Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/15YkfXH6zICQfGMnzKQovKIJm9U.roa
File: 15YkfXH6zICQfGMnzKQovKIJm9U.roa (raw, json)
Hash identifier: 5BsUaEsqkqVIGjelZuNp3AFKTO0PCxKWtSx2VFsZL+g=
Subject key identifier: D7:96:24:7D:71:FA:CC:80:90:7C:63:27:CC:A4:28:BC:A2:09:9B:D5
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018D36C75DC67EA1A5CF7915EB27ED4D9E92
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/15YkfXH6zICQfGMnzKQovKIJm9U.roa
Signing time: Tue 23 Jan 2024 14:44:11 +0000
ROA not before: Tue 23 Jan 2024 14:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203217
IP address blocks: 93.180.216.0/24 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.218.0/23 maxlen: 23
93.180.218.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.220.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
93.180.222.0/24 maxlen: 24
93.180.223.0/24 maxlen: 24
138.124.156.0/24 maxlen: 24
138.124.159.0/24 maxlen: 24
144.86.228.0/22 maxlen: 22
144.86.228.0/23 maxlen: 23
144.86.228.0/24 maxlen: 24
144.86.229.0/24 maxlen: 24
144.86.230.0/23 maxlen: 23
144.86.230.0/24 maxlen: 24
144.86.231.0/24 maxlen: 24
185.20.196.0/23 maxlen: 23
185.20.196.0/24 maxlen: 24
185.20.197.0/24 maxlen: 24
185.20.198.0/23 maxlen: 23
185.20.198.0/24 maxlen: 24
185.20.199.0/24 maxlen: 24
185.138.120.0/23 maxlen: 23
185.138.120.0/24 maxlen: 24
185.138.121.0/24 maxlen: 24
185.138.122.0/23 maxlen: 23
185.138.122.0/24 maxlen: 24
185.138.123.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
185.254.14.0/24 maxlen: 24
185.254.15.0/24 maxlen: 24
195.133.220.0/23 maxlen: 23
195.133.220.0/24 maxlen: 24
195.133.221.0/24 maxlen: 24
195.133.222.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
199.74.188.0/23 maxlen: 23
199.74.188.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.190.0/23 maxlen: 23
199.74.190.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/48 maxlen: 48
2a0b:1880:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 18:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:c7:5d:c6:7e:a1:a5:cf:79:15:eb:27:ed:4d:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 23 14:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d796247d71facc80907c6327cca428bca2099bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:fb:bf:d1:78:be:09:55:3d:a0:2c:4a:03:
ee:1b:43:39:e5:43:d4:83:7b:46:3b:e2:39:6b:54:
e5:06:81:17:0a:31:90:82:01:b0:10:0c:e6:f9:55:
3c:d7:d2:7c:53:3b:2b:21:dc:b5:7a:d1:17:d0:33:
ca:40:c4:b3:4b:45:66:e1:d9:d1:a4:7d:91:79:0a:
40:83:01:4d:89:90:b7:ac:d5:9a:49:3f:af:d6:bf:
8b:78:40:e5:b5:c2:f3:ff:bf:d6:5d:ba:ad:7b:11:
46:9a:f9:5a:52:b6:a4:f9:ea:d7:68:da:49:21:20:
d0:21:ef:66:40:7e:ce:0c:da:d6:a3:55:3e:0c:2a:
6f:9d:bb:58:e0:16:80:1b:ce:48:be:1d:91:09:98:
31:85:79:ef:3e:ae:0b:f2:c6:03:72:52:8b:fc:04:
e9:e5:af:44:5e:74:c4:1d:18:73:38:c8:2e:9a:0d:
75:79:53:b8:40:55:38:41:cc:d8:90:e8:dd:59:0d:
46:91:5d:cf:b7:97:3e:06:35:5a:7d:38:0f:e7:1d:
e2:d6:7c:02:1e:4a:97:b8:ed:c2:4e:3e:aa:84:e4:
1a:59:a2:49:64:e2:95:77:c1:28:5a:5b:f2:fa:06:
c4:24:1c:db:25:6c:69:e0:eb:d3:26:8f:10:9c:e5:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:24:7D:71:FA:CC:80:90:7C:63:27:CC:A4:28:BC:A2:09:9B:D5
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/15YkfXH6zICQfGMnzKQovKIJm9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
138.124.156.0/24
138.124.159.0/24
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.13.0-185.254.15.255
195.133.220.0/22
199.74.188.0/22
IPv6:
2a0b:1880::/47
Signature Algorithm: sha256WithRSAEncryption
b4:69:76:2c:eb:ef:f2:cd:b5:c9:c0:3f:23:18:bb:54:11:0f:
9f:23:b2:01:02:04:14:fe:74:fa:eb:fb:27:4d:d2:3a:fb:75:
d2:4c:e8:55:66:08:fc:8a:4a:01:6b:93:4b:98:b7:55:3d:7b:
26:8a:a8:62:c8:66:0b:7a:04:ca:dd:83:22:c1:ee:42:88:46:
ee:3f:6e:22:5f:da:61:d3:27:51:df:d6:68:26:a4:a1:a5:db:
d4:d4:1a:24:e4:3a:b1:6e:75:3d:ed:bd:f2:ac:61:a2:65:1c:
f6:25:82:3f:d6:d5:8c:0a:41:ac:70:28:bc:f6:17:02:0a:6b:
55:bd:49:7c:7b:d7:9d:61:41:d8:12:dd:d8:b3:22:90:ef:b1:
06:bf:a6:72:89:6a:d7:ed:df:60:a2:6b:2f:67:e2:fc:62:c3:
3d:77:b4:33:6a:8b:c7:68:fe:82:d6:01:85:6f:fb:9f:7b:83:
bd:55:f2:ed:b5:31:d1:3e:5c:a9:9d:f6:32:9d:0f:19:2e:42:
3e:47:68:5e:5f:48:c3:8c:6c:a3:a0:df:b6:be:cb:e2:ad:ca:
d7:8d:6c:35:27:b6:bc:f3:f1:a2:cc:c3:85:30:53:3d:cf:6e:
73:9b:1e:4a:5f:5d:4c:6d:b0:f2:eb:2c:5e:31:21:8a:48:f1:
c1:0d:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:27 2024 by rpki-client on console-ams.rpki-client.org