Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/mHPZ7RIVPEm-fuWQbF6bPDzbmg8.roa
File: mHPZ7RIVPEm-fuWQbF6bPDzbmg8.roa (raw, json)
Hash identifier: qRF5JWSvwsFu5MJtzSEB5EhEUnVYwpbVYfRTlNu0mvI=
Subject key identifier: 98:73:D9:ED:12:15:3C:49:BE:7E:E5:90:6C:5E:9B:3C:3C:DB:9A:0F
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018CC7948534167F3AFA0698DE4A6EFD4B18
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/mHPZ7RIVPEm-fuWQbF6bPDzbmg8.roa
Signing time: Tue 02 Jan 2024 00:30:48 +0000
ROA not before: Tue 02 Jan 2024 00:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199081
IP address blocks: 45.66.187.0/24 maxlen: 24
185.70.78.0/24 maxlen: 24
185.70.78.0/23 maxlen: 23
185.70.77.0/24 maxlen: 24
185.70.76.0/24 maxlen: 24
185.70.76.0/22 maxlen: 22
45.66.185.0/24 maxlen: 24
45.66.186.0/24 maxlen: 24
185.205.96.0/24 maxlen: 24
185.205.96.0/22 maxlen: 22
185.205.97.0/24 maxlen: 24
185.205.98.0/24 maxlen: 24
185.205.99.0/24 maxlen: 24
185.70.79.0/24 maxlen: 24
185.168.38.0/24 maxlen: 24
185.168.36.0/22 maxlen: 22
185.168.38.0/23 maxlen: 23
185.168.39.0/24 maxlen: 24
109.68.144.0/21 maxlen: 21
109.68.144.0/24 maxlen: 24
109.68.145.0/24 maxlen: 24
109.68.147.0/24 maxlen: 24
109.68.151.0/24 maxlen: 24
109.68.149.0/24 maxlen: 24
109.68.150.0/24 maxlen: 24
109.68.148.0/24 maxlen: 24
91.193.62.0/24 maxlen: 24
91.193.63.0/24 maxlen: 24
91.193.60.0/22 maxlen: 22
91.193.60.0/24 maxlen: 24
91.193.61.0/24 maxlen: 24
5.172.192.0/20 maxlen: 20
5.172.192.0/24 maxlen: 24
5.172.192.0/22 maxlen: 22
5.172.198.0/24 maxlen: 24
5.172.199.0/24 maxlen: 24
5.172.196.0/22 maxlen: 22
5.172.196.0/24 maxlen: 24
5.172.197.0/24 maxlen: 24
5.172.195.0/24 maxlen: 24
5.172.193.0/24 maxlen: 24
5.172.194.0/24 maxlen: 24
5.172.205.0/24 maxlen: 24
5.172.204.0/22 maxlen: 22
5.172.206.0/24 maxlen: 24
5.172.203.0/24 maxlen: 24
5.172.204.0/24 maxlen: 24
5.172.202.0/24 maxlen: 24
5.172.200.0/22 maxlen: 22
5.172.201.0/24 maxlen: 24
178.21.175.0/24 maxlen: 24
178.21.173.0/24 maxlen: 24
178.21.174.0/24 maxlen: 24
178.21.172.0/24 maxlen: 24
178.21.172.0/22 maxlen: 22
178.21.170.0/24 maxlen: 24
178.21.171.0/24 maxlen: 24
178.21.168.0/24 maxlen: 24
178.21.169.0/24 maxlen: 24
178.21.168.0/22 maxlen: 22
178.21.168.0/21 maxlen: 21
185.118.125.0/24 maxlen: 24
2a02:4fc0:4000::/48 maxlen: 48
2a02:4fc0:4001::/48 maxlen: 48
2a02:4fc0:4100::/40 maxlen: 40
2a02:4fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 Feb 2024 10:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:85:34:16:7f:3a:fa:06:98:de:4a:6e:fd:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 2 00:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9873d9ed12153c49be7ee5906c5e9b3c3cdb9a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:8d:d1:cc:c2:dc:6c:70:bc:98:6e:19:ab:
ad:15:20:ac:5b:eb:f2:6a:7f:4d:1d:c2:77:50:e8:
55:12:59:66:a3:f1:9c:74:c0:fd:8e:bf:c1:0f:28:
51:09:01:c3:8c:87:eb:06:14:5d:44:01:ca:95:28:
e9:2e:fd:a3:31:4a:07:5b:26:6a:ef:a3:45:05:85:
ba:64:98:f0:7e:92:d1:c3:79:44:e8:8c:6a:22:6d:
55:22:a6:64:07:4c:83:b8:4b:97:f9:fc:1d:2b:90:
8f:7e:5d:e4:87:e5:49:b3:e9:70:9f:f8:0c:0b:86:
31:9c:34:dd:39:2d:c3:7c:3d:65:ea:82:cc:42:b5:
79:d9:2e:ed:15:1f:12:d5:1c:54:9f:a3:8c:65:86:
3c:32:82:42:6a:ba:4c:89:2f:28:c3:1c:a4:9d:31:
54:5f:ca:48:b4:f2:8c:b7:00:3b:52:ea:9b:d0:c7:
d0:61:9d:d4:2f:4f:ce:f6:e3:19:b2:04:26:1c:d1:
75:c4:cd:62:67:64:a5:89:19:08:39:fb:dd:08:09:
69:0a:a0:64:da:de:d4:42:ca:71:ea:81:33:be:cd:
95:77:ba:b6:62:fe:98:b3:b6:24:c5:0a:66:e8:e4:
52:1e:94:8d:b1:09:3f:b3:31:fd:10:e4:b5:8a:ea:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:D9:ED:12:15:3C:49:BE:7E:E5:90:6C:5E:9B:3C:3C:DB:9A:0F
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/mHPZ7RIVPEm-fuWQbF6bPDzbmg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.192.0/20
45.66.185.0-45.66.187.255
91.193.60.0/22
109.68.144.0/21
178.21.168.0/21
185.70.76.0/22
185.118.125.0/24
185.168.36.0/22
185.205.96.0/22
IPv6:
2a02:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
14:0c:c2:cc:64:b0:6b:e7:3d:96:99:b4:ac:dc:7a:d8:32:0e:
d0:42:2c:d2:e6:d5:07:c4:ca:8e:9b:f8:26:39:5c:60:b9:cc:
f7:24:49:da:5b:9b:ec:8d:93:d7:23:80:2d:a0:da:3f:03:68:
e3:4a:03:d7:e8:e7:92:2c:b3:b0:73:bc:b0:12:e8:8b:32:44:
91:1f:a2:af:78:1f:bf:79:01:a0:43:ad:b7:77:ec:15:cc:da:
45:34:85:bc:38:b9:28:e8:e3:8c:85:ca:88:bb:3d:1c:b7:4b:
c3:cf:85:5d:40:3a:97:35:9b:de:42:35:b5:2e:1a:aa:1e:e3:
1d:30:30:8f:b0:b1:58:04:b1:07:03:0d:9c:a8:e7:ee:5c:17:
e8:3b:be:38:2f:5e:4b:55:55:9d:e4:00:9f:33:b0:26:21:69:
b5:0d:d3:d9:2a:3a:01:19:e9:64:db:4d:45:11:40:a8:d5:48:
ba:95:25:ee:3f:56:c2:bc:3d:8c:83:d7:36:09:2d:85:bc:ed:
7a:52:9a:a9:65:52:2c:4b:38:d2:ad:31:bd:64:b9:95:7d:c3:
05:5b:a5:90:df:3b:58:fc:a7:13:e7:2c:c9:63:38:02:28:be:
10:0a:a4:a6:8b:48:3a:2b:95:97:4e:da:72:19:7d:87:cb:3f:
56:1a:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:18 2024 by rpki-client on console.sobornost.net