
95.159.89.0/24 maxlen: 24
95.159.86.0/24 maxlen: 24
95.159.86.0/23 maxlen: 23
95.159.87.0/24 maxlen: 24
194.180.40.0/24 maxlen: 24
194.180.40.0/22 maxlen: 22
194.180.40.0/23 maxlen: 23
2a01:58a0::/32 maxlen: 32
2a01:58a0::/40 maxlen: 40
2a01:58a0:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:d4:7d:14:cd:9b:61:e6:3d:c6:e7:bc:3a:6a:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72
Validity
Not Before: Aug 22 06:00:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3330a8a83ebb359514800b61976b3d8823730b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:2c:08:c8:d5:89:06:85:b3:28:11:ae:80:
7e:10:1d:c6:7c:c3:67:29:81:87:47:99:b1:b2:ed:
4c:19:24:90:89:9b:d5:ac:bb:6e:e1:db:fe:8f:98:
3f:7e:4d:f6:da:c5:de:8c:22:82:a5:28:b2:6a:21:
f6:6d:4d:42:25:95:31:d9:83:3d:b2:f0:2a:cf:81:
54:44:97:52:a8:db:da:6e:63:93:73:2b:11:b8:36:
bc:47:4b:96:68:cd:fd:ff:e2:be:15:71:fa:95:bb:
66:fe:28:43:1f:37:70:fb:fa:45:a8:13:b7:fb:78:
19:04:7c:81:d6:1a:b8:7c:b5:7c:90:2b:f4:d0:d9:
16:53:42:eb:79:78:be:c3:a7:b3:bc:b1:0e:bd:31:
e6:45:c7:43:d4:f9:de:40:ba:bb:e1:cb:ba:87:96:
22:22:cb:df:a8:bf:a2:3d:24:aa:cb:a1:9f:1e:a7:
b7:e9:a4:7f:12:22:2a:2c:d7:a6:db:a5:26:d8:3a:
49:d9:1a:e3:93:63:5e:da:0d:fd:fe:60:24:46:94:
9c:1c:a5:88:6e:4c:de:a4:51:e1:4f:52:c3:46:72:
06:7e:00:6b:4c:6f:e7:5b:e3:be:be:65:5e:f2:7d:
bc:11:48:b8:df:f0:9f:ef:14:05:10:69:b2:d1:75:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:33:0A:8A:83:EB:B3:59:51:48:00:B6:19:76:B3:D8:82:37:30:B6
X509v3 Authority Key Identifier:
keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/szMKioPrs1lRSAC2GXaz2II3MLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.159.64.0/18
178.22.32.0/21
194.180.40.0/22
IPv6:
2a01:58a0::/32
Signature Algorithm: sha256WithRSAEncryption
26:1e:0e:f9:7c:63:cc:1d:7c:3a:de:5e:0a:44:fd:32:cc:96:
72:c9:2c:ca:6c:21:0f:a8:88:65:a4:b1:6d:47:15:1b:31:79:
fa:0e:04:3f:4f:f0:ce:c5:80:6d:12:d1:98:ac:fb:e1:79:55:
46:57:4d:2f:01:92:bf:a4:be:11:04:21:51:54:68:0c:2f:6e:
6c:e2:c4:c7:d6:0b:ab:a0:0d:d5:08:24:20:6b:08:2e:2b:47:
de:64:06:ea:60:8a:7e:97:4f:22:6b:53:4d:9f:9c:6a:d5:a9:
50:37:ca:8a:bd:f1:d8:c5:8b:a4:dd:df:fd:a9:86:a8:f7:c3:
48:e3:b9:7b:ba:e7:66:d6:35:9b:15:16:36:88:1f:cc:9d:ac:
e0:6f:91:cb:15:89:b9:fc:f0:cd:e8:03:a2:eb:ea:07:6d:f2:
7d:1b:fa:d9:55:c3:a5:93:98:8d:71:bd:e3:2e:0b:fd:36:02:
c6:8d:27:c7:b6:2e:cd:9b:9e:23:8d:7a:9e:6e:c7:06:32:f5:
b7:e9:cc:0a:ad:1c:ef:19:bc:48:28:06:10:4a:43:06:98:31:
2f:7b:87:1c:3d:0d:0c:df:ca:ed:a3:a3:60:19:8b:86:2c:24:
bd:0c:68:28:92:99:13:57:11:c5:65:75:d4:ca:da:93:91:49:
30:03:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:11 2024 by rpki-client on console-fra.rpki-client.org