Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R0jFaQ1Xa7AdO7lv6YiTssL765k.roa
File: R0jFaQ1Xa7AdO7lv6YiTssL765k.roa (raw, json)
Hash identifier: q1ty4ELl/Bi1k4814cfuHuY7Kjk4HOn6JTbCUmaSeYk=
Subject key identifier: 47:48:C5:69:0D:57:6B:B0:1D:3B:B9:6F:E9:88:93:B2:C2:FB:EB:99
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0188B4B9503C33A33372AAA384D00274A0A0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R0jFaQ1Xa7AdO7lv6YiTssL765k.roa
Signing time: Tue 13 Jun 2023 12:27:03 +0000
ROA not before: Tue 13 Jun 2023 12:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12741
IP address blocks: 77.252.0.0/14 maxlen: 14
159.205.0.0/16 maxlen: 16
193.19.104.0/23 maxlen: 23
89.171.0.0/16 maxlen: 16
62.87.128.0/17 maxlen: 17
178.16.116.0/24 maxlen: 24
178.16.121.0/24 maxlen: 24
178.16.125.0/24 maxlen: 24
62.181.160.0/19 maxlen: 19
213.134.128.0/19 maxlen: 19
87.204.0.0/15 maxlen: 15
62.244.128.0/19 maxlen: 19
82.143.128.0/18 maxlen: 18
62.89.64.0/18 maxlen: 18
77.65.188.0/24 maxlen: 24
77.65.193.0/24 maxlen: 24
77.65.209.0/24 maxlen: 24
213.241.0.0/17 maxlen: 17
178.36.0.0/15 maxlen: 15
213.238.64.0/18 maxlen: 18
93.180.160.0/19 maxlen: 19
213.241.89.0/24 maxlen: 24
83.238.0.0/16 maxlen: 16
62.233.128.0/17 maxlen: 17
213.17.244.0/24 maxlen: 24
81.210.0.0/17 maxlen: 17
5.226.135.0/24 maxlen: 24
213.186.64.0/19 maxlen: 19
77.65.134.0/24 maxlen: 24
212.106.0.0/19 maxlen: 19
77.65.155.0/24 maxlen: 24
77.65.171.0/24 maxlen: 24
85.31.252.0/24 maxlen: 24
213.146.32.0/19 maxlen: 19
78.8.0.0/14 maxlen: 14
185.58.162.0/23 maxlen: 23
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
62.111.128.0/17 maxlen: 17
37.128.0.0/17 maxlen: 17
85.128.0.0/17 maxlen: 17
62.148.64.0/19 maxlen: 19
84.40.128.0/17 maxlen: 17
81.168.128.0/17 maxlen: 17
81.219.0.0/16 maxlen: 16
193.91.16.0/20 maxlen: 20
195.114.160.0/19 maxlen: 19
85.202.54.0/24 maxlen: 24
85.202.59.0/24 maxlen: 24
213.195.128.0/18 maxlen: 18
217.30.128.0/19 maxlen: 19
213.17.128.0/17 maxlen: 17
5.226.92.0/24 maxlen: 24
213.216.64.0/18 maxlen: 18
193.192.173.0/24 maxlen: 24
93.159.0.0/18 maxlen: 18
87.239.216.0/22 maxlen: 22
87.239.216.0/21 maxlen: 21
193.192.181.0/24 maxlen: 24
193.192.190.0/24 maxlen: 24
193.192.188.0/24 maxlen: 24
62.111.250.0/24 maxlen: 24
5.226.64.0/18 maxlen: 18
87.105.0.0/16 maxlen: 16
2001:41b0::/32 maxlen: 48
2001:41b0:22b:100::/56 maxlen: 56
2001:16b0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Jun 2023 13:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:b9:50:3c:33:a3:33:72:aa:a3:84:d0:02:74:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jun 13 12:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4748c5690d576bb01d3bb96fe98893b2c2fbeb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e6:c7:d4:06:1c:f8:e2:04:9d:55:71:da:07:
dc:36:7c:88:4a:09:59:c2:7b:d6:e4:f8:46:b5:d4:
95:1b:9c:a0:85:a1:3c:15:70:ad:09:ae:54:2c:fa:
fb:17:ef:36:4a:c7:3b:37:6b:6b:52:e9:cc:4f:21:
71:e8:16:6d:8e:54:c4:47:dd:3e:42:cb:aa:b3:96:
8b:6d:23:09:83:c6:ed:80:55:02:69:dc:de:21:d5:
6a:42:9d:13:ef:36:12:0d:18:cd:ea:e0:89:a8:16:
31:6b:83:4c:a1:11:7b:20:ab:c1:54:51:d1:b6:1e:
9a:a6:31:a1:7a:8d:86:39:30:92:d8:87:60:99:7c:
fb:fb:28:6a:0c:e0:25:17:32:51:6d:31:68:f7:ed:
1c:ad:d8:a6:82:9a:df:66:1c:89:78:4d:d7:52:4a:
d1:91:c8:e1:87:b5:d8:7d:c4:1f:7b:59:81:7d:4a:
af:d6:be:4b:e5:53:2a:fd:86:94:bd:68:cf:00:e5:
95:f2:1c:9f:cf:85:69:25:17:43:ce:1f:0e:50:71:
ac:18:75:98:c1:24:7c:17:30:79:17:38:d1:64:63:
61:ea:4f:5c:2f:8e:fb:95:2e:75:34:11:db:92:dd:
66:a9:8e:6a:4c:5b:6a:c6:b6:68:ab:ae:bb:0b:6f:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:C5:69:0D:57:6B:B0:1D:3B:B9:6F:E9:88:93:B2:C2:FB:EB:99
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R0jFaQ1Xa7AdO7lv6YiTssL765k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.64.0/18
5.226.135.0/24
37.128.0.0/17
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.134.0/24
77.65.155.0/24
77.65.171.0/24
77.65.188.0/24
77.65.193.0/24
77.65.209.0/24
77.252.0.0/14
78.8.0.0/14
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.238.0.0/16
84.40.128.0/17
85.31.252.0/24
85.128.0.0/17
85.202.54.0/24
85.202.59.0/24
87.105.0.0/16
87.204.0.0/15
87.239.216.0/21
89.171.0.0/16
93.159.0.0/18
93.180.160.0/19
159.205.0.0/16
178.16.116.0/24
178.16.121.0/24
178.16.125.0/24
178.36.0.0/15
185.58.160.0/22
193.19.104.0/23
193.91.16.0/20
193.192.173.0/24
193.192.181.0/24
193.192.188.0/24
193.192.190.0/24
195.114.160.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
IPv6:
2001:16b0::/32
2001:41b0::/32
Signature Algorithm: sha256WithRSAEncryption
35:f7:b7:d3:07:43:44:98:39:04:c7:65:05:2e:38:26:d2:33:
56:39:ba:b9:95:67:b3:51:38:ae:99:86:d3:80:82:64:5c:4b:
1e:fc:4e:b7:50:b8:74:04:58:91:c6:bb:5e:cb:48:b3:1d:55:
cd:76:f7:b4:df:e2:fe:04:bb:91:e5:88:f0:5e:9e:39:c4:91:
ae:a7:ef:1d:e0:fa:d7:0b:36:d5:58:09:bc:1a:dc:05:da:27:
55:38:00:69:21:da:a5:fd:00:00:30:c5:9e:f0:f6:22:91:cb:
91:9d:60:40:a6:31:3d:03:b6:ea:3b:3c:b9:86:26:1a:15:58:
c0:09:ce:90:e3:2e:40:c7:92:3d:f0:7c:29:91:f5:00:dd:06:
14:7f:d0:25:83:4a:17:48:6d:48:55:b0:be:ec:a7:d8:b1:2a:
0b:a8:e8:00:39:09:26:7d:71:c3:82:bc:a6:47:68:c8:71:d2:
7a:b8:54:4a:06:34:7b:c9:0b:4a:54:fc:16:91:67:4b:69:c5:
de:c6:64:ee:64:ca:8f:05:04:18:23:1a:93:3f:94:fa:20:0d:
94:45:a8:10:84:89:fe:9f:7b:b1:50:f0:b6:83:cd:42:71:3b:
3b:21:1e:f7:af:89:34:ca:67:77:5a:ae:d0:e8:49:25:1b:38:
12:10:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org