Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iPGUP46GRtvb__OQ8K6MahNX1_4.roa
File: iPGUP46GRtvb__OQ8K6MahNX1_4.roa (raw, json)
Hash identifier: cyWcGXfDa6dTZCxSRcCtS0YbXF4DDAVx12UbyxBOOUY=
Subject key identifier: 88:F1:94:3F:8E:86:46:DB:DB:FF:F3:90:F0:AE:8C:6A:13:57:D7:FE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018BB00C496B2BFFB1E8FB3260300CA813E6
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iPGUP46GRtvb__OQ8K6MahNX1_4.roa
Signing time: Wed 08 Nov 2023 17:47:57 +0000
ROA not before: Wed 08 Nov 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
89.190.152.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.154.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.133.62.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.60.0/24 maxlen: 24
45.133.60.0/22 maxlen: 22
178.19.40.0/22 maxlen: 22
178.19.43.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
185.244.231.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.228.0/24 maxlen: 24
185.244.228.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.195.0/24 maxlen: 24
2.59.194.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
194.32.112.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
194.32.112.0/22 maxlen: 22
194.32.115.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.104.0/24 maxlen: 24
194.31.104.0/23 maxlen: 23
194.31.104.0/22 maxlen: 22
194.31.107.0/24 maxlen: 24
194.31.106.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
185.28.51.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
31.15.4.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.7.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
185.225.244.0/22 maxlen: 22
185.225.246.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.244.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.15.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.12.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.145.132.0/22 maxlen: 22
185.229.218.0/23 maxlen: 23
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.229.218.0/24 maxlen: 24
185.229.217.0/24 maxlen: 24
185.229.216.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
45.81.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:0c:49:6b:2b:ff:b1:e8:fb:32:60:30:0c:a8:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Nov 8 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88f1943f8e8646dbdbfff390f0ae8c6a1357d7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:f5:b5:23:33:ce:9f:e7:dc:e6:4d:a3:21:
60:cb:d1:bf:95:4d:0a:8c:e4:e2:7a:6e:6d:0a:c2:
17:d1:cf:dc:44:ca:8b:bb:28:90:56:0f:ca:f2:4d:
0a:f6:de:21:b4:3d:87:21:4b:c3:ec:58:05:80:1a:
03:b8:22:fc:26:9b:59:77:7b:3c:c7:cb:44:0f:84:
4b:24:a6:b9:13:d2:57:aa:da:bb:cb:1c:f7:2b:06:
fb:cd:08:7f:87:73:4a:a9:6a:47:b6:ef:e9:14:8e:
ca:52:c8:a6:80:8a:a6:74:98:96:65:c1:fb:d1:1e:
c0:c1:b1:a3:19:76:d5:a8:13:4d:94:7a:f5:07:71:
c5:07:2c:85:3c:a1:5c:b2:15:3a:ab:a0:0c:4a:b3:
c0:a2:3c:12:b5:19:03:da:12:24:c1:a1:ec:1b:87:
b9:a3:cd:df:43:c0:83:ee:2a:60:d0:bb:02:00:73:
4d:2d:b9:4d:2d:dd:da:c8:98:b9:3b:d6:3d:9a:f0:
a9:b7:cd:ce:74:96:51:9d:3e:48:18:6a:07:e9:93:
98:3c:16:82:f0:23:28:ad:4f:73:b2:b9:18:84:39:
af:d1:96:8e:61:e6:bd:f4:5c:19:e7:39:ee:6d:26:
a9:82:03:1b:03:d2:59:c7:0a:26:3c:b7:62:a5:0e:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:94:3F:8E:86:46:DB:DB:FF:F3:90:F0:AE:8C:6A:13:57:D7:FE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iPGUP46GRtvb__OQ8K6MahNX1_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.133.60.0/22
45.137.12.0/23
45.145.132.0/22
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0/22
185.28.51.0/24
185.225.244.0/22
185.229.216.0/22
185.231.186.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
16:25:7d:d5:99:8f:46:ee:c4:d1:66:4c:06:07:48:6b:9f:0a:
f5:4a:29:42:c9:5b:26:41:7d:ae:45:25:a3:9a:66:37:e3:e7:
12:3b:dc:80:f8:57:4c:a7:9e:45:a6:06:c7:cd:63:e2:51:20:
c9:cc:e6:24:8e:52:7b:c3:86:72:e8:be:08:94:0b:11:0b:d9:
7c:97:c9:5a:1e:08:26:9b:6c:18:e8:63:a4:82:e5:4a:fd:b6:
82:2b:03:20:12:05:87:04:c0:8d:e1:8c:0d:90:8c:dc:46:4f:
02:c8:ae:e9:6c:7f:30:84:ae:11:d9:67:21:ea:23:0d:d4:e2:
d2:0e:a4:cd:e1:95:03:e4:d2:1c:78:aa:dc:b4:b1:91:b9:f8:
ed:f1:f5:d5:4f:69:28:9c:8d:06:62:a4:3a:ee:38:23:b3:36:
7a:5f:95:ac:06:7e:f5:47:35:1f:e8:57:c7:f6:de:e4:5d:40:
d1:1f:b9:22:60:24:67:d9:bb:03:55:97:9f:85:f6:e3:0b:21:
17:a9:2c:47:3e:28:ce:ba:16:de:ff:89:f1:62:85:8e:cb:29:
eb:2c:34:5c:c2:84:ff:90:bb:45:fd:d1:b8:6a:30:7c:52:1c:
54:98:18:33:e2:72:c5:81:de:4d:aa:63:86:fa:04:ba:e5:85:
0a:37:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net