Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/N3bbOxMijhiDaSvpZkV5gXr4fbI.roa
File: N3bbOxMijhiDaSvpZkV5gXr4fbI.roa (raw, json)
Hash identifier: f7WchomPBppPOGJ9SEcs8atdI7wCK5tbJL5JEajj8c4=
Subject key identifier: 37:76:DB:3B:13:22:8E:18:83:69:2B:E9:66:45:79:81:7A:F8:7D:B2
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018C7D67D663E098FC17FE94A8E6BACB1460
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/N3bbOxMijhiDaSvpZkV5gXr4fbI.roa
Signing time: Mon 18 Dec 2023 14:50:06 +0000
ROA not before: Mon 18 Dec 2023 14:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 37.235.50.0/23 maxlen: 23
37.235.48.0/20 maxlen: 20
37.235.50.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
5.180.114.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
2a03:f80:359::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f87:ffff::/48 maxlen: 48
2a03:f80::/29 maxlen: 29
2a03:f80:57::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:7::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:67:d6:63:e0:98:fc:17:fe:94:a8:e6:ba:cb:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Dec 18 14:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3776db3b13228e1883692be9664579817af87db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:74:8c:6e:ff:5f:bb:f5:b1:74:58:1e:fe:
df:ad:a4:d4:5f:0a:75:82:cb:6a:18:fc:b0:a2:1d:
52:aa:ff:d1:66:bf:25:4e:f2:e8:bd:86:38:7a:a3:
4d:59:0e:df:78:ae:4b:89:be:8b:ce:34:e5:d4:f3:
57:fa:2c:4e:c5:7c:90:23:54:09:b6:83:fe:9a:2f:
d9:2c:4c:17:93:21:8d:49:9f:fa:91:1c:18:0d:b4:
5a:ed:42:ab:2f:85:b4:e3:14:0f:37:48:bf:67:0a:
ea:9e:91:4b:27:9e:8c:d7:65:ce:92:c4:31:6b:4b:
c4:54:f5:4f:37:02:cb:d8:88:79:81:40:d8:50:a4:
ad:fa:4a:e7:f1:ee:fa:28:c5:99:04:5a:ca:2d:8d:
a7:9b:7e:92:87:2b:c2:4b:96:20:42:b1:65:cd:8c:
d7:97:08:25:a7:dc:ad:25:ce:b0:35:28:a1:dd:da:
a6:13:92:cd:b8:ae:58:d4:cd:8d:1b:49:e8:35:be:
97:d9:b4:10:25:f6:9c:8f:3a:34:d4:e4:22:fd:fa:
fb:25:c8:73:22:71:5e:52:e8:62:8b:c8:da:6c:1c:
8f:20:28:2f:e8:e2:89:fc:df:ed:ad:6e:7b:65:34:
f3:2b:df:fc:ac:16:ee:d5:dd:7b:e7:bf:8c:73:10:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:76:DB:3B:13:22:8E:18:83:69:2B:E9:66:45:79:81:7A:F8:7D:B2
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/N3bbOxMijhiDaSvpZkV5gXr4fbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
37.235.48.0/20
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
91.132.94.0/24
91.227.204.0/23
92.243.66.0/24
103.57.250.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
185.26.236.0-185.26.238.255
213.183.54.0-213.183.57.255
IPv6:
2a03:f80::/29
Signature Algorithm: sha256WithRSAEncryption
0d:78:1d:05:67:f6:de:e9:81:a0:40:44:ce:c7:bd:f2:90:ea:
c0:84:91:0c:4c:fe:5e:e2:42:e1:d4:bc:ec:10:b0:3c:82:df:
96:e7:69:6e:3c:a3:de:69:8b:b3:39:b2:c6:6e:44:3a:bf:37:
6d:ab:41:e6:47:5c:7f:f9:c2:cd:a3:8e:66:22:71:f3:bd:11:
25:2a:e0:a9:19:31:a8:37:07:66:61:2f:1c:46:35:f9:65:9b:
44:08:b1:e7:d9:f7:0b:1e:e1:f2:b3:35:ff:8e:66:7e:d3:76:
68:91:46:3c:77:d0:c6:68:bd:33:e9:0f:b5:59:3e:dd:09:9f:
0f:ac:01:14:a9:95:2a:f8:74:e5:19:eb:c5:99:5d:ca:0b:0a:
bb:66:d5:46:bb:3e:0f:0e:8f:30:5b:3f:22:17:c0:76:d5:f9:
31:01:1e:24:4a:51:c5:e3:2d:6c:71:c5:f8:aa:fd:af:1d:a6:
37:62:2d:22:59:07:f1:eb:98:35:f0:da:fc:4e:16:de:9a:fc:
10:66:e4:a6:ac:d9:c8:a6:d7:ca:fa:43:3f:b0:9a:86:ee:57:
7d:b3:54:a0:4a:7a:4f:53:7a:0d:d5:bb:5e:46:bb:96:1f:79:
c9:87:3a:9e:b5:e3:35:a7:69:72:28:f6:7e:85:33:ff:a5:17:
7f:d8:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 08:57:51 2023 by rpki-client on console-ams.rpki-client.org