Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/DDSVY2mu3u4IroasIkFfjwbrmtc.roa
File: DDSVY2mu3u4IroasIkFfjwbrmtc.roa (raw, json)
Hash identifier: iAJrzh26L3cYutiA5NQKJG7EKm6hZBZo4VtjeuPhmIg=
Subject key identifier: 0C:34:95:63:69:AE:DE:EE:08:AE:86:AC:22:41:5F:8F:06:EB:9A:D7
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018A4ACCB687D91BFFF7194F17991E83EE63
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/DDSVY2mu3u4IroasIkFfjwbrmtc.roa
Signing time: Thu 31 Aug 2023 08:54:04 +0000
ROA not before: Thu 31 Aug 2023 08:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.124.0.0/16 maxlen: 24
80.70.32.0/20 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 24
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
88.142.0.0/16 maxlen: 24
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Sep 2023 11:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:cc:b6:87:d9:1b:ff:f7:19:4f:17:99:1e:83:ee:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Aug 31 08:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c34956369aedeee08ae86ac22415f8f06eb9ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:e2:9d:e3:d3:d4:38:d8:ab:ae:d1:e8:e5:
3c:00:1b:7a:0f:2e:3b:c9:28:3f:7f:24:61:84:70:
30:57:21:68:cd:97:e8:65:91:55:1a:46:54:9b:35:
4a:62:fa:0c:b1:7d:1f:14:e9:9d:52:8b:94:fe:c6:
64:1e:bb:87:cd:20:3f:f7:e4:53:0d:2f:3f:71:b1:
1e:35:a2:7a:53:ae:11:e7:62:e9:7f:82:1a:01:58:
1c:30:a8:60:39:1a:bc:40:b3:a0:59:60:9d:a5:82:
34:e7:fe:e9:f1:59:3a:d3:62:0b:ac:b0:91:4d:3b:
57:86:e6:2d:4d:4a:37:31:91:61:e3:6a:0e:6a:2e:
66:79:55:40:9a:c5:27:fc:82:bb:a1:bc:ff:07:4c:
74:6e:30:0d:ed:12:71:85:1b:f4:e2:e2:a2:0d:14:
2e:7e:54:85:fb:40:6c:4e:2b:5d:fd:61:79:26:cd:
98:99:e0:5b:d1:4b:c8:7c:84:ee:09:53:d7:96:a6:
16:da:96:9a:ed:0b:fe:03:0d:81:5e:65:81:1d:fe:
c3:a9:a3:65:a0:bc:a2:4b:db:25:9c:22:2e:d0:5d:
ff:73:c4:8d:9d:14:c3:e8:e3:4d:d2:b7:33:a7:c6:
34:df:45:f1:42:0a:2a:e2:30:95:26:d3:fa:bc:c2:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:95:63:69:AE:DE:EE:08:AE:86:AC:22:41:5F:8F:06:EB:9A:D7
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/DDSVY2mu3u4IroasIkFfjwbrmtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
1b:59:db:cb:91:0a:0b:6d:74:81:14:9f:b7:56:cc:0f:b3:59:
78:4e:e5:3d:f2:09:c7:fb:e8:7a:f5:02:2a:7f:60:73:40:45:
e0:84:96:2e:a3:03:a5:74:bf:be:64:88:0a:54:5e:52:c6:4b:
aa:36:2e:24:c5:87:ae:96:c9:17:da:dc:01:d0:dd:f8:d1:9f:
0b:b5:86:21:d3:b2:fd:3b:d8:4d:1c:d3:93:7b:0a:e9:0c:d7:
f9:91:29:ad:e5:bf:75:79:9a:c8:59:94:ba:1f:29:c9:2f:33:
b0:16:a4:6c:69:f5:c8:c4:6e:fa:47:ac:20:b0:7c:ff:8e:8e:
7f:60:c8:fe:6b:b1:44:6a:7b:cf:07:1a:58:ee:ee:96:66:a1:
e8:13:9b:ba:03:a0:99:c0:3e:d5:70:42:58:2c:94:31:16:19:
4c:73:96:f0:14:19:ed:8f:9c:8b:a6:15:24:dd:8d:ef:07:94:
e7:3d:84:c6:b4:1a:77:a0:76:ba:e2:cb:eb:c4:49:ef:fb:b1:
75:19:05:4e:51:a6:ab:b3:6f:2c:d4:8c:e3:2f:39:8c:73:f0:
a6:8a:7e:09:43:1d:b4:92:48:62:66:4a:a2:1e:db:5c:a1:7f:
a4:68:48:86:a8:b8:07:61:2e:65:7e:3a:ea:16:64:3c:30:fd:
93:58:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org