Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/ankpTggXPLqAZL8znvq3aRHrLok.roa
File: ankpTggXPLqAZL8znvq3aRHrLok.roa (raw, json)
Hash identifier: d02LG0sLUnZsukXDlUNYjANil94HDUqINMb5frZvmyM=
Subject key identifier: 6A:79:29:4E:08:17:3C:BA:80:64:BF:33:9E:FA:B7:69:11:EB:2E:89
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 0187F5C02EEEB1210D69636A164939219EA6
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/ankpTggXPLqAZL8znvq3aRHrLok.roa
Signing time: Sun 07 May 2023 10:27:05 +0000
ROA not before: Sun 07 May 2023 10:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 185.221.192.0/24 maxlen: 24
185.221.192.0/22 maxlen: 22
185.221.194.0/24 maxlen: 24
185.221.193.0/24 maxlen: 24
185.221.195.0/24 maxlen: 24
195.191.44.0/24 maxlen: 24
195.191.45.0/24 maxlen: 24
185.121.58.0/24 maxlen: 24
185.121.57.0/24 maxlen: 24
185.121.56.0/22 maxlen: 22
185.121.56.0/24 maxlen: 24
185.121.59.0/24 maxlen: 24
195.8.112.0/24 maxlen: 24
195.8.110.0/24 maxlen: 24
195.8.114.0/24 maxlen: 24
185.238.44.0/24 maxlen: 24
185.238.47.0/24 maxlen: 24
185.238.46.0/24 maxlen: 24
185.238.45.0/24 maxlen: 24
195.191.23.0/24 maxlen: 24
195.191.22.0/24 maxlen: 24
185.137.61.0/24 maxlen: 24
185.137.60.0/22 maxlen: 24
185.142.95.0/24 maxlen: 24
185.142.92.0/22 maxlen: 22
185.142.92.0/24 maxlen: 24
193.246.200.0/24 maxlen: 24
185.142.94.0/24 maxlen: 24
185.142.93.0/24 maxlen: 24
193.246.201.0/24 maxlen: 24
185.142.124.0/24 maxlen: 24
185.142.124.0/22 maxlen: 22
185.142.125.0/24 maxlen: 24
185.142.127.0/24 maxlen: 24
185.142.126.0/24 maxlen: 24
195.8.102.0/24 maxlen: 24
195.230.97.0/24 maxlen: 24
195.230.105.0/24 maxlen: 24
91.213.151.0/24 maxlen: 24
195.230.107.0/24 maxlen: 24
91.213.157.0/24 maxlen: 24
185.82.64.0/24 maxlen: 24
185.82.64.0/22 maxlen: 22
195.230.124.0/24 maxlen: 24
185.82.66.0/24 maxlen: 24
185.82.67.0/24 maxlen: 24
185.82.65.0/24 maxlen: 24
91.213.172.0/24 maxlen: 24
91.213.167.0/24 maxlen: 24
185.47.48.0/23 maxlen: 23
185.47.50.0/23 maxlen: 23
45.155.192.0/24 maxlen: 24
193.246.175.0/24 maxlen: 24
193.246.174.0/24 maxlen: 24
45.155.195.0/24 maxlen: 24
45.155.193.0/24 maxlen: 24
45.155.194.0/24 maxlen: 24
185.125.22.0/24 maxlen: 24
185.125.21.0/24 maxlen: 24
185.125.23.0/24 maxlen: 24
185.212.192.0/24 maxlen: 24
185.212.193.0/24 maxlen: 24
185.212.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f5:c0:2e:ee:b1:21:0d:69:63:6a:16:49:39:21:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: May 7 10:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a79294e08173cba8064bf339efab76911eb2e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:45:d4:b2:d6:2c:04:23:da:f6:4e:b3:de:
8f:2f:ee:9c:6a:64:d6:21:ca:4f:02:1f:2c:a9:43:
9e:5a:e9:f2:d0:96:88:0d:05:5f:0b:df:fb:23:95:
26:1c:8e:5c:20:af:d0:e8:09:d4:f6:12:c9:20:70:
72:7a:da:0d:33:3e:fb:2f:28:ee:e0:23:6f:8c:bf:
45:06:3f:1b:4b:77:de:31:03:0b:ff:0c:0f:8d:a5:
b6:d5:ed:46:4b:1f:fc:04:ae:f6:e6:9b:8b:10:c2:
56:2a:c1:b8:9d:86:09:ab:fd:2f:75:f5:99:00:3a:
7d:bc:37:71:1c:13:72:c2:74:d9:fe:21:e9:bc:8f:
87:1a:77:1d:4e:03:93:69:88:2b:ce:01:9a:11:6c:
ba:3e:7b:bf:d3:24:91:98:ca:44:4b:d7:c6:ec:05:
67:7e:b1:36:e5:7c:66:24:6f:82:cc:3d:c7:58:f2:
04:5c:71:cc:2a:87:68:d0:ef:09:16:fa:83:87:49:
70:b0:96:96:8a:03:4e:7d:b1:97:2a:c3:b2:98:43:
47:3d:44:aa:ba:f3:3c:74:74:95:84:4b:71:fb:94:
32:54:13:8b:31:1a:9a:af:f1:4e:5c:9d:12:c8:3b:
27:0f:30:27:76:6b:fe:e3:8b:7c:79:a4:9c:43:9b:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:29:4E:08:17:3C:BA:80:64:BF:33:9E:FA:B7:69:11:EB:2E:89
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/ankpTggXPLqAZL8znvq3aRHrLok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.192.0/22
91.213.151.0/24
91.213.157.0/24
91.213.167.0/24
91.213.172.0/24
185.47.48.0/22
185.82.64.0/22
185.121.56.0/22
185.125.21.0-185.125.23.255
185.137.60.0/22
185.142.92.0/22
185.142.124.0/22
185.212.192.0/23
185.212.195.0/24
185.221.192.0/22
185.238.44.0/22
193.246.174.0/23
193.246.200.0/23
195.8.102.0/24
195.8.110.0/24
195.8.112.0/24
195.8.114.0/24
195.191.22.0/23
195.191.44.0/23
195.230.97.0/24
195.230.105.0/24
195.230.107.0/24
195.230.124.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f2:06:8d:6c:20:76:cb:84:0e:7e:bb:2b:cd:59:8f:71:9e:
12:33:37:ed:2b:b9:3b:d9:92:3e:47:cd:26:87:80:55:cb:b2:
f8:a3:50:18:60:1b:58:cc:b0:29:74:77:37:3d:11:3c:68:0a:
f9:f8:38:c9:7a:3a:65:7d:2c:e8:28:e7:cf:c2:07:79:e7:61:
91:f5:5c:b5:4a:13:a1:88:2c:33:31:6d:1f:8c:01:a6:68:e7:
42:e4:cb:ad:f2:63:7a:d5:48:d3:f1:11:ea:3f:3c:5a:88:d6:
32:a1:1b:29:0f:7a:e4:04:1c:8e:48:fa:66:dd:de:e6:3c:0b:
0b:e6:d4:20:86:38:7f:c0:2c:e3:4c:7a:f9:c5:7f:ce:63:19:
65:d6:df:66:2a:92:8e:14:24:5f:a3:12:20:6b:72:c0:ac:ed:
53:26:63:27:1a:f2:e2:a5:fd:62:42:d8:d2:8e:72:f4:7d:ba:
78:f7:74:77:7b:17:7d:7c:49:7e:c8:2f:22:6b:3a:32:6d:29:
61:0f:93:d0:9c:b7:ca:29:01:46:97:f1:57:2a:7d:0b:14:51:
e3:19:49:e0:89:ba:d1:85:cf:a0:5e:d9:65:38:20:4c:a7:ff:
20:63:30:67:71:b6:8b:58:54:43:56:76:de:9d:6b:2c:1e:e4:
40:cb:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net