Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Iu67VwYcTLnWVc4atjW08age2y8.roa
File: Iu67VwYcTLnWVc4atjW08age2y8.roa (raw, json)
Hash identifier: X+wJSf5bimFm4iCmpIjiULmYXtKeSjZ40nz0YvsQ21M=
Subject key identifier: 22:EE:BB:57:06:1C:4C:B9:D6:55:CE:1A:B6:35:B4:F1:A8:1E:DB:2F
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 018CC2DB3D3F3023CCD53D52702B97C797AF
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Iu67VwYcTLnWVc4atjW08age2y8.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Mar 2024 23:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:3f:30:23:cc:d5:3d:52:70:2b:97:c7:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22eebb57061c4cb9d655ce1ab635b4f1a81edb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:a7:8f:e9:56:1a:7e:73:af:72:fa:81:1e:
3b:6c:13:67:26:bf:c0:2c:8d:be:c0:ec:39:f7:c4:
7c:30:c9:b6:84:a0:ec:4f:31:68:b2:3b:07:1e:24:
d9:c3:ef:ee:67:6b:50:01:7e:8f:51:6f:5b:6c:da:
ec:db:98:bb:89:5f:9c:09:b8:2e:89:79:1e:f4:38:
68:f4:50:55:8c:07:48:44:86:5b:45:01:5e:eb:39:
54:c9:c9:41:77:34:6f:2c:e4:2f:3b:04:24:98:5f:
f6:c5:3f:ad:1d:df:b1:66:eb:c5:6d:b7:93:2b:c8:
a7:23:c5:3e:c9:03:ba:3b:0f:ed:f8:69:24:f2:fd:
42:80:dd:31:b6:c3:ef:73:62:c4:a6:fa:11:d4:f2:
99:89:2b:a4:2c:c0:31:ca:1e:80:a8:a3:db:94:4f:
c4:a9:a6:45:e4:e0:f5:51:4a:24:a9:bc:66:fa:d7:
c8:9f:f8:33:30:0c:70:8c:fb:24:e5:b1:5b:48:46:
f2:08:81:f0:c1:57:07:a4:90:95:4d:49:51:ed:60:
c2:23:b8:58:71:1b:90:d6:43:90:d2:56:5c:bd:2a:
46:1d:11:b9:eb:2f:af:26:23:4f:e4:ab:ba:1a:91:
13:dc:df:76:67:61:13:b4:44:d5:15:3c:52:6f:65:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:BB:57:06:1C:4C:B9:D6:55:CE:1A:B6:35:B4:F1:A8:1E:DB:2F
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Iu67VwYcTLnWVc4atjW08age2y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/22
31.210.157.0-31.210.159.255
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
1d:0a:77:9c:a2:44:27:e4:3a:55:4d:12:b1:ee:95:da:d4:63:
33:8d:a1:a3:6a:00:6f:79:6b:2f:9e:86:6b:bd:5d:00:23:aa:
4f:49:73:b5:c2:e2:56:c6:ca:23:b4:f4:2a:91:33:50:f6:75:
eb:d3:45:95:05:24:08:07:59:2d:b4:56:69:7e:e4:76:c2:1e:
f7:d6:2c:0f:1c:a3:53:64:d9:5b:aa:8c:3b:dc:92:7e:fb:44:
30:1b:65:d2:53:4b:3e:50:0a:14:37:ab:85:9d:c8:54:6f:67:
81:48:45:1f:0b:af:61:14:f6:84:d5:35:65:44:5e:78:23:db:
fc:98:5d:cf:39:9b:ab:be:88:b3:22:b0:e5:35:21:ea:46:8e:
cf:7a:cb:9a:ea:24:93:b4:88:62:35:e6:ff:7b:2c:d3:6b:fd:
a0:52:a5:86:b6:d3:95:4a:c8:0e:83:ea:e5:93:36:ef:6b:0c:
b5:39:79:1a:ae:31:c2:55:ca:8e:e3:41:a7:8c:88:ae:fb:ac:
44:25:ee:83:da:98:c8:6a:fb:a2:58:fd:4a:e4:97:59:8d:6b:
68:31:b3:07:10:ad:b3:de:75:ab:78:12:8a:72:ba:2a:b7:4e:
45:05:8a:b6:c2:cd:d3:12:3d:7a:bc:40:d2:99:1c:58:c0:e9:
a2:d6:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 09:15:52 2024 by rpki-client on console.sobornost.net