Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/MKvxEljpG8hv_RnvyKqMI_PItJk.roa
File: MKvxEljpG8hv_RnvyKqMI_PItJk.roa (raw, json)
Hash identifier: 0ax2cKe9qiSRPCqXdNGagOhOOuprJUViD9dJ+eAZ5Bc=
Subject key identifier: 30:AB:F1:12:58:E9:1B:C8:6F:FD:19:EF:C8:AA:8C:23:F3:C8:B4:99
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0189872A0B054EDB589E7A1F9B8D19D3E200
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/MKvxEljpG8hv_RnvyKqMI_PItJk.roa
Signing time: Mon 24 Jul 2023 09:10:26 +0000
ROA not before: Mon 24 Jul 2023 09:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 195.208.56.0/24 maxlen: 24
195.19.172.0/22 maxlen: 24
195.19.168.0/22 maxlen: 24
195.208.80.0/22 maxlen: 24
195.208.84.0/24 maxlen: 24
195.208.88.0/22 maxlen: 24
195.208.86.0/23 maxlen: 24
195.208.92.0/22 maxlen: 24
195.19.199.0/24 maxlen: 24
195.19.195.0/24 maxlen: 24
62.76.164.0/24 maxlen: 24
195.208.21.0/24 maxlen: 24
195.208.20.0/24 maxlen: 24
193.232.54.0/24 maxlen: 24
195.208.178.0/24 maxlen: 24
195.208.180.0/24 maxlen: 24
193.232.88.0/22 maxlen: 24
195.208.110.0/24 maxlen: 24
195.208.117.0/24 maxlen: 24
195.19.219.0/24 maxlen: 24
62.76.7.0/24 maxlen: 24
194.190.149.0/24 maxlen: 24
212.193.184.0/22 maxlen: 24
212.193.188.0/22 maxlen: 24
194.190.131.0/24 maxlen: 24
62.76.155.0/24 maxlen: 24
194.190.210.0/23 maxlen: 24
195.19.29.0/24 maxlen: 24
194.226.187.0/24 maxlen: 24
212.192.228.0/24 maxlen: 24
195.209.188.0/24 maxlen: 24
194.226.166.0/24 maxlen: 24
194.226.165.0/24 maxlen: 24
194.226.184.0/24 maxlen: 24
194.85.179.0/24 maxlen: 24
194.85.180.0/24 maxlen: 24
194.85.181.0/24 maxlen: 24
194.85.182.0/24 maxlen: 24
212.193.162.0/24 maxlen: 24
212.193.164.0/24 maxlen: 24
212.193.168.0/24 maxlen: 24
212.193.171.0/24 maxlen: 24
212.193.167.0/24 maxlen: 24
212.193.102.0/24 maxlen: 24
212.192.56.0/22 maxlen: 24
212.192.63.0/24 maxlen: 24
212.192.60.0/24 maxlen: 24
212.192.61.0/24 maxlen: 24
194.226.4.0/24 maxlen: 24
194.226.5.0/24 maxlen: 24
193.232.204.0/23 maxlen: 24
194.226.20.0/24 maxlen: 24
193.232.113.0/24 maxlen: 24
212.192.168.0/24 maxlen: 24
194.226.97.0/24 maxlen: 24
195.209.135.0/24 maxlen: 24
195.209.145.0/24 maxlen: 24
194.226.112.0/24 maxlen: 24
212.192.192.0/24 maxlen: 24
194.226.115.0/24 maxlen: 24
212.192.196.0/22 maxlen: 24
194.226.113.0/24 maxlen: 24
212.192.195.0/24 maxlen: 24
194.226.120.0/24 maxlen: 24
194.226.124.0/24 maxlen: 24
194.226.125.0/24 maxlen: 24
194.226.123.0/24 maxlen: 24
194.226.126.0/24 maxlen: 24
193.232.222.0/24 maxlen: 24
193.232.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 07:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:2a:0b:05:4e:db:58:9e:7a:1f:9b:8d:19:d3:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jul 24 09:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30abf11258e91bc86ffd19efc8aa8c23f3c8b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:84:b0:ff:b4:48:30:c1:30:61:86:53:66:02:
d3:43:61:9c:d9:25:65:48:db:98:00:29:f4:52:d4:
a8:f5:3e:e7:37:93:5a:72:f9:c1:a4:d5:33:f9:cf:
af:c9:ba:50:36:93:fe:af:a6:15:1d:03:d6:32:2a:
ce:b3:ef:b5:37:7e:7a:e0:6a:2c:74:18:b7:c6:0f:
fe:89:ae:c0:8c:4f:62:49:72:2c:ce:34:bd:81:53:
f7:0a:f9:04:18:10:04:29:b1:db:de:d7:dc:f4:74:
b2:90:5d:62:7b:9a:74:c6:88:c0:df:86:9d:9d:c6:
82:ff:b0:a4:43:3c:10:46:99:85:42:5b:1c:4c:0f:
a4:10:1e:32:db:78:35:93:ce:00:c3:bc:cc:db:8a:
59:b1:08:50:a9:33:5d:c3:da:e2:97:7b:b9:af:ee:
35:1e:e6:e4:9f:6b:3b:9b:1a:46:d8:62:64:d5:8c:
97:87:0a:b1:64:39:f7:5b:eb:eb:a5:1f:d7:8b:dd:
d4:49:39:ff:cc:46:9b:1f:c4:66:a4:5f:14:db:1d:
0b:82:a2:da:9f:43:f1:96:3f:c8:24:97:27:e6:ce:
33:a6:de:41:dc:0c:99:bc:4b:55:eb:10:0c:5b:35:
fb:c4:f4:c2:63:cd:4b:14:dc:55:c3:a0:16:e1:a0:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AB:F1:12:58:E9:1B:C8:6F:FD:19:EF:C8:AA:8C:23:F3:C8:B4:99
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/MKvxEljpG8hv_RnvyKqMI_PItJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.7.0/24
62.76.155.0/24
62.76.164.0/24
193.232.54.0/24
193.232.88.0/22
193.232.113.0/24
193.232.204.0/23
193.232.220.0-193.232.222.255
194.85.179.0-194.85.182.255
194.190.131.0/24
194.190.149.0/24
194.190.210.0/23
194.226.4.0/23
194.226.20.0/24
194.226.97.0/24
194.226.112.0/23
194.226.115.0/24
194.226.120.0/24
194.226.123.0-194.226.126.255
194.226.165.0-194.226.166.255
194.226.184.0/24
194.226.187.0/24
195.19.29.0/24
195.19.168.0/21
195.19.195.0/24
195.19.199.0/24
195.19.219.0/24
195.208.20.0/23
195.208.56.0/24
195.208.80.0-195.208.84.255
195.208.86.0-195.208.95.255
195.208.110.0/24
195.208.117.0/24
195.208.178.0/24
195.208.180.0/24
195.209.135.0/24
195.209.145.0/24
195.209.188.0/24
212.192.56.0-212.192.61.255
212.192.63.0/24
212.192.168.0/24
212.192.192.0/24
212.192.195.0-212.192.199.255
212.192.228.0/24
212.193.102.0/24
212.193.162.0/24
212.193.164.0/24
212.193.167.0-212.193.168.255
212.193.171.0/24
212.193.184.0/21
Signature Algorithm: sha256WithRSAEncryption
10:2b:93:ff:e8:03:f3:b2:9a:12:11:4f:ac:f1:96:c5:60:5d:
33:a0:7e:42:61:b3:aa:9d:69:4b:57:9b:68:d2:79:38:1b:08:
7a:f2:cf:ba:10:ef:f3:91:09:47:87:c5:84:84:85:b9:81:e9:
c9:95:99:ac:88:24:86:af:97:fd:93:84:ea:c0:b0:d4:7e:23:
3e:f0:0b:cf:02:b0:8f:f2:21:0d:43:b5:e0:e6:e5:bd:19:b0:
12:7b:89:7a:2a:f0:03:dd:1b:7c:93:a6:e1:d0:f2:8b:58:5b:
1c:31:c4:52:58:8c:96:36:c5:22:1e:61:8a:8c:ec:c4:9e:d3:
00:26:fd:4a:c5:c3:87:8a:9f:e7:b1:16:66:9c:ba:0e:06:89:
a5:78:b3:ea:67:25:e5:da:70:5e:e2:6f:52:e0:ab:86:87:85:
ad:87:b5:ff:24:50:f1:43:d3:b8:c9:6b:69:3e:ee:7d:a6:83:
73:4d:9c:49:3f:71:bb:18:5f:b5:2a:fb:ca:ac:ea:3b:98:74:
43:87:ca:71:76:d7:5f:6b:1e:49:e8:34:eb:c9:e5:7f:2a:4b:
23:97:b4:be:16:8d:24:9b:b7:46:cc:80:d7:fd:85:5a:6f:74:
a2:95:86:ba:f5:1b:d9:b0:60:55:bc:28:1c:3a:01:ca:4f:05:
07:eb:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org