Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/MhgpxEwTaiqGUEZWhx_vB1SZISA.roa
File: MhgpxEwTaiqGUEZWhx_vB1SZISA.roa (raw, json)
Hash identifier: ROH86IOfWna701kkdHseuVZ3jYz/V9UUfWIlVPtuC/w=
Subject key identifier: 32:18:29:C4:4C:13:6A:2A:86:50:46:56:87:1F:EF:07:54:99:21:20
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 01858674393BB98DA7DE6341607AB6EFFF33
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/MhgpxEwTaiqGUEZWhx_vB1SZISA.roa
Signing time: Fri 06 Jan 2023 09:40:41 +0000
ROA not before: Fri 06 Jan 2023 09:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34170
IP address blocks: 158.181.36.0/24 maxlen: 24
158.181.37.0/24 maxlen: 24
158.181.35.0/24 maxlen: 24
158.181.38.0/24 maxlen: 24
158.181.33.0/24 maxlen: 24
158.181.34.0/24 maxlen: 24
158.181.32.0/24 maxlen: 24
158.181.39.0/24 maxlen: 24
158.181.44.0/23 maxlen: 23
158.181.46.0/23 maxlen: 23
80.69.48.0/24 maxlen: 24
80.69.50.0/24 maxlen: 24
80.69.51.0/24 maxlen: 24
80.69.49.0/24 maxlen: 24
80.69.57.0/24 maxlen: 24
80.69.58.0/24 maxlen: 24
80.69.56.0/24 maxlen: 24
80.69.54.0/24 maxlen: 24
80.69.55.0/24 maxlen: 24
80.69.52.0/24 maxlen: 24
80.69.53.0/24 maxlen: 24
80.69.61.0/24 maxlen: 24
80.69.62.0/24 maxlen: 24
80.69.59.0/24 maxlen: 24
80.69.60.0/24 maxlen: 24
80.69.63.0/24 maxlen: 24
92.39.92.0/24 maxlen: 24
92.39.95.0/24 maxlen: 24
92.39.93.0/24 maxlen: 24
92.39.94.0/24 maxlen: 24
92.39.88.0/24 maxlen: 24
92.39.91.0/24 maxlen: 24
92.39.89.0/24 maxlen: 24
92.39.90.0/24 maxlen: 24
91.135.240.0/24 maxlen: 24
91.135.241.0/24 maxlen: 24
91.135.244.0/24 maxlen: 24
91.135.245.0/24 maxlen: 24
91.135.242.0/24 maxlen: 24
91.135.243.0/24 maxlen: 24
91.135.246.0/24 maxlen: 24
91.135.248.0/24 maxlen: 24
91.135.247.0/24 maxlen: 24
91.135.251.0/24 maxlen: 24
91.135.252.0/24 maxlen: 24
91.135.249.0/24 maxlen: 24
91.135.250.0/24 maxlen: 24
91.135.253.0/24 maxlen: 24
91.135.255.0/24 maxlen: 24
91.135.254.0/24 maxlen: 24
185.105.198.0/24 maxlen: 24
185.105.199.0/24 maxlen: 24
185.105.196.0/24 maxlen: 24
185.105.197.0/24 maxlen: 24
212.47.136.0/22 maxlen: 22
212.47.140.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.152.0/24 maxlen: 24
212.47.148.0/22 maxlen: 22
212.47.157.0/24 maxlen: 24
212.47.158.0/24 maxlen: 24
212.47.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:74:39:3b:b9:8d:a7:de:63:41:60:7a:b6:ef:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jan 6 09:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=321829c44c136a2a86504656871fef0754992120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:31:c0:70:79:15:f3:dd:f2:7e:cf:49:98:
42:ef:e6:94:a5:88:d4:78:26:d0:99:53:34:3c:39:
26:e5:cf:08:29:95:77:68:aa:87:1e:9e:14:0f:e4:
44:f7:37:01:31:1d:b1:51:4c:f6:0b:5b:35:dc:e0:
ba:75:d9:77:2e:f0:ca:60:9c:49:ec:c7:1c:49:ad:
f4:33:10:71:1e:3d:ee:b8:b6:90:61:cc:fa:a9:b5:
42:37:9c:2c:2a:47:d8:b5:aa:ca:39:56:eb:66:1a:
fa:c6:09:cc:07:69:4f:d8:55:c1:43:64:ce:7f:c2:
7f:7b:d2:0d:4d:7d:f3:15:fc:ce:f2:2e:bb:57:77:
d7:70:c4:b1:48:e2:8c:92:e7:7e:dd:bc:ec:f8:27:
e9:b7:10:c9:7b:22:e3:3e:70:ce:87:82:e2:84:d8:
ee:fd:f2:85:be:7e:c0:f5:d1:20:ff:ab:b5:93:c7:
0d:22:cf:41:df:75:f3:59:6a:92:11:76:47:4a:26:
b3:16:b3:84:d5:90:3c:65:3a:21:29:c0:fa:43:d2:
60:82:58:70:1a:af:5f:db:8b:46:f8:f3:10:a3:e0:
5f:c9:64:47:2c:ac:c2:55:fa:1a:35:2b:d2:6f:93:
7a:be:19:1e:8a:3c:aa:c5:a4:5b:cf:28:c0:3f:10:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:29:C4:4C:13:6A:2A:86:50:46:56:87:1F:EF:07:54:99:21:20
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/MhgpxEwTaiqGUEZWhx_vB1SZISA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/20
91.135.240.0/20
92.39.88.0/21
158.181.32.0/21
158.181.44.0/22
185.105.196.0/22
212.47.136.0-212.47.152.255
212.47.157.0-212.47.159.255
Signature Algorithm: sha256WithRSAEncryption
63:94:83:cd:30:6b:51:92:47:a8:81:a7:e5:97:f3:bb:e2:82:
e3:7a:6b:90:33:00:78:30:7d:2e:66:ce:ac:98:de:d3:e5:79:
4f:e1:c2:dc:e2:f5:7b:f7:0f:34:54:80:17:40:c1:c2:ed:24:
58:30:2b:08:f0:9d:79:19:92:9e:f2:dd:08:3e:d9:fe:1b:54:
57:c2:5b:61:ae:88:93:68:34:e7:bd:79:55:7c:f1:a6:4b:3a:
8e:99:3a:30:ce:ce:cf:eb:9e:9c:ab:fb:99:f3:7a:71:81:64:
7e:f3:09:03:ab:c0:16:30:04:94:55:3a:f3:74:19:6e:ca:2a:
57:35:05:fe:36:6a:91:72:43:f9:cf:d8:f6:a1:42:e1:19:02:
ed:64:f2:87:52:50:e7:f5:aa:22:a0:81:33:f3:d8:ff:a0:e7:
79:3a:87:7d:96:0c:a6:2a:21:ea:35:25:2b:74:19:e5:5b:1d:
49:0e:d5:7e:9e:27:cd:26:a9:89:96:98:a5:fd:40:f8:45:13:
93:46:91:37:eb:89:23:6f:de:10:5a:4c:81:16:14:e3:dc:c7:
e4:b3:a4:ae:3c:85:83:49:64:b1:17:66:19:71:f3:0d:cb:8d:
d0:d2:5c:e0:76:5a:a2:d7:8c:2b:3b:23:a4:6c:96:44:c4:94:
28:f7:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net