Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/jP85ayO5yE3H96sit4e9aTNtd80.roa
File: jP85ayO5yE3H96sit4e9aTNtd80.roa (raw, json)
Hash identifier: OsRLF5lJkHWz1D5mg4J2nBXoojHLt+33aseig2EOxDg=
Subject key identifier: 8C:FF:39:6B:23:B9:C8:4D:C7:F7:AB:22:B7:87:BD:69:33:6D:77:CD
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 018A3C3A2B0E7461F1BA6AF52A6FFB182580
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/jP85ayO5yE3H96sit4e9aTNtd80.roa
Signing time: Mon 28 Aug 2023 12:59:19 +0000
ROA not before: Mon 28 Aug 2023 12:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42695
IP address blocks: 86.107.49.0/24 maxlen: 24
86.107.48.0/23 maxlen: 24
185.16.84.0/22 maxlen: 24
89.46.81.0/24 maxlen: 24
89.46.80.0/24 maxlen: 24
89.46.83.0/24 maxlen: 24
89.46.82.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.86.0/24 maxlen: 24
89.46.87.0/24 maxlen: 24
185.2.152.0/22 maxlen: 24
188.241.198.0/24 maxlen: 24
188.241.198.0/23 maxlen: 24
89.36.90.0/23 maxlen: 23
45.114.121.0/24 maxlen: 24
45.114.120.0/22 maxlen: 24
45.114.123.0/24 maxlen: 24
45.114.122.0/24 maxlen: 24
141.255.184.0/21 maxlen: 24
37.153.138.0/23 maxlen: 24
185.52.156.0/22 maxlen: 24
37.153.172.0/23 maxlen: 24
89.45.226.0/24 maxlen: 24
89.45.226.0/23 maxlen: 24
188.240.222.0/23 maxlen: 24
91.106.192.0/21 maxlen: 24
91.123.192.0/20 maxlen: 24
89.45.227.0/24 maxlen: 24
185.103.48.0/23 maxlen: 23
185.103.51.0/24 maxlen: 24
185.103.50.0/24 maxlen: 24
89.42.140.0/23 maxlen: 24
185.62.204.0/24 maxlen: 24
185.62.204.0/22 maxlen: 24
185.62.205.0/24 maxlen: 24
185.62.207.0/24 maxlen: 24
31.12.84.0/22 maxlen: 24
116.206.168.0/22 maxlen: 24
188.240.92.0/22 maxlen: 24
31.132.58.0/24 maxlen: 24
31.132.56.0/24 maxlen: 24
31.132.57.0/24 maxlen: 24
77.81.188.0/23 maxlen: 24
188.240.18.0/23 maxlen: 24
188.95.224.0/21 maxlen: 24
46.254.10.0/23 maxlen: 23
46.254.8.0/21 maxlen: 24
46.254.13.0/24 maxlen: 24
46.254.12.0/24 maxlen: 24
46.254.15.0/24 maxlen: 24
46.254.14.0/24 maxlen: 24
188.212.108.0/23 maxlen: 24
103.57.72.0/22 maxlen: 24
103.57.74.0/24 maxlen: 24
86.107.242.0/23 maxlen: 24
77.81.6.0/23 maxlen: 24
103.81.140.0/23 maxlen: 24
103.81.142.0/24 maxlen: 24
103.81.143.0/24 maxlen: 24
89.40.216.0/23 maxlen: 23
2a03:d7c0::/29 maxlen: 48
2a03:b000:200::/40 maxlen: 40
2a03:b000:800::/40 maxlen: 40
2a03:b000:b00::/40 maxlen: 40
2a03:b000:900::/40 maxlen: 40
2a03:b000:600::/40 maxlen: 40
2a03:b000:700::/40 maxlen: 40
2a03:b000:400::/40 maxlen: 40
2a04:f180::/29 maxlen: 48
2a06:2980::/29 maxlen: 48
2a00:16d8::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:3a:2b:0e:74:61:f1:ba:6a:f5:2a:6f:fb:18:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Aug 28 12:59:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cff396b23b9c84dc7f7ab22b787bd69336d77cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:40:50:36:c8:9f:1e:26:90:2e:a8:07:62:
35:62:1a:b6:56:22:00:ff:ba:d5:07:b2:e6:6f:05:
dc:c3:fa:b5:53:1f:69:bd:78:5d:8c:a2:4c:03:87:
dc:71:05:06:91:7c:f3:40:d5:87:a3:f6:cf:ae:b5:
e8:1f:9b:ae:52:7e:c1:af:a7:36:ff:17:6d:50:3b:
ea:d3:cb:0b:6c:ee:4f:b1:57:8f:86:3f:64:e7:1e:
4a:e6:ad:29:f9:10:a1:69:2e:91:16:55:10:b6:7b:
62:c4:c1:d8:3e:e7:4a:39:a6:87:df:74:5c:69:97:
f9:05:2a:80:07:a0:60:bc:22:31:81:fd:08:b0:d0:
01:72:28:45:5d:df:b4:72:f6:47:bb:c6:9a:14:a5:
30:d8:b2:26:fd:99:6a:af:c7:f9:14:be:54:b4:fe:
17:dc:bc:ed:99:04:fb:e2:6b:4b:46:36:05:04:73:
f8:bc:1c:4b:74:9b:0a:b2:fe:8b:a0:f8:1c:f2:32:
fe:c6:48:80:dc:25:84:21:f8:30:ac:1d:83:a9:ca:
d7:9d:02:96:c1:2d:86:10:ec:32:19:2b:49:41:ac:
4f:86:bf:07:7b:a8:a1:14:41:fc:27:38:e8:e0:82:
f4:6a:5c:14:84:5d:58:60:02:7a:d5:dd:26:08:c3:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:39:6B:23:B9:C8:4D:C7:F7:AB:22:B7:87:BD:69:33:6D:77:CD
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/jP85ayO5yE3H96sit4e9aTNtd80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.84.0/22
31.132.56.0-31.132.58.255
37.153.138.0/23
37.153.172.0/23
45.114.120.0/22
46.254.8.0/21
77.81.6.0/23
77.81.188.0/23
86.107.48.0/23
86.107.242.0/23
89.36.90.0/23
89.40.216.0/23
89.42.140.0/23
89.45.226.0/23
89.46.80.0/21
91.106.192.0/21
91.123.192.0/20
103.57.72.0/22
103.81.140.0/22
116.206.168.0/22
141.255.184.0/21
185.2.152.0/22
185.16.84.0/22
185.52.156.0/22
185.62.204.0/22
185.103.48.0/22
188.95.224.0/21
188.212.108.0/23
188.240.18.0/23
188.240.92.0/22
188.240.222.0/23
188.241.198.0/23
IPv6:
2a00:16d8::/32
2a03:b000:200::/40
2a03:b000:400::/40
2a03:b000:600::-2a03:b000:9ff:ffff:ffff:ffff:ffff:ffff
2a03:b000:b00::/40
2a03:d7c0::/29
2a04:f180::/29
2a06:2980::/29
Signature Algorithm: sha256WithRSAEncryption
a3:96:6a:b1:ac:d2:d0:ee:84:16:7a:0f:04:02:23:63:75:fa:
49:b8:bb:6a:75:15:bc:e4:f4:85:0f:1a:57:b2:7c:77:c1:4b:
c8:82:bb:69:87:4b:57:77:a5:cd:c0:cb:51:49:4f:55:84:00:
20:4b:8e:90:db:1b:f2:97:82:f1:b5:99:c0:de:6b:a1:85:38:
b7:0b:5b:3e:35:a1:2b:71:ec:23:35:11:9f:17:ab:21:bc:85:
90:9e:b3:75:65:38:4f:0b:ec:dd:01:05:e1:19:2f:ac:9a:3d:
5f:ad:11:2d:aa:e2:16:bf:74:bb:54:b8:2b:39:8a:c2:21:a1:
a5:c9:b6:f5:db:1f:33:76:19:6e:8e:94:f5:c9:7b:9f:cb:07:
95:84:b4:35:c1:f3:73:d3:6d:38:5c:20:06:68:e5:df:52:6c:
75:6f:a4:d1:44:2b:1b:e8:d1:7f:7f:63:b8:eb:2e:73:4a:6a:
0a:b1:d9:6c:33:ef:ff:f7:53:5a:62:0d:7b:78:22:36:ad:a2:
00:6a:10:ce:5e:11:83:63:bb:39:17:69:b7:64:fe:57:6c:36:
df:9c:39:62:d7:58:e2:ad:45:70:ab:fb:18:f3:4e:0e:a2:49:
01:3a:6e:e1:09:0a:ce:74:89:ec:41:8c:7c:05:34:c7:6a:08:
47:88:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 11:31:59 2023 by rpki-client on console-fra.rpki-client.org