Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cBmYdmjUWTio2yCeLBS2g3MJeBw.roa
File: cBmYdmjUWTio2yCeLBS2g3MJeBw.roa (raw, json)
Hash identifier: Kqk6vzXF5kzBcCkcdN4vKt5sHC7P9V+Me1/z0ZmGNkc=
Subject key identifier: 70:19:98:76:68:D4:59:38:A8:DB:20:9E:2C:14:B6:83:73:09:78:1C
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 01856D53C8FDB630C64D8CBCD099EFE7628B
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cBmYdmjUWTio2yCeLBS2g3MJeBw.roa
Signing time: Sun 01 Jan 2023 12:34:45 +0000
ROA not before: Sun 01 Jan 2023 12:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20911
IP address blocks: 178.254.246.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.248.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.200.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.212.0/23 maxlen: 23
178.254.213.0/24 maxlen: 24
178.254.212.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.208.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.207.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.216.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.215.0/24 maxlen: 24
178.254.214.0/24 maxlen: 24
178.254.226.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.228.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.232.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.231.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.227.0/24 maxlen: 24
178.254.240.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.228.0/24 maxlen: 24
93.152.228.0/23 maxlen: 23
93.152.253.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.248.0/24 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.255.0/24 maxlen: 24
93.152.254.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
46.229.207.128/25 maxlen: 25
46.229.206.128/25 maxlen: 25
185.95.251.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
46.229.192.0/24 maxlen: 24
46.229.192.0/23 maxlen: 23
46.229.192.0/20 maxlen: 20
46.229.194.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.196.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.195.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/24 maxlen: 24
46.229.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:c8:fd:b6:30:c6:4d:8c:bc:d0:99:ef:e7:62:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jan 1 12:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7019987668d45938a8db209e2c14b6837309781c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:07:67:b0:5b:d8:21:d5:4b:0a:d9:bf:ef:
19:7b:07:78:f9:09:aa:06:b9:e4:71:19:df:b1:08:
71:38:72:da:e4:2f:d7:55:0c:92:21:b7:02:ee:87:
9f:67:7a:76:c5:20:df:70:96:a2:d3:71:ae:65:f8:
25:bc:7d:eb:50:bc:49:47:62:0b:0a:f9:76:47:e1:
34:81:32:22:ba:c6:74:ac:01:f5:a3:15:24:24:47:
fe:e3:f7:84:c5:0a:40:10:53:2a:7a:a4:c8:06:0a:
7e:cb:77:4f:ad:ad:f9:1d:cb:11:4d:2e:0a:68:8a:
25:8b:29:38:16:bf:0b:7a:3c:50:08:22:fc:fa:c6:
27:ae:fc:74:35:74:e9:f8:f4:d5:98:fd:16:68:bb:
be:81:85:a9:d1:f6:af:c8:a1:d2:43:47:e4:aa:af:
bd:88:19:db:bc:4a:45:cd:c7:77:db:82:61:98:08:
09:5c:30:ec:e2:15:ff:de:47:bf:8d:62:b0:75:c1:
1e:67:8d:2a:0f:6d:af:23:75:fd:40:a8:0f:98:f5:
02:00:09:ec:fe:a1:58:b9:5e:93:47:57:23:68:1c:
35:f2:fb:a5:65:0c:f7:fe:86:2a:cc:4d:aa:1d:f9:
5c:e4:4e:c8:df:8a:0f:51:ce:f0:d2:e5:ed:92:0e:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:19:98:76:68:D4:59:38:A8:DB:20:9E:2C:14:B6:83:73:09:78:1C
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cBmYdmjUWTio2yCeLBS2g3MJeBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/23
178.254.197.0-178.254.255.255
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:33:5a:07:02:96:2b:4e:d1:a1:5c:a7:fb:4c:8e:fb:0f:d0:
8c:f7:51:27:3b:ba:f4:f5:84:0c:5b:e6:b3:c5:50:2b:26:bd:
5a:1c:ed:09:57:2f:0c:d3:77:f2:e7:2a:88:c0:4b:da:d4:46:
f7:6e:11:aa:99:65:79:82:bb:63:56:45:bd:1f:aa:ac:43:ba:
00:4a:ee:ce:6d:28:04:5a:6f:92:86:ae:4b:c1:33:45:f9:7b:
35:e0:e3:cf:d8:91:60:3f:19:0b:b7:ff:63:25:fd:71:83:79:
07:48:3c:8d:3f:8d:5f:61:a6:1b:c4:5b:89:91:17:9a:f6:8e:
f8:21:21:05:16:bf:08:36:df:59:ed:94:a5:37:b0:63:9f:a9:
ea:6c:4a:57:93:12:42:89:8a:48:57:2e:64:b7:91:c5:49:38:
60:27:e1:26:c6:b3:cb:9f:7a:63:ab:d6:3e:22:eb:2d:99:af:
9d:f0:55:93:79:38:14:64:45:f0:b6:f5:28:02:b0:2e:e0:d3:
1d:c9:68:f3:b2:90:0c:d5:21:57:11:dc:0e:ec:5e:4b:09:69:
d7:ee:08:9f:89:72:e0:bc:76:4f:4d:0b:64:3b:81:aa:47:d2:
4e:28:b3:5a:e3:5f:28:79:51:e8:34:4d:80:41:c6:26:05:ee:
e2:91:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net