Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/AmN0eoXr6CYWofyfq-w2r-QyM8Q.roa
File: AmN0eoXr6CYWofyfq-w2r-QyM8Q.roa (raw, json)
Hash identifier: 5D7eCWRSpRG+aiHxfMi4wFUkJAXRpHUD0odGIGytNlw=
Subject key identifier: 02:63:74:7A:85:EB:E8:26:16:A1:FC:9F:AB:EC:36:AF:E4:32:33:C4
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018AB6F0ED3D7526C66946A18226B3AB5319
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/AmN0eoXr6CYWofyfq-w2r-QyM8Q.roa
Signing time: Thu 21 Sep 2023 08:52:37 +0000
ROA not before: Thu 21 Sep 2023 08:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.144.88.0/22 maxlen: 24
185.147.140.0/22 maxlen: 32
91.228.216.0/24 maxlen: 24
185.36.254.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.201.188.0/24 maxlen: 24
89.40.24.0/24 maxlen: 32
5.154.174.0/24 maxlen: 24
45.156.224.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
188.119.154.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.96.162.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
87.239.254.0/24 maxlen: 32
45.149.28.0/22 maxlen: 24
89.44.205.0/24 maxlen: 32
185.217.64.0/22 maxlen: 22
185.166.84.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
185.152.248.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
185.242.217.0/24 maxlen: 24
45.95.24.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a12:adc0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a05:6700::/29 maxlen: 29
2a06:46c0::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:3040::/29 maxlen: 48
2a07:9c80::/29 maxlen: 29
2a06:4a00::/29 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a07:f2c0::/29 maxlen: 29
2a06:5700::/29 maxlen: 32
2a01:4740::/32 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a06:df80::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:f0:ed:3d:75:26:c6:69:46:a1:82:26:b3:ab:53:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Sep 21 08:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0263747a85ebe82616a1fc9fabec36afe43233c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:7d:81:6e:21:30:e1:d9:87:af:47:42:18:
99:25:b0:86:dc:6b:a5:30:5d:2c:a6:7b:fc:da:7a:
70:65:1c:9e:ae:14:f7:4b:e1:0a:02:85:77:16:b7:
b1:24:82:aa:26:53:f7:26:1f:f4:30:e9:15:fe:08:
f3:21:e8:09:9d:30:e3:90:6f:36:fd:a1:c4:70:15:
16:d8:84:ab:b7:e6:36:1d:d9:cb:5a:b5:8c:ab:76:
74:53:7a:c6:aa:78:17:f4:cd:f1:6e:e0:8a:a8:60:
be:92:2a:d5:d3:00:79:0d:ad:c8:10:2b:b7:26:73:
ba:44:8a:5b:3b:a8:60:90:c6:34:d9:89:88:bd:06:
d9:f1:c8:ab:8d:de:32:fd:69:b2:f3:46:d8:f1:33:
17:83:90:da:aa:76:cf:8c:c3:e7:f6:bd:8b:f3:bd:
2d:cf:05:c7:3a:74:40:f6:31:9e:84:dd:3b:8a:f5:
8a:24:bd:4e:16:02:db:5e:4f:cf:42:06:be:20:18:
16:aa:f6:db:33:ca:54:18:02:d8:09:56:da:d3:52:
f7:be:4e:7e:27:b3:f8:fa:fb:35:56:e1:9c:d5:5e:
34:73:9d:3d:05:f1:d6:6d:36:9f:54:30:9b:d0:7e:
df:00:0b:b1:b4:7e:9a:95:55:b3:5b:25:dc:a4:e8:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:74:7A:85:EB:E8:26:16:A1:FC:9F:AB:EC:36:AF:E4:32:33:C4
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/AmN0eoXr6CYWofyfq-w2r-QyM8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.254.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
2a12:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
00:03:6e:9f:79:79:da:e3:c2:36:81:a5:af:ab:a9:0f:4b:ea:
c7:de:6d:8a:5a:23:11:88:6d:df:c2:4d:92:5e:2c:2f:b4:75:
6f:51:59:3a:40:e7:0f:0c:40:89:59:f8:f0:c4:f5:9a:80:e8:
92:77:f8:fb:6d:f6:3d:d9:cc:9d:61:ab:ef:b1:0d:94:52:0f:
e1:2b:7a:88:97:b1:7f:5c:f0:87:04:34:62:38:fc:26:e4:a4:
23:d2:2a:83:4a:fd:03:05:35:24:21:54:47:7b:ca:cc:90:a0:
fa:e4:ce:09:58:8d:1d:b6:ec:ad:05:49:be:2a:22:b1:fc:6a:
40:6b:33:dc:51:28:7f:9c:61:67:c9:c7:f7:56:3c:5e:a2:8f:
19:b7:a2:79:95:24:ed:ea:01:56:f4:98:05:19:20:10:da:a4:
ff:a4:28:c8:e3:77:d8:5c:26:4f:45:d4:ba:3c:06:1d:73:04:
88:91:04:02:9a:58:58:27:47:3f:09:e3:c9:bd:83:fe:93:be:
20:6a:27:eb:e9:3b:f9:9b:30:51:ab:39:fb:b2:31:20:f0:1f:
78:6d:a9:36:d8:c2:96:fa:67:ee:fa:77:c8:9e:83:57:de:97:
6d:1d:40:54:36:a6:21:bc:46:12:9a:2b:d8:ae:59:74:63:e5:
f1:93:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 03:48:18 2023 by rpki-client on console-fra.rpki-client.org