Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/_zHah1J8dnvjmxRQ-_Vdilvafic.roa
File: _zHah1J8dnvjmxRQ-_Vdilvafic.roa (raw, json)
Hash identifier: eCXcZd8erCBRNCSRkgI8OB70sdUgJ2s+0qBp0EKTo8s=
Subject key identifier: FF:31:DA:87:52:7C:76:7B:E3:9B:14:50:FB:F5:5D:8A:5B:DA:7E:27
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 018B6FE5D840BE2F1469BFEC2CE6BC67D579
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/_zHah1J8dnvjmxRQ-_Vdilvafic.roa
Signing time: Fri 27 Oct 2023 06:50:15 +0000
ROA not before: Fri 27 Oct 2023 06:50:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25106
IP address blocks: 176.60.4.0/22 maxlen: 22
176.60.0.0/18 maxlen: 24
176.60.44.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.40.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
134.17.208.0/22 maxlen: 24
134.17.208.0/20 maxlen: 24
46.216.152.0/21 maxlen: 21
134.17.224.0/20 maxlen: 24
46.216.246.0/24 maxlen: 24
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
185.20.114.0/23 maxlen: 23
178.168.168.0/21 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
134.17.64.0/20 maxlen: 20
176.60.176.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
176.60.184.0/22 maxlen: 22
176.60.192.0/20 maxlen: 20
178.168.144.0/23 maxlen: 23
176.60.192.0/18 maxlen: 24
134.17.0.0/20 maxlen: 24
176.60.208.0/23 maxlen: 23
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
46.216.0.0/17 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
178.168.242.0/23 maxlen: 23
134.17.96.0/19 maxlen: 19
178.168.253.0/24 maxlen: 24
2a02:bf0:3000::/36 maxlen: 36
2a02:bf0:7000::/36 maxlen: 36
2a02:bf0:6000::/36 maxlen: 36
2a02:bf0:5000::/36 maxlen: 36
2a02:bf0:4000::/36 maxlen: 36
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0::/32 maxlen: 32
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:25::/48 maxlen: 48
2a02:bf0::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:e5:d8:40:be:2f:14:69:bf:ec:2c:e6:bc:67:d5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Oct 27 06:50:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff31da87527c767be39b1450fbf55d8a5bda7e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:f6:b3:c5:c7:90:74:46:51:76:ae:3b:2e:
d6:15:36:d7:b8:fe:31:f4:7c:ee:77:47:10:45:6f:
22:19:c7:f3:83:9d:57:1f:3b:60:aa:5d:b3:03:e9:
fa:91:1a:19:93:2a:f9:28:24:27:36:9f:8c:9d:47:
53:68:c2:d4:8f:99:7d:5e:de:dc:4a:7b:6b:8f:44:
0d:fc:e0:4a:9d:20:c1:cc:bd:e2:94:2b:ad:02:0d:
5d:21:fe:b5:fd:be:86:ba:da:0e:f3:7a:3b:5e:c5:
f9:3e:72:7a:61:4a:25:77:8f:d6:eb:95:36:73:b2:
61:30:6b:2f:e6:d8:60:f6:62:bf:f4:aa:60:59:e7:
b3:a4:50:f8:60:1e:88:ca:6d:a5:c5:e1:3a:d5:cf:
95:8e:b5:42:63:55:8c:75:99:96:50:3e:93:73:ae:
6a:2c:ff:44:15:43:1f:81:2e:0d:76:f6:0f:f2:35:
08:bb:c1:ff:08:93:06:5d:7e:19:d4:10:11:fa:d6:
c4:cb:ee:07:16:49:fb:fb:d1:6b:14:3e:49:2c:79:
c8:b9:5a:02:c1:74:5f:bc:57:be:b2:88:90:95:66:
34:ab:23:eb:7f:95:8c:0f:c9:ca:ca:e3:0b:19:24:
5f:a2:27:23:aa:98:5c:5e:7e:50:44:21:2c:92:8d:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:DA:87:52:7C:76:7B:E3:9B:14:50:FB:F5:5D:8A:5B:DA:7E:27
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/_zHah1J8dnvjmxRQ-_Vdilvafic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:06:5e:33:bf:e6:1d:71:b2:3f:08:dc:c1:4a:f2:f7:02:aa:
e6:77:96:b1:3c:a9:6f:6c:72:c2:85:9b:be:54:d0:07:83:1f:
75:0b:9a:6d:33:cc:92:bb:7f:16:91:40:fe:4d:fd:b4:a3:ad:
06:56:81:04:82:04:f6:5a:0a:65:46:b1:fd:77:46:a1:bf:97:
d1:5a:55:6f:d1:a0:d8:df:c3:93:bd:bc:8f:d2:93:e8:0a:da:
1f:fe:c0:a2:33:28:07:1c:1a:20:df:39:33:8f:ad:74:06:ed:
0c:42:e4:07:1f:b2:48:89:0d:1c:42:f5:e3:67:20:6d:f3:4a:
98:c6:4b:01:18:8d:32:a0:27:ee:5d:f8:38:d6:f5:eb:65:db:
fd:ce:f1:35:b0:66:72:f2:78:36:90:e1:2b:1f:6c:71:b7:cb:
ee:95:cb:84:ea:a3:8f:22:ef:5a:41:05:c0:b8:c2:96:5c:5c:
10:44:6c:d7:08:08:0d:30:1c:78:d7:1b:f0:d2:cd:f9:23:b4:
e2:82:28:29:a4:a2:b3:e4:cb:81:b9:07:1e:04:0d:70:e5:57:
10:32:9b:5f:02:73:85:c4:c7:bc:bc:a7:04:87:8d:40:e7:5c:
6b:54:2f:7b:ff:4a:1d:ad:3d:57:8b:c6:ff:84:5b:6d:d3:82:
12:39:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net