Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/DtpZ7IT0QIvyn6W_NrjSPrcIFME.roa
File: DtpZ7IT0QIvyn6W_NrjSPrcIFME.roa (raw, json)
Hash identifier: MPW34W4at1mLGGTmbJpBJaVitRhsFuOSM9dGLKDb3Bk=
Subject key identifier: 0E:DA:59:EC:84:F4:40:8B:F2:9F:A5:BF:36:B8:D2:3E:B7:08:14:C1
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 018C822D266612067C1C16141C0CA2DDE2ED
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/DtpZ7IT0QIvyn6W_NrjSPrcIFME.roa
Signing time: Tue 19 Dec 2023 13:04:06 +0000
ROA not before: Tue 19 Dec 2023 13:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58243
IP address blocks: 207.89.65.0/24 maxlen: 24
207.89.66.0/23 maxlen: 23
207.89.67.0/24 maxlen: 24
207.89.64.0/18 maxlen: 18
207.89.68.0/24 maxlen: 24
207.89.70.0/23 maxlen: 23
207.89.78.0/23 maxlen: 23
207.89.74.0/23 maxlen: 23
207.89.76.0/24 maxlen: 24
207.89.77.0/24 maxlen: 24
207.89.72.0/23 maxlen: 23
207.89.72.0/22 maxlen: 22
207.89.80.0/23 maxlen: 23
207.89.80.0/20 maxlen: 20
207.89.82.0/24 maxlen: 24
207.89.83.0/24 maxlen: 24
207.89.86.0/23 maxlen: 23
207.89.88.0/22 maxlen: 22
207.89.92.0/24 maxlen: 24
207.89.92.0/22 maxlen: 22
207.89.96.0/20 maxlen: 20
207.89.96.0/19 maxlen: 24
207.89.112.0/20 maxlen: 20
5.61.176.0/20 maxlen: 20
5.61.176.0/21 maxlen: 21
5.61.184.0/23 maxlen: 23
5.61.186.0/24 maxlen: 24
5.61.187.0/24 maxlen: 24
5.61.188.0/23 maxlen: 23
5.61.190.0/23 maxlen: 23
5.61.190.0/24 maxlen: 24
5.61.132.0/22 maxlen: 24
5.61.128.0/18 maxlen: 18
5.61.128.0/19 maxlen: 19
5.61.128.0/20 maxlen: 20
5.61.128.0/23 maxlen: 23
5.61.130.0/23 maxlen: 23
5.61.130.0/24 maxlen: 24
5.61.131.0/24 maxlen: 24
5.61.134.0/23 maxlen: 23
5.61.136.0/21 maxlen: 24
5.61.138.0/23 maxlen: 23
5.61.140.0/22 maxlen: 22
5.61.144.0/24 maxlen: 24
5.61.145.0/24 maxlen: 24
5.61.144.0/20 maxlen: 24
5.61.150.0/24 maxlen: 24
5.61.151.0/24 maxlen: 24
5.61.152.0/22 maxlen: 22
5.61.146.0/24 maxlen: 24
5.61.147.0/24 maxlen: 24
5.61.148.0/24 maxlen: 24
5.61.156.0/24 maxlen: 24
5.61.157.0/24 maxlen: 24
5.61.158.0/23 maxlen: 23
5.61.160.0/24 maxlen: 24
5.61.160.0/19 maxlen: 19
5.61.160.0/20 maxlen: 20
5.61.163.0/24 maxlen: 24
5.61.164.0/24 maxlen: 24
5.61.164.0/22 maxlen: 22
5.61.165.0/24 maxlen: 24
5.61.168.0/23 maxlen: 23
5.61.168.0/21 maxlen: 21
5.61.166.0/23 maxlen: 23
5.61.170.0/23 maxlen: 23
5.61.172.0/22 maxlen: 22
185.78.252.0/22 maxlen: 22
185.78.255.0/24 maxlen: 24
207.89.64.0/24 maxlen: 24
207.89.64.0/19 maxlen: 19
207.89.64.0/20 maxlen: 20
2a01:5244::/30 maxlen: 30
2a01:5240::/29 maxlen: 29
2a01:5240::/30 maxlen: 30
2a01:5241::/39 maxlen: 39
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:2d:26:66:12:06:7c:1c:16:14:1c:0c:a2:dd:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Dec 19 13:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eda59ec84f4408bf29fa5bf36b8d23eb70814c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:02:64:3e:67:10:1e:46:e8:4c:4c:9f:cf:
bf:57:9e:ee:22:8c:7c:7b:ee:6c:76:44:b9:d2:b9:
70:8a:29:31:a9:8d:ab:9c:af:5e:4f:39:4a:9b:18:
a6:3c:03:56:5c:51:c4:45:2d:48:74:aa:18:5e:81:
8a:7b:e7:6d:2a:2a:47:64:4f:35:8c:b4:3a:29:98:
09:ff:3e:0b:08:96:83:9b:d6:7e:83:7c:9c:6d:f3:
e2:9d:68:fe:db:4e:f8:f0:0a:fb:72:62:67:df:47:
ca:7f:77:d0:e0:f8:c9:b1:5d:3f:0a:b2:7d:b1:2b:
8c:0b:ae:d2:71:de:60:8a:a9:02:26:6b:1f:a5:ef:
7d:c0:4a:7d:eb:27:53:3e:c4:13:01:6f:a2:35:ed:
e4:41:0d:8b:c4:6e:97:8e:5e:fd:01:db:56:08:69:
54:53:36:f9:12:2f:3f:88:31:f5:61:f5:db:04:bd:
23:a7:e2:e2:cc:bd:8a:e3:40:34:d2:b6:94:64:9c:
cb:31:78:bf:91:49:75:26:9b:3e:53:51:f2:11:cd:
d7:2d:c2:d0:5b:41:33:10:65:52:74:3b:82:f3:0f:
0c:79:e3:19:f9:d3:a3:44:59:64:cf:79:39:e9:e3:
c8:27:b4:e1:89:a0:88:b2:7d:41:84:e2:77:f7:4a:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:59:EC:84:F4:40:8B:F2:9F:A5:BF:36:B8:D2:3E:B7:08:14:C1
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/DtpZ7IT0QIvyn6W_NrjSPrcIFME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.128.0/18
185.78.252.0/22
207.89.64.0/18
IPv6:
2a01:5240::/29
Signature Algorithm: sha256WithRSAEncryption
00:18:2f:60:d8:f3:11:7b:d6:a2:2c:00:ef:cf:76:e5:54:6b:
5e:2b:e2:db:d6:d3:09:79:c4:ca:a1:00:63:64:9c:60:3b:e0:
ac:bd:58:06:9f:d2:7c:8e:c8:ea:63:a4:2d:96:e6:52:71:a8:
7b:30:2b:00:66:94:53:c2:35:70:37:2d:a8:6f:70:f0:e4:21:
31:e5:86:06:79:38:a8:e0:7c:d0:d0:d4:28:9d:bc:1f:85:1a:
27:3d:77:05:94:29:07:4c:e6:25:d6:8a:50:7f:45:fd:de:c9:
71:2e:bd:b3:0a:71:a7:ff:98:80:50:05:31:35:84:18:8f:80:
3b:62:fe:dc:ec:88:a3:03:42:fa:9d:c8:46:9a:17:77:20:09:
d8:97:ee:0f:2b:41:f4:b7:8e:c6:dc:53:9e:51:54:69:8f:3e:
e9:67:bf:86:73:1d:48:8e:f4:35:6e:6e:74:21:38:9f:1f:1f:
1d:11:5c:f8:87:eb:8f:22:97:50:8f:5c:d5:26:02:ac:79:ef:
69:c9:03:03:d8:8d:ef:1c:0f:08:c1:44:47:d3:f2:1d:23:dd:
9b:35:15:b0:4b:d7:63:56:83:ae:d0:76:8a:4e:56:5c:e6:16:
52:b5:be:8b:8b:31:cd:ad:7f:b9:d4:a0:05:19:a0:3e:ac:13:
7a:67:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net