Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/6J2a_frwbvuJgbQsxUa-tAHWXZE.roa
File: 6J2a_frwbvuJgbQsxUa-tAHWXZE.roa (raw, json)
Hash identifier: mcn3Ipa1PLo8jOFLa7DH5wNrdMvfuziH4qXuFUB8w+0=
Subject key identifier: E8:9D:9A:FD:FA:F0:6E:FB:89:81:B4:2C:C5:46:BE:B4:01:D6:5D:91
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 018B807113E5F685F5369BEA958A60D15047
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/6J2a_frwbvuJgbQsxUa-tAHWXZE.roa
Signing time: Mon 30 Oct 2023 11:56:16 +0000
ROA not before: Mon 30 Oct 2023 11:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25106
IP address blocks: 176.60.4.0/22 maxlen: 22
176.60.0.0/18 maxlen: 24
176.60.44.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
46.56.56.0/22 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.40.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
134.17.208.0/22 maxlen: 24
134.17.208.0/20 maxlen: 24
46.216.152.0/21 maxlen: 21
134.17.224.0/20 maxlen: 24
46.216.246.0/24 maxlen: 24
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
178.168.168.0/21 maxlen: 24
185.20.114.0/23 maxlen: 23
134.17.24.0/22 maxlen: 22
134.17.24.0/21 maxlen: 21
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
134.17.64.0/20 maxlen: 20
176.60.176.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
176.60.184.0/22 maxlen: 24
176.60.192.0/20 maxlen: 20
178.168.144.0/23 maxlen: 23
176.60.192.0/18 maxlen: 24
134.17.0.0/20 maxlen: 24
176.60.208.0/23 maxlen: 23
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
46.216.0.0/17 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
178.168.242.0/23 maxlen: 23
134.17.96.0/19 maxlen: 19
178.168.253.0/24 maxlen: 24
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0:4000::/36 maxlen: 36
2a02:bf0:5000::/36 maxlen: 36
2a02:bf0:6000::/36 maxlen: 36
2a02:bf0:7000::/36 maxlen: 36
2a02:bf0:3000::/36 maxlen: 36
2a02:bf0::/32 maxlen: 32
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:25::/48 maxlen: 48
2a02:bf0::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:71:13:e5:f6:85:f5:36:9b:ea:95:8a:60:d1:50:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Oct 30 11:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89d9afdfaf06efb8981b42cc546beb401d65d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:c7:16:2b:61:bb:68:da:d4:cb:a7:30:d9:
6a:1f:a5:a5:e4:23:20:35:ee:b8:a4:31:0e:b2:88:
33:b9:9b:44:58:8f:84:65:07:18:35:3b:4b:92:2e:
a3:e5:b8:d0:86:0d:e8:0d:db:cd:16:05:a1:4d:ca:
7e:f1:4f:b8:9c:0c:eb:12:9b:7c:66:c2:2f:67:3b:
1d:fe:d3:9d:e0:dc:84:02:23:bd:a3:93:f9:a0:5d:
b2:ef:57:3d:17:f8:36:4d:fb:9f:7a:08:20:d8:7b:
39:dd:41:63:44:b1:c3:87:62:0e:aa:07:99:b7:ec:
26:61:3d:2b:9c:19:57:09:bd:43:d7:c6:e4:3e:04:
89:33:e1:04:b3:36:72:b4:d0:e6:94:c5:e5:13:19:
53:86:d3:42:90:2a:16:47:17:ed:1c:1f:2a:c5:ad:
df:8d:1e:a6:66:41:a3:1d:69:ba:f7:e5:10:4c:91:
f7:5e:3f:2d:77:30:6f:36:8d:2a:a3:11:88:40:7b:
d6:a7:94:ff:7a:6b:d8:38:5b:e6:25:d9:f0:05:e3:
13:35:4a:70:31:d7:f7:22:8a:af:7b:55:3a:36:21:
ac:1f:8f:8e:e8:d9:cc:45:a0:48:3c:a1:bb:06:9e:
89:6a:c9:f3:99:d7:af:a9:5f:a7:12:0e:01:5e:63:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:9A:FD:FA:F0:6E:FB:89:81:B4:2C:C5:46:BE:B4:01:D6:5D:91
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/6J2a_frwbvuJgbQsxUa-tAHWXZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:47:07:13:8e:4f:74:d5:15:0d:d9:45:97:88:d0:e4:9d:27:
2c:25:9a:8c:93:15:cc:75:ec:e0:29:2d:0f:97:73:f6:68:c6:
88:e0:46:b6:df:14:e9:01:7a:40:64:d2:13:21:97:a7:82:83:
7c:b9:d4:d5:3e:05:1d:d0:95:37:24:4d:fd:43:44:e4:1d:24:
61:f5:36:0b:fd:16:45:46:02:5f:4c:b0:5a:4c:9a:53:14:4f:
e5:45:29:37:36:79:77:60:3a:b5:13:68:88:58:08:8d:33:3f:
25:85:6d:fd:39:9a:61:fc:c9:fb:c1:73:6f:bc:c9:15:7d:07:
69:d1:ac:1e:8e:3f:30:af:44:18:89:16:ad:52:02:95:0b:d7:
6a:36:7f:27:db:2d:28:70:a0:77:d9:44:8a:ce:1d:ce:1b:f7:
0a:15:8a:90:d2:05:b8:68:f0:81:ba:aa:ae:2b:fe:a1:52:c8:
1c:b0:4f:f4:f6:7c:1b:b3:86:0b:2c:c2:77:9e:d2:2a:a5:ef:
dc:b8:24:36:8e:41:4c:cd:52:53:44:48:67:d8:bb:b6:1b:6e:
ac:4b:17:0c:a6:de:fa:9b:f9:f1:79:eb:5b:4b:e4:8e:92:32:
76:e2:ca:2b:bf:8f:81:c4:53:e7:b1:df:d6:a4:d2:74:09:dc:
86:60:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net