Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CzH7Il1cqC_-bfPt-V_y-_nBQIM.roa
File: CzH7Il1cqC_-bfPt-V_y-_nBQIM.roa (raw, json)
Hash identifier: /KGcbrSvSJy/GvAxbcAPoerA8/WIKpiEmFG0DddocMc=
Subject key identifier: 0B:31:FB:22:5D:5C:A8:2F:FE:6D:F3:ED:F9:5F:F2:FB:F9:C1:40:83
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F1A2D98D9269FBF92C3C6DFCA3A52D627
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CzH7Il1cqC_-bfPt-V_y-_nBQIM.roa
Signing time: Fri 26 Apr 2024 11:32:26 +0000
ROA not before: Fri 26 Apr 2024 11:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41111
IP address blocks: 5.180.20.0/24 maxlen: 24
5.180.21.0/24 maxlen: 24
5.180.22.0/23 maxlen: 24
5.180.40.0/24 maxlen: 24
5.180.42.0/24 maxlen: 24
5.180.43.0/24 maxlen: 24
5.180.46.0/24 maxlen: 24
5.180.47.0/24 maxlen: 24
5.180.52.0/24 maxlen: 24
5.180.54.0/24 maxlen: 24
5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
5.253.28.0/24 maxlen: 24
5.253.29.0/24 maxlen: 24
5.253.30.0/24 maxlen: 24
5.253.31.0/24 maxlen: 24
5.253.42.0/24 maxlen: 24
45.66.160.0/22 maxlen: 24
45.66.164.0/22 maxlen: 24
45.86.66.0/24 maxlen: 24
45.128.60.0/24 maxlen: 24
45.136.114.0/24 maxlen: 24
45.136.115.0/24 maxlen: 24
45.136.116.0/24 maxlen: 24
45.136.117.0/24 maxlen: 24
45.136.124.0/22 maxlen: 24
45.136.128.0/23 maxlen: 24
45.136.149.0/24 maxlen: 24
45.149.112.0/22 maxlen: 24
85.208.119.0/24 maxlen: 24
85.209.155.0/24 maxlen: 24
85.209.156.0/22 maxlen: 24
85.209.194.0/24 maxlen: 24
88.218.92.0/24 maxlen: 24
88.218.94.0/24 maxlen: 24
88.218.95.0/24 maxlen: 24
141.98.188.0/22 maxlen: 24
194.36.36.0/22 maxlen: 24
194.55.136.0/23 maxlen: 24
194.55.188.0/24 maxlen: 24
194.55.189.0/24 maxlen: 24
194.59.221.0/24 maxlen: 24
194.59.244.0/24 maxlen: 24
194.59.245.0/24 maxlen: 24
194.76.146.0/24 maxlen: 24
194.76.147.0/24 maxlen: 24
194.76.154.0/23 maxlen: 24
194.124.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 11:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:2d:98:d9:26:9f:bf:92:c3:c6:df:ca:3a:52:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 26 11:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b31fb225d5ca82ffe6df3edf95ff2fbf9c14083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:e8:98:7c:62:55:36:75:50:a1:1a:ed:42:
ba:e3:ca:28:e6:e6:ad:03:27:87:fb:4b:5c:18:3c:
72:dc:21:d8:72:96:91:6f:90:67:2a:a2:90:a2:b6:
1a:cd:4d:a3:00:37:01:f8:88:96:b2:13:02:be:b0:
28:4e:77:e6:83:4b:2e:30:20:a3:5d:a3:16:20:db:
7a:c7:0e:ae:ec:3c:9e:64:30:1c:c6:38:f0:af:3c:
32:66:c9:0a:28:24:6b:1b:b2:8b:a1:cd:d6:97:02:
94:1a:a4:43:46:ae:85:af:fe:77:99:13:f9:d7:b0:
3c:1d:af:42:e4:1d:11:46:bf:12:f3:3b:ce:ef:93:
a4:7a:8b:f3:bc:8e:29:ee:c7:f8:bb:68:62:a2:97:
a6:31:d9:da:31:62:45:8d:90:f4:39:ba:04:c1:e6:
db:3c:54:94:a1:44:75:c6:ed:da:77:b2:a4:b0:0e:
93:15:23:65:56:6e:4a:18:b7:7c:7b:7d:61:89:04:
2d:14:98:f9:0e:2c:7c:d1:85:50:6d:4a:f7:f1:19:
75:86:6d:54:be:c3:b1:0a:51:c1:9a:ad:2c:69:34:
81:a1:e0:59:76:61:13:28:03:cb:68:2d:7d:11:0e:
15:09:a8:ad:57:31:ab:a4:ed:5c:21:b7:5a:68:63:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:FB:22:5D:5C:A8:2F:FE:6D:F3:ED:F9:5F:F2:FB:F9:C1:40:83
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/CzH7Il1cqC_-bfPt-V_y-_nBQIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.20.0/22
5.180.40.0/24
5.180.42.0/23
5.180.46.0/23
5.180.52.0/24
5.180.54.0/24
5.180.145.0/24
5.180.147.0/24
5.253.28.0/22
5.253.42.0/24
45.66.160.0/21
45.86.66.0/24
45.128.60.0/24
45.136.114.0-45.136.117.255
45.136.124.0-45.136.129.255
45.136.149.0/24
45.149.112.0/22
85.208.119.0/24
85.209.155.0-85.209.159.255
85.209.194.0/24
88.218.92.0/24
88.218.94.0/23
141.98.188.0/22
194.36.36.0/22
194.55.136.0/23
194.55.188.0/23
194.59.221.0/24
194.59.244.0/23
194.76.146.0/23
194.76.154.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d0:fe:ed:94:ab:1e:de:92:fd:ec:90:76:30:96:cd:db:99:
02:1e:b1:5f:28:a7:8d:87:35:4b:e5:ae:40:34:84:af:a9:40:
9e:e8:e6:2f:a8:e9:32:cf:fe:23:b6:c0:40:d6:f2:88:bd:78:
00:3c:ac:3e:12:23:cf:8b:3d:1b:67:24:e9:ef:ba:3c:8a:74:
84:e2:6b:c8:24:9f:73:2d:56:3e:f9:7d:2a:a5:7d:21:e7:ef:
3d:5c:26:33:02:2b:06:ae:2f:76:e4:d4:25:53:30:3d:d2:56:
34:50:41:9c:4e:4e:ee:51:a6:d8:ff:a4:f0:0e:e4:8b:ed:64:
8d:3b:ec:8a:04:97:78:82:d2:d1:a0:f7:10:03:02:24:5f:0d:
db:a0:03:97:95:f9:d8:dc:08:45:b3:5e:d3:f1:07:27:49:af:
77:44:34:d7:5b:37:77:f2:b2:68:8e:0f:59:76:6a:74:80:80:
f0:65:90:2a:9a:20:76:23:a6:d0:fa:a8:26:43:cf:7b:f1:49:
99:d8:33:15:39:a0:18:53:82:7a:50:74:93:91:11:72:fc:ff:
fa:e2:73:91:3b:23:29:00:32:88:96:55:cd:b6:40:08:b1:a2:
df:7d:c8:e4:ba:3c:f3:29:8a:10:72:cd:98:90:1b:06:d2:e9:
dc:ec:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 18:27:27 2024 by rpki-client on console.sobornost.net