Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/_NSpVXCnEhZPHE-Fs2obUJctsH8.roa
File: _NSpVXCnEhZPHE-Fs2obUJctsH8.roa (raw, json)
Hash identifier: zTBTwPP2qVb7nbJLX8uTnRGiTRR9tQQ1Ug7PGDgDrps=
Subject key identifier: FC:D4:A9:55:70:A7:12:16:4F:1C:4F:85:B3:6A:1B:50:97:2D:B0:7F
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01863A28F7BDCA0152F6FA22F7C45E4D0948
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/_NSpVXCnEhZPHE-Fs2obUJctsH8.roa
Signing time: Fri 10 Feb 2023 07:10:08 +0000
ROA not before: Fri 10 Feb 2023 07:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:28:f7:bd:ca:01:52:f6:fa:22:f7:c4:5e:4d:09:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Feb 10 07:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd4a95570a712164f1c4f85b36a1b50972db07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:b2:29:70:15:15:be:91:f8:74:a6:44:82:
3b:53:71:d1:25:70:a0:28:7f:4c:00:31:03:3c:27:
07:c6:04:76:e9:b0:1b:b8:10:7d:0b:4b:28:cf:34:
d4:01:36:0a:4c:d5:20:a3:e7:27:de:93:4c:42:04:
57:12:cd:b1:76:8f:72:5e:41:b6:48:9f:a4:ce:f9:
89:81:07:7c:76:76:ca:fe:7b:aa:19:1f:e7:1a:d8:
2e:c8:3f:26:84:a8:58:cb:67:14:eb:a9:5e:bb:66:
91:8e:c6:c6:c1:2c:1a:e5:24:4d:2c:99:ae:90:1f:
78:50:17:72:5a:b7:69:6a:93:2c:e1:be:bf:15:e3:
ca:7c:69:58:9b:4d:0b:95:91:5b:6c:3b:b9:21:68:
77:34:9b:78:3c:53:ae:51:b9:d0:e8:97:7d:69:3c:
bf:44:a2:d8:9b:ca:36:46:7c:52:3a:c6:22:70:25:
e6:6a:e9:04:0b:4a:9a:e1:54:53:f4:13:f1:99:80:
52:4f:a5:b5:e4:83:2d:57:b3:89:a3:0f:bc:f4:c2:
26:74:d8:56:b9:ed:00:9a:b2:68:98:4b:3e:63:de:
77:13:e7:02:e9:c6:f6:63:b5:bd:86:5d:05:d1:f3:
d9:8f:22:a9:c7:c0:9d:1c:b8:bb:79:2a:75:33:60:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:A9:55:70:A7:12:16:4F:1C:4F:85:B3:6A:1B:50:97:2D:B0:7F
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/_NSpVXCnEhZPHE-Fs2obUJctsH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/22
31.210.157.0-31.210.159.255
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
b2:bf:02:1c:b7:ff:4a:4a:9e:cc:6d:ff:95:d8:16:a6:ae:52:
3c:c1:9e:cd:bf:00:d9:84:bc:c6:36:b8:01:fb:70:89:89:2a:
3e:8f:1f:ff:62:47:03:c5:2a:af:83:8f:f3:c2:0a:3c:d8:bf:
c3:65:b2:3f:33:ef:e2:18:55:0f:1e:20:fb:1d:e0:31:3d:7c:
ba:81:26:21:7a:4b:e2:b0:1c:34:ac:35:91:cd:f3:11:59:b6:
57:61:b0:d6:a8:70:e3:cd:1d:d3:85:5c:51:b8:c4:18:f0:01:
01:fd:2e:a9:2d:df:54:0a:ac:15:a1:68:35:4d:a1:43:98:cd:
c1:d4:6a:4b:7a:be:bd:5a:f2:74:6a:b4:6c:44:53:0c:31:81:
ea:26:ad:55:8b:27:58:cb:2a:98:dc:e6:79:ab:27:d6:a5:f7:
43:eb:3a:63:42:93:00:a8:8a:a2:14:4e:bf:21:91:4b:5a:44:
bf:91:13:a1:41:f4:fe:c9:8e:3d:ed:79:b7:24:27:bf:d8:49:
a9:d2:9b:a9:0f:eb:5c:1b:2c:f3:36:42:74:f7:a4:a1:24:98:
65:07:28:62:69:bb:35:96:01:fc:e4:73:ad:dc:d4:4f:d4:31:
09:23:a3:3d:17:9f:98:64:34:1a:fa:b5:80:7a:2b:01:63:d2:
bb:fc:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net