Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EeMsfgnJ2Uc4LmHgSmD1zGO5Kqk.roa
File: EeMsfgnJ2Uc4LmHgSmD1zGO5Kqk.roa (raw, json)
Hash identifier: kNG7t2rb17gBRWYKQd2gvRPTRpiTvU7e2hlhEc6+p3I=
Subject key identifier: 11:E3:2C:7E:09:C9:D9:47:38:2E:61:E0:4A:60:F5:CC:63:B9:2A:A9
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0187A3E7F9BEAB418A35EB08AD98FDBC99BD
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EeMsfgnJ2Uc4LmHgSmD1zGO5Kqk.roa
Signing time: Fri 21 Apr 2023 13:01:41 +0000
ROA not before: Fri 21 Apr 2023 13:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 80.70.32.0/20 maxlen: 20
80.124.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 20
88.141.0.0/16 maxlen: 24
212.198.0.0/16 maxlen: 16
91.151.112.0/20 maxlen: 20
213.144.192.0/19 maxlen: 19
217.70.80.0/20 maxlen: 20
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 22
77.144.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 18
195.3.0.0/18 maxlen: 18
77.137.196.0/22 maxlen: 24
85.168.0.0/14 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
79.174.232.0/21 maxlen: 21
81.185.0.0/16 maxlen: 24
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 19
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
88.140.0.0/16 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
89.2.0.0/15 maxlen: 15
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 20
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 21
212.39.128.0/19 maxlen: 19
213.245.0.0/16 maxlen: 16
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 14
213.169.160.0/19 maxlen: 19
109.0.0.0/11 maxlen: 11
93.0.0.0/11 maxlen: 11
81.1.0.0/18 maxlen: 24
81.65.0.0/16 maxlen: 16
84.55.128.0/18 maxlen: 18
62.129.160.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 19
88.136.0.0/14 maxlen: 24
37.64.0.0/13 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 19
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
83.141.128.0/17 maxlen: 24
84.205.128.0/19 maxlen: 24
77.134.204.0/24 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
213.128.32.0/19 maxlen: 19
80.118.0.0/15 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 13
195.7.96.0/19 maxlen: 19
91.68.0.0/22 maxlen: 22
195.132.0.0/16 maxlen: 16
85.68.0.0/15 maxlen: 24
195.98.96.0/19 maxlen: 19
213.223.0.0/16 maxlen: 16
91.68.0.0/14 maxlen: 14
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 16
88.142.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 19
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a00:7180::/32 maxlen: 32
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a02:8400::/25 maxlen: 25
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Apr 2023 13:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:e7:f9:be:ab:41:8a:35:eb:08:ad:98:fd:bc:99:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 21 13:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e32c7e09c9d947382e61e04a60f5cc63b92aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:91:c9:74:c8:fb:05:c2:46:b8:88:d0:c5:
0e:7c:4f:18:d2:72:19:08:3b:14:32:3d:30:e0:04:
b3:72:50:6a:0d:68:ef:4f:6b:2c:5d:bd:7e:0c:9e:
d9:5f:7d:3d:89:01:20:3a:c7:68:08:f6:60:0d:16:
f2:ae:0f:2c:3b:31:66:cc:3d:66:e9:1b:fe:e0:d7:
44:c2:06:ef:66:2d:e7:97:95:5e:a8:30:ef:d7:69:
2d:96:17:07:67:f2:d6:ca:00:95:7f:61:69:32:16:
6a:1b:72:81:94:ae:31:d1:08:35:b8:43:a8:ec:16:
b3:56:ca:ab:ec:34:15:b4:d1:44:dc:a0:2f:fd:4e:
61:55:83:30:9c:3c:8a:9f:3f:6b:4b:3e:e4:2c:86:
c2:f7:2c:45:89:20:95:8f:8d:59:69:9d:95:51:e7:
e6:23:be:6f:ad:f9:61:a9:04:c8:63:4e:d8:82:1a:
9b:25:91:97:10:20:4f:fd:a4:c3:1d:10:98:d1:d7:
13:36:9d:4c:b6:83:37:8c:84:98:1b:d1:fe:3e:4d:
a3:1f:d5:c4:60:81:df:78:5f:4f:e5:d6:d6:da:d7:
69:22:93:32:ef:61:50:20:cd:25:51:ed:a5:db:f6:
b2:d8:d6:ab:a4:98:a7:95:3d:d7:9c:b4:d4:ae:23:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:2C:7E:09:C9:D9:47:38:2E:61:E0:4A:60:F5:CC:63:B9:2A:A9
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EeMsfgnJ2Uc4LmHgSmD1zGO5Kqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0-88.142.255.255
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
84:3b:f9:8c:2f:ff:f2:44:e0:07:f8:8e:d9:64:3a:7f:79:c2:
2d:f9:8b:66:6d:b0:88:12:03:14:f6:6c:52:b3:4e:67:a4:92:
91:95:c1:a8:e8:7a:00:4e:83:98:78:2d:ef:d9:57:3b:3d:f7:
45:33:96:c7:9c:e5:11:d6:7c:b7:ca:8c:e1:18:a0:2e:0c:ac:
2b:fd:40:d7:37:d6:92:e5:b3:bf:34:25:c3:6a:a2:18:96:65:
38:f1:ba:f3:46:05:fa:e8:1d:d5:93:3f:67:5d:be:3c:29:96:
0c:ea:dd:fd:8b:fc:22:11:de:6c:00:d4:92:e2:82:d9:95:3f:
76:15:89:de:e4:75:3e:e5:07:e4:6b:47:c3:1f:ee:2d:12:d1:
17:bf:f5:d8:89:5c:f0:1e:22:59:25:c2:51:37:d9:48:d9:68:
79:60:c5:c6:80:e4:3f:aa:81:92:15:2e:1f:1a:b5:f2:b0:f0:
07:d9:01:d5:3f:a5:71:a7:49:32:08:a9:2b:e8:0f:82:53:36:
9b:9c:64:49:7c:85:fe:f9:42:e5:97:9e:b7:db:10:31:50:10:
a7:23:68:e9:ff:9c:79:a6:e3:56:7d:ca:eb:54:d1:af:1e:80:
ef:94:82:cc:56:88:72:46:f6:a5:87:23:ca:e1:c3:41:66:76:
c8:37:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org