Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jOt3KCEr2LWA4gEcPq0SbH51mFY.roa
File: jOt3KCEr2LWA4gEcPq0SbH51mFY.roa (raw, json)
Hash identifier: pdRXGptOd4w16KlgZjWL37Sqi0TkFq0w0yraAWajWs8=
Subject key identifier: 8C:EB:77:28:21:2B:D8:B5:80:E2:01:1C:3E:AD:12:6C:7E:75:98:56
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E2EAE7C52D9597A42A32F7A150F4D
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jOt3KCEr2LWA4gEcPq0SbH51mFY.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 217.19.192.0/20 maxlen: 24
88.141.0.0/16 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
79.174.232.0/21 maxlen: 21
194.6.128.0/19 maxlen: 19
195.146.192.0/19 maxlen: 24
88.140.0.0/16 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
212.39.128.0/19 maxlen: 24
86.66.127.0/24 maxlen: 24
62.241.64.0/18 maxlen: 24
81.220.0.0/16 maxlen: 24
81.65.0.0/16 maxlen: 16
78.112.0.0/12 maxlen: 24
37.64.0.0/13 maxlen: 24
81.185.160.0/20 maxlen: 20
81.185.160.0/21 maxlen: 21
80.125.0.0/16 maxlen: 24
81.185.168.0/21 maxlen: 21
84.205.128.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
80.118.4.0/24 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.124.0.0/16 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
212.198.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
213.144.192.0/19 maxlen: 24
217.70.80.0/20 maxlen: 24
77.144.0.0/12 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
84.96.0.0/13 maxlen: 24
77.136.172.0/24 maxlen: 24
77.136.173.0/24 maxlen: 24
77.136.174.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
194.183.192.0/19 maxlen: 19
62.62.128.0/17 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
84.55.128.0/18 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
88.136.0.0/14 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
77.134.204.0/24 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 20
92.88.0.0/13 maxlen: 24
195.7.96.0/19 maxlen: 24
91.68.0.0/22 maxlen: 22
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
82.216.0.0/16 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
88.142.0.0/16 maxlen: 24
2a02:8400::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a02:8400:11::/48 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400:13::/48 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 32
2a00:7180::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Mar 2024 15:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2e:ae:7c:52:d9:59:7a:42:a3:2f:7a:15:0f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ceb7728212bd8b580e2011c3ead126c7e759856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:68:8a:6d:65:c7:5a:80:60:71:a6:59:04:
0b:7f:23:d7:ce:22:99:bc:e6:e8:19:fe:41:7b:68:
93:f4:78:3e:ca:da:ed:31:c1:80:e2:11:5c:c7:e7:
10:dc:e2:bc:87:41:e2:5e:29:07:2f:e2:b3:15:09:
32:d4:cd:8b:7e:ca:c7:47:e8:e6:54:a1:99:10:9b:
13:61:f7:aa:33:c0:f1:54:9d:a6:9f:5f:b8:9e:61:
ff:23:3d:c8:2c:51:2d:df:d0:85:61:43:d6:53:4d:
35:60:52:c5:36:72:47:68:e4:bb:ed:85:2e:3f:2b:
ea:dc:71:1e:06:37:3c:5c:a7:ae:9e:c3:75:b1:b4:
5a:35:9c:0d:6b:1a:4b:c9:e9:4e:ee:9a:ca:ca:75:
80:96:91:d7:3e:4e:1c:e4:9e:d9:59:ab:3d:6d:ee:
ed:86:57:54:b9:5c:3f:a9:88:3d:3e:80:d2:ec:68:
2f:f7:bd:45:8b:24:0f:4c:ca:30:8e:4c:2c:d7:d5:
c7:28:33:f8:c2:8d:15:20:f5:e8:fe:6e:ee:86:46:
9f:4d:ae:68:9a:ce:98:18:fd:2c:d0:7a:5a:6d:71:
9a:8f:52:34:2a:80:a4:01:d9:53:3a:8a:06:b0:8b:
b5:70:78:eb:9d:cb:32:14:0a:91:47:dc:88:c0:af:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EB:77:28:21:2B:D8:B5:80:E2:01:1C:3E:AD:12:6C:7E:75:98:56
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jOt3KCEr2LWA4gEcPq0SbH51mFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.159.255.255
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:9380::/32
2a00:ec80::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
83:2c:3f:40:a5:ca:db:33:6e:75:dd:44:a0:1d:7d:ed:37:a8:
25:41:d7:fd:d8:70:57:e8:b4:c9:e1:01:8c:5f:12:d2:fd:e8:
b5:9e:9e:f4:ad:7f:69:e9:7d:25:8b:10:8e:1b:b3:0d:21:1e:
42:94:81:d3:ef:37:e8:e0:3b:96:08:87:44:e8:b6:8b:90:76:
87:ae:ab:d4:05:70:95:de:52:45:b1:03:24:85:4a:8b:ce:42:
ad:45:72:fb:1f:d9:e1:f8:89:5b:e9:f5:de:95:06:89:90:52:
bd:d6:9b:e7:c6:65:6d:49:41:34:ea:e0:18:e8:93:1e:08:57:
c6:78:ba:83:cb:f9:e1:22:04:8b:ab:fa:18:93:d9:1f:f8:48:
13:47:e9:23:90:eb:91:9f:61:d5:20:bb:87:ea:1a:03:3a:2e:
78:38:1c:10:3d:a1:07:b3:9d:4c:75:e8:de:29:fb:48:7d:03:
63:f1:51:79:e0:7e:21:fd:2d:29:7c:50:38:23:83:8b:87:8a:
31:4c:8c:95:71:c5:9e:b2:b7:e8:f8:5c:fd:95:f8:ce:2e:d9:
c9:4c:1d:29:b0:1c:dd:5c:72:82:58:65:8e:a3:34:c5:89:2e:
d7:f7:06:cb:25:10:31:7b:63:ec:84:e1:78:af:b9:7e:1f:54:
10:07:5e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org