Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/HUWbYlT4RF46hMtPwK855bTJ2Yg.roa
File: HUWbYlT4RF46hMtPwK855bTJ2Yg.roa (raw, json)
Hash identifier: 36xjW+e52mRvxcJ6n1IkMJa7yE0a2GilSjGJ6mce0ko=
Subject key identifier: 1D:45:9B:62:54:F8:44:5E:3A:84:CB:4F:C0:AF:39:E5:B4:C9:D9:88
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018C867F4594E3A8510CD4BB04608BFD54FA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/HUWbYlT4RF46hMtPwK855bTJ2Yg.roa
Signing time: Wed 20 Dec 2023 09:12:16 +0000
ROA not before: Wed 20 Dec 2023 09:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205647
IP address blocks: 151.242.0.0/21 maxlen: 21
151.242.8.0/22 maxlen: 22
151.241.224.0/21 maxlen: 21
151.247.216.0/21 maxlen: 21
151.247.214.0/23 maxlen: 23
151.247.224.0/22 maxlen: 22
151.247.232.0/22 maxlen: 22
151.247.228.0/22 maxlen: 22
151.247.237.0/24 maxlen: 24
151.247.238.0/23 maxlen: 23
151.247.240.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
151.247.248.0/22 maxlen: 22
31.58.240.0/20 maxlen: 20
151.240.240.0/21 maxlen: 21
31.59.12.0/22 maxlen: 22
151.240.80.0/21 maxlen: 21
151.240.168.0/22 maxlen: 22
151.240.192.0/21 maxlen: 21
31.58.236.0/22 maxlen: 22
94.182.97.192/28 maxlen: 28
31.56.116.0/24 maxlen: 24
151.244.132.0/22 maxlen: 22
151.244.128.0/22 maxlen: 22
151.244.136.0/22 maxlen: 22
151.244.140.0/22 maxlen: 22
151.244.144.0/22 maxlen: 22
151.244.152.0/22 maxlen: 22
151.244.148.0/22 maxlen: 22
151.244.156.0/22 maxlen: 22
151.244.56.0/21 maxlen: 21
151.244.52.0/22 maxlen: 22
85.15.49.0/24 maxlen: 24
85.15.48.0/24 maxlen: 24
151.244.64.0/21 maxlen: 21
151.244.76.0/22 maxlen: 22
151.244.72.0/22 maxlen: 22
151.244.80.0/21 maxlen: 21
151.244.88.0/21 maxlen: 21
94.183.192.0/18 maxlen: 18
31.56.64.0/19 maxlen: 19
31.56.96.0/20 maxlen: 20
151.244.160.0/22 maxlen: 22
151.244.164.0/22 maxlen: 22
31.56.0.0/18 maxlen: 18
151.244.172.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
151.244.180.0/22 maxlen: 22
151.244.184.0/22 maxlen: 22
151.244.188.0/22 maxlen: 22
151.244.192.0/22 maxlen: 22
151.244.196.0/22 maxlen: 22
151.244.200.0/22 maxlen: 22
151.244.204.0/22 maxlen: 22
151.244.208.0/22 maxlen: 22
151.244.212.0/22 maxlen: 22
94.182.244.0/23 maxlen: 23
94.182.248.0/23 maxlen: 23
94.183.0.0/18 maxlen: 18
94.182.192.0/18 maxlen: 18
94.182.206.0/24 maxlen: 24
94.182.204.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.205.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.217.0/24 maxlen: 24
94.182.226.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.232.0/23 maxlen: 23
94.182.228.0/22 maxlen: 22
94.182.240.0/23 maxlen: 23
94.182.234.0/23 maxlen: 23
94.183.128.0/18 maxlen: 18
151.244.48.0/22 maxlen: 22
94.183.64.0/18 maxlen: 18
94.182.41.0/24 maxlen: 24
94.182.56.0/22 maxlen: 22
94.182.64.0/20 maxlen: 20
94.182.60.0/22 maxlen: 22
94.182.64.0/18 maxlen: 18
94.182.72.0/21 maxlen: 21
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.112.0/20 maxlen: 20
94.182.116.0/22 maxlen: 22
94.182.114.0/23 maxlen: 23
94.182.120.0/21 maxlen: 21
94.182.128.0/20 maxlen: 20
94.182.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:7f:45:94:e3:a8:51:0c:d4:bb:04:60:8b:fd:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Dec 20 09:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d459b6254f8445e3a84cb4fc0af39e5b4c9d988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:67:3c:08:b6:23:83:18:7d:b1:04:21:13:
0f:36:e8:ec:3e:f6:9e:5f:f8:f3:37:de:bc:55:cf:
b6:0d:63:b4:fc:d0:63:ad:a7:db:15:cc:ee:f0:6a:
07:e7:7b:14:0a:0a:d9:db:b5:7c:78:43:13:a0:f8:
c6:fa:72:0a:22:75:79:92:3c:85:3e:7d:1e:a8:65:
b9:d0:06:eb:e3:e4:fa:ee:15:77:80:da:cb:ac:f3:
8b:3d:2f:45:a9:fd:0e:2e:08:3a:6d:5d:37:a7:2c:
08:2f:0d:20:49:a8:a9:87:d5:f8:88:b3:5a:76:e9:
33:31:ce:95:35:24:64:4e:39:b1:88:3b:5c:34:a5:
84:78:34:89:64:87:f7:b9:48:e8:d2:a8:57:93:33:
5b:44:b5:bb:b4:44:71:91:31:77:06:3f:1b:2d:97:
f0:42:9c:33:7d:f5:f6:f1:80:e4:db:7c:9c:9e:3f:
13:88:20:dc:6f:a3:7b:04:4a:d6:91:55:1f:13:ee:
e2:d7:6b:74:27:82:a3:1c:04:74:fe:55:71:71:43:
fe:9d:6a:49:bd:ff:0b:0b:f6:5f:8c:54:43:bd:17:
f0:00:ff:0a:ee:c5:9a:73:3d:b1:c6:13:ae:2d:58:
c3:73:ed:08:6c:b3:60:ea:b3:c1:ff:49:fd:1e:1a:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:9B:62:54:F8:44:5E:3A:84:CB:4F:C0:AF:39:E5:B4:C9:D9:88
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/HUWbYlT4RF46hMtPwK855bTJ2Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0-31.56.111.255
31.56.116.0/24
31.58.236.0-31.58.255.255
31.59.12.0/22
85.15.48.0/23
94.182.0.0/15
151.240.80.0/21
151.240.168.0/22
151.240.192.0/21
151.240.240.0/21
151.241.224.0/21
151.242.0.0-151.242.11.255
151.244.48.0-151.244.95.255
151.244.128.0-151.244.215.255
151.247.214.0-151.247.241.255
151.247.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:be:b3:84:eb:74:5f:3d:c2:62:99:9c:de:d7:44:da:4e:2a:
d6:21:55:f4:dc:89:78:af:d2:a7:c8:af:b3:a7:3e:52:bc:68:
6b:7e:4d:cb:e9:dc:37:8d:ca:70:ec:12:85:78:a4:05:d0:61:
59:50:96:d6:2a:9f:7a:17:47:c2:96:18:c2:61:58:da:98:d7:
80:a5:95:5f:62:85:b2:78:04:d4:4a:c0:d9:d5:db:a4:8f:5d:
ed:2d:65:c8:66:66:78:6f:ce:0e:9d:3f:9d:f3:db:37:05:08:
57:1a:fe:4d:78:8c:9d:44:12:e7:6e:c3:33:6e:13:82:79:bd:
29:f1:a4:a1:77:9d:e5:dc:d9:94:5c:73:f0:e4:a5:b0:47:9f:
d5:8c:2e:48:f6:92:ed:5d:5e:58:33:a3:93:ca:0b:5c:af:76:
33:2f:be:45:cb:0d:2e:67:d5:29:6d:bc:dd:4e:a7:aa:d8:e3:
6c:13:88:07:b6:aa:fc:f2:26:aa:e5:0a:72:af:fc:98:b2:30:
2e:bb:26:2a:b9:3c:ff:79:d7:77:cb:25:d2:b2:9d:19:21:e3:
48:50:37:ad:bc:cd:e3:33:ec:15:2f:94:2f:d0:bf:d4:35:cc:
7e:ca:f7:08:c3:22:42:fe:d1:8e:aa:2d:d6:66:4a:09:07:ce:
1f:eb:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:36 2023 by rpki-client on console.sobornost.net