Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R07AtvFBNQhbqtDjtYjUApIeiiY.roa
File: R07AtvFBNQhbqtDjtYjUApIeiiY.roa (raw, json)
Hash identifier: 6Md8uNibckormSzFMLC3EOShkOpR7OdXJYJX8OmxZjY=
Subject key identifier: 47:4E:C0:B6:F1:41:35:08:5B:AA:D0:E3:B5:88:D4:02:92:1E:8A:26
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018BCDC6271A1D06E960BCE8D82E54FCE869
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R07AtvFBNQhbqtDjtYjUApIeiiY.roa
Signing time: Tue 14 Nov 2023 12:19:57 +0000
ROA not before: Tue 14 Nov 2023 12:19:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12741
IP address blocks: 77.252.0.0/14 maxlen: 14
159.205.0.0/16 maxlen: 16
193.19.104.0/23 maxlen: 23
89.171.0.0/16 maxlen: 16
62.87.128.0/17 maxlen: 17
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
62.181.160.0/19 maxlen: 19
213.134.128.0/19 maxlen: 19
87.204.0.0/15 maxlen: 15
62.244.128.0/19 maxlen: 19
82.143.128.0/18 maxlen: 18
62.89.64.0/18 maxlen: 18
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
185.244.96.0/22 maxlen: 22
213.241.0.0/17 maxlen: 17
178.36.0.0/15 maxlen: 15
213.238.64.0/18 maxlen: 18
93.180.160.0/19 maxlen: 19
213.241.89.0/24 maxlen: 24
83.238.0.0/16 maxlen: 16
62.233.128.0/17 maxlen: 17
213.17.244.0/24 maxlen: 24
81.210.0.0/17 maxlen: 17
5.226.135.0/24 maxlen: 24
213.186.64.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
212.106.0.0/19 maxlen: 19
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
85.31.252.0/24 maxlen: 24
213.146.32.0/19 maxlen: 19
78.8.0.0/14 maxlen: 14
185.58.162.0/23 maxlen: 23
185.58.160.0/23 maxlen: 23
185.58.160.0/22 maxlen: 22
91.192.88.0/22 maxlen: 22
62.111.128.0/17 maxlen: 17
85.128.0.0/17 maxlen: 17
37.128.0.0/17 maxlen: 17
62.148.64.0/19 maxlen: 19
84.40.128.0/17 maxlen: 17
81.168.128.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
193.91.16.0/20 maxlen: 20
195.114.160.0/19 maxlen: 19
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
213.195.128.0/18 maxlen: 18
217.30.128.0/19 maxlen: 19
213.17.128.0/17 maxlen: 17
5.226.92.0/24 maxlen: 24
213.216.64.0/18 maxlen: 18
193.192.173.0/24 maxlen: 24
93.159.0.0/18 maxlen: 18
87.239.216.0/21 maxlen: 22
193.192.181.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
62.111.250.0/24 maxlen: 24
5.226.64.0/18 maxlen: 18
87.105.0.0/16 maxlen: 16
2001:41b0::/32 maxlen: 48
2001:16b0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:c6:27:1a:1d:06:e9:60:bc:e8:d8:2e:54:fc:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Nov 14 12:19:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=474ec0b6f14135085baad0e3b588d402921e8a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:66:91:28:77:94:b1:34:f9:9d:6e:36:a2:
f2:37:be:6b:3f:93:62:93:d1:a9:7c:74:51:b9:0a:
31:77:8e:6c:6e:70:66:5e:13:fd:64:f1:0a:9b:f6:
54:a2:f7:3a:55:b8:bf:e1:34:e1:6d:fe:6e:cd:b7:
b9:08:c0:da:bc:b2:ee:ce:85:0e:0c:47:4b:a5:13:
e5:80:d3:fa:2d:ae:d6:04:8c:07:88:1c:28:f5:1f:
73:71:7a:87:d1:e5:97:7f:13:7c:f9:5f:80:63:16:
4f:7d:cf:d5:cb:a6:01:50:b3:fa:19:15:72:c0:c2:
02:de:33:4c:74:17:53:72:37:d6:e2:81:ac:c7:4b:
41:f7:64:d0:b1:6d:57:78:10:ce:01:3a:b4:99:77:
4b:3c:9d:c0:03:c7:7a:0d:dd:7a:07:f2:f6:7c:54:
94:d7:f1:da:5c:ff:17:08:31:e8:72:f5:20:c7:6a:
45:cb:ad:f8:fd:17:25:f2:b0:8c:90:22:a0:91:de:
54:51:17:b0:18:77:4c:5b:2e:29:6f:27:48:0b:10:
55:74:97:6b:10:b0:31:ce:a4:e8:5f:0f:0d:dc:0a:
2e:cd:8a:a2:5b:46:b5:9d:d7:63:a5:35:a9:9d:11:
fb:82:45:fb:66:c5:69:88:94:b2:f6:4b:d3:e6:8f:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:C0:B6:F1:41:35:08:5B:AA:D0:E3:B5:88:D4:02:92:1E:8A:26
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R07AtvFBNQhbqtDjtYjUApIeiiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0/18
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.31.252.0/24
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
87.239.216.0/21
89.171.0.0/16
91.192.88.0/22
93.159.0.0/18
93.180.160.0/19
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
185.58.160.0/22
185.244.96.0/22
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:98:32:a2:8c:66:4a:6c:7b:93:63:97:81:05:3e:d2:3e:b4:
4d:3b:47:89:0e:6a:7f:9e:fe:53:07:30:e4:15:e7:90:45:8e:
43:41:5f:6a:ed:8e:5c:8e:78:72:ed:4c:ed:f0:82:12:64:f6:
5e:0a:67:8e:1a:af:5b:8c:eb:de:6d:1a:50:e6:dd:f0:5a:44:
76:ae:6e:2b:a2:b7:2e:80:0c:09:08:58:75:f0:18:73:ba:3e:
2f:4e:bd:57:c1:33:c6:a7:f2:8c:68:c3:87:c5:d0:c4:cc:5c:
2d:61:cd:ef:91:e0:01:77:6d:90:e8:06:17:cd:6c:34:06:63:
78:e9:27:b7:2d:72:87:28:8e:bf:7c:4a:18:fc:b4:d6:11:f8:
44:96:34:f9:7c:e0:81:65:58:a4:31:1e:f0:f9:3c:50:f7:0a:
c7:e8:b2:8e:20:a0:d7:77:6a:d2:de:15:10:ba:8b:87:a1:c7:
af:6f:eb:73:18:40:3b:11:eb:c4:30:fe:fb:ae:d8:49:2c:00:
af:65:b7:f4:ec:2c:e5:d1:47:d5:49:4b:00:90:d6:1d:09:e3:
31:87:b2:6e:ae:8c:0a:7b:df:77:4c:25:60:59:e8:2c:b7:50:
fd:7c:ee:60:42:aa:4f:02:42:4c:be:f2:78:ce:eb:7d:f2:f5:
60:6a:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org