Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/8etDvpuzQEk2_A_PQzLm5ZYSpT8.roa
File: 8etDvpuzQEk2_A_PQzLm5ZYSpT8.roa (raw, json)
Hash identifier: /aLVFm39nkbo6Byl37LAzxDIhfZCy7sJJyzqog47vX0=
Subject key identifier: F1:EB:43:BE:9B:B3:40:49:36:FC:0F:CF:43:32:E6:E5:96:12:A5:3F
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01860CA47E053F8D29DD884EEAB155005920
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/8etDvpuzQEk2_A_PQzLm5ZYSpT8.roa
Signing time: Wed 01 Feb 2023 11:02:32 +0000
ROA not before: Wed 01 Feb 2023 11:02:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 142.132.128.0/17 maxlen: 24
168.119.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
5.161.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
159.69.0.0/16 maxlen: 24
188.40.0.0/16 maxlen: 24
88.99.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
5.75.128.0/17 maxlen: 24
95.217.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
65.108.0.0/16 maxlen: 24
49.12.0.0/16 maxlen: 24
213.133.96.0/19 maxlen: 24
94.130.0.0/16 maxlen: 24
37.27.0.0/16 maxlen: 24
85.10.192.0/18 maxlen: 24
46.4.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
157.90.0.0/16 maxlen: 24
65.21.0.0/16 maxlen: 24
135.181.0.0/16 maxlen: 24
188.34.128.0/17 maxlen: 24
23.88.0.0/17 maxlen: 24
185.12.64.0/22 maxlen: 24
95.216.0.0/16 maxlen: 24
78.46.0.0/15 maxlen: 24
213.239.192.0/18 maxlen: 24
195.201.0.0/16 maxlen: 24
5.9.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
167.233.0.0/16 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
2a01:4f9::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Dec 2023 07:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:a4:7e:05:3f:8d:29:dd:88:4e:ea:b1:55:00:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Feb 1 11:02:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1eb43be9bb3404936fc0fcf4332e6e59612a53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:66:08:49:ff:2b:d1:1d:2d:c9:45:93:82:
dc:3e:a1:a3:fc:f4:39:17:82:8f:de:31:ae:df:2f:
67:3d:88:98:32:af:01:ba:e2:92:ac:94:71:72:5f:
73:d5:8a:4c:69:e1:6e:88:69:33:cd:d1:28:eb:b2:
07:db:35:6b:ae:51:ed:88:8c:d5:ed:b4:14:1c:57:
de:ba:2c:e1:67:84:64:b9:2f:8b:82:17:68:a4:46:
c9:ba:e9:95:4f:3a:91:73:4e:22:5f:10:21:2c:a5:
89:a0:be:7c:32:cd:28:ba:ad:af:fa:ea:3b:23:25:
c6:55:c5:d9:02:d6:6e:22:55:2c:78:28:99:e0:01:
f8:6b:75:73:cd:f6:6b:22:74:cf:e1:c0:f6:51:07:
37:86:a9:59:75:55:60:9a:c6:24:82:3f:20:13:bc:
76:5c:a1:49:ad:f4:bd:4e:35:bb:e6:26:34:2f:ce:
75:38:85:56:fc:1f:93:45:cc:28:8c:61:02:43:f9:
60:51:e2:28:28:5c:eb:02:0b:1e:c2:fc:b3:b4:80:
30:23:0c:1a:a5:94:28:8b:90:84:b5:8f:79:29:0e:
11:7a:1c:36:d3:23:f2:9f:e8:39:d5:33:e7:18:1e:
f7:bf:c2:bf:43:8c:e0:b6:03:3d:85:8a:0a:b7:9f:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EB:43:BE:9B:B3:40:49:36:FC:0F:CF:43:32:E6:E5:96:12:A5:3F
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/8etDvpuzQEk2_A_PQzLm5ZYSpT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
49.12.0.0/15
65.21.0.0/16
65.108.0.0/15
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
142.132.128.0/17
157.90.0.0/16
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
195.201.0.0/16
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
21:4a:30:8d:0c:e6:f1:2b:e4:62:05:30:64:bf:20:fb:af:1c:
d4:f0:86:dc:64:d4:79:89:91:72:04:8b:e3:26:0c:37:54:aa:
cc:b8:2b:d4:2f:8d:49:2b:71:36:c3:e6:4d:95:02:d6:29:3f:
df:bb:bb:18:60:ad:84:e8:cb:21:7b:ad:a9:ab:63:8a:81:3d:
f9:91:68:b3:ca:95:a5:26:1a:54:bf:c0:09:72:a4:91:ec:c0:
39:59:38:25:4e:9a:2a:28:d4:ff:a2:52:b9:84:79:89:9a:fd:
91:38:14:5d:69:35:5e:11:ad:fd:1e:04:a8:e0:33:62:74:45:
b7:a9:b3:38:29:30:b5:d8:25:9c:44:94:41:3e:1a:f9:0f:3c:
50:7d:99:f0:b0:f8:51:c7:45:bb:8b:9b:66:c3:48:25:c6:a3:
93:82:fd:97:bb:01:d4:81:11:d9:cd:b1:64:ad:40:8e:07:53:
23:cd:6e:b2:38:21:89:15:13:87:55:31:37:f0:61:35:48:bf:
8f:2f:d4:cc:26:28:42:08:4d:2d:ed:15:8b:fe:1c:9d:62:9f:
76:1e:91:f4:f7:18:34:72:9f:06:ee:a5:2c:82:f3:fa:e0:72:
6e:b0:6a:bb:01:23:1a:9e:d0:dc:c6:d1:57:3a:ae:22:86:7e:
e6:31:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:56 2024 by rpki-client on console-fra.rpki-client.org