Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/dNrF6dtkkQcdnCn-cHgmN9Y1_KM.roa
File: dNrF6dtkkQcdnCn-cHgmN9Y1_KM.roa (raw, json)
Hash identifier: pe3i5lruyde/uSk4kN92yX+jaiJgvsIbYsPzHmEisSs=
Subject key identifier: 74:DA:C5:E9:DB:64:91:07:1D:9C:29:FE:70:78:26:37:D6:35:FC:A3
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 018D3BB23685C452D30C4C59BD9ED06630A9
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/dNrF6dtkkQcdnCn-cHgmN9Y1_KM.roa
Signing time: Wed 24 Jan 2024 13:39:11 +0000
ROA not before: Wed 24 Jan 2024 13:39:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21334
IP address blocks: 5.63.192.0/18 maxlen: 18
5.148.192.0/18 maxlen: 18
5.148.192.0/19 maxlen: 19
5.148.224.0/19 maxlen: 19
5.206.128.0/18 maxlen: 18
37.188.80.0/21 maxlen: 21
37.188.80.0/22 maxlen: 22
37.188.84.0/22 maxlen: 22
37.191.0.0/18 maxlen: 18
37.191.0.0/19 maxlen: 19
37.191.32.0/19 maxlen: 19
37.220.192.0/18 maxlen: 18
78.139.0.0/18 maxlen: 18
78.139.0.0/19 maxlen: 19
78.139.32.0/19 maxlen: 19
80.98.0.0/15 maxlen: 15
80.98.0.0/16 maxlen: 16
80.99.0.0/16 maxlen: 16
80.244.96.0/20 maxlen: 20
86.101.0.0/16 maxlen: 16
86.101.0.0/17 maxlen: 17
86.101.128.0/17 maxlen: 17
88.87.240.0/21 maxlen: 21
88.87.240.0/22 maxlen: 22
88.87.244.0/22 maxlen: 22
89.132.0.0/14 maxlen: 14
89.132.0.0/15 maxlen: 15
89.134.0.0/15 maxlen: 15
89.134.0.0/20 maxlen: 20
89.134.16.0/20 maxlen: 20
89.135.60.0/24 maxlen: 24
89.223.128.0/17 maxlen: 17
89.223.128.0/18 maxlen: 18
89.223.192.0/18 maxlen: 18
94.44.0.0/16 maxlen: 16
94.44.0.0/17 maxlen: 17
94.44.128.0/17 maxlen: 17
130.43.192.0/18 maxlen: 18
151.0.64.0/18 maxlen: 18
176.63.0.0/16 maxlen: 16
176.63.0.0/17 maxlen: 17
176.63.0.0/20 maxlen: 20
176.63.16.0/20 maxlen: 20
176.63.128.0/17 maxlen: 17
178.48.0.0/16 maxlen: 16
178.48.0.0/17 maxlen: 17
178.48.128.0/17 maxlen: 17
185.10.124.0/22 maxlen: 22
185.10.124.0/23 maxlen: 23
185.10.126.0/23 maxlen: 23
185.33.80.0/23 maxlen: 23
185.33.80.0/24 maxlen: 24
185.33.81.0/24 maxlen: 24
185.123.28.0/22 maxlen: 23
188.142.160.0/19 maxlen: 19
188.142.160.0/20 maxlen: 20
188.142.176.0/20 maxlen: 20
188.142.192.0/18 maxlen: 18
188.142.192.0/19 maxlen: 19
188.142.224.0/19 maxlen: 19
195.184.160.0/19 maxlen: 19
195.184.160.0/20 maxlen: 20
195.184.176.0/20 maxlen: 20
212.48.240.0/20 maxlen: 20
212.48.240.0/21 maxlen: 21
212.48.248.0/21 maxlen: 21
212.96.32.0/19 maxlen: 19
212.96.32.0/20 maxlen: 20
212.96.48.0/20 maxlen: 20
213.222.128.0/18 maxlen: 18
213.222.128.0/19 maxlen: 19
213.222.160.0/19 maxlen: 19
2a02:ab80::/28 maxlen: 28
2a02:ab80::/29 maxlen: 29
2a02:ab88::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Mar 2024 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:b2:36:85:c4:52:d3:0c:4c:59:bd:9e:d0:66:30:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jan 24 13:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74dac5e9db6491071d9c29fe70782637d635fca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:c9:03:ed:ac:5e:5c:7b:a5:00:11:81:a7:
28:79:00:cc:26:b3:c9:84:dd:c5:12:f0:ae:c1:e6:
ec:10:5a:ba:e0:61:96:a4:4f:0e:79:0f:94:6a:61:
1a:d1:5a:8c:f5:93:a2:de:53:6f:c8:e9:e1:e5:2a:
f7:b0:91:5c:45:6b:74:6f:e1:4e:7e:ab:65:e6:32:
9c:e4:fa:99:a0:50:6d:29:5d:0f:e2:5b:e5:85:0d:
5f:25:9c:55:ca:b7:d8:b4:ac:c8:8d:e2:1a:fb:b7:
f6:38:23:4b:2b:ef:20:6b:36:cc:e5:b5:2b:dc:0f:
8b:e5:17:11:0f:22:da:ed:18:ae:29:5b:60:a3:96:
64:0b:7d:c5:c1:38:36:00:3f:5f:0b:07:59:93:bf:
cf:f8:ab:b0:a8:53:c5:4c:29:a9:65:08:b9:61:de:
d7:6a:d9:a1:cb:38:f2:52:0f:c7:50:df:21:a5:4c:
be:b1:a4:0e:b4:a5:8e:8d:48:dd:82:1f:62:5b:7c:
47:8d:f4:16:ac:3e:62:38:a5:34:35:77:29:cc:ff:
98:d3:3f:e4:bb:d5:c4:16:aa:b2:11:8c:e5:48:c0:
86:09:d2:18:f5:5c:d2:7a:fb:1c:50:fb:be:ac:98:
ad:28:d8:cb:e3:09:47:02:e7:9c:fc:b7:98:42:79:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:C5:E9:DB:64:91:07:1D:9C:29:FE:70:78:26:37:D6:35:FC:A3
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/dNrF6dtkkQcdnCn-cHgmN9Y1_KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.192.0/18
5.148.192.0/18
5.206.128.0/18
37.188.80.0/21
37.191.0.0/18
37.220.192.0/18
78.139.0.0/18
80.98.0.0/15
80.244.96.0/20
86.101.0.0/16
88.87.240.0/21
89.132.0.0/14
89.223.128.0/17
94.44.0.0/16
130.43.192.0/18
151.0.64.0/18
176.63.0.0/16
178.48.0.0/16
185.10.124.0/22
185.33.80.0/23
185.123.28.0/22
188.142.160.0-188.142.255.255
195.184.160.0/19
212.48.240.0/20
212.96.32.0/19
213.222.128.0/18
IPv6:
2a02:ab80::/28
Signature Algorithm: sha256WithRSAEncryption
1a:6c:cc:31:e9:f5:f8:e6:9a:55:ad:93:b8:e8:2c:dc:56:2d:
b5:39:67:a4:e1:32:d4:e4:51:a6:64:65:bc:e3:55:b6:e5:06:
68:21:d3:77:5d:ba:5e:90:0e:a3:60:12:ce:1c:17:82:aa:fe:
77:a5:20:fe:23:49:6f:19:ae:cc:16:b7:bd:f6:9f:34:a1:be:
6b:2a:c0:1b:92:8f:cb:c0:61:9d:66:20:3c:82:f8:88:e7:31:
f7:e1:e9:b5:73:80:17:cb:5d:62:fc:50:3b:d1:1a:01:30:3b:
c7:3b:e5:f1:db:72:5d:33:4c:e2:f0:bd:ae:4f:16:3e:1a:ac:
6d:df:e3:78:04:89:01:fb:3f:d8:47:a7:71:e0:1e:d3:03:99:
3f:51:44:0f:6d:43:74:24:2e:39:18:f6:29:42:3a:3d:b7:56:
0a:21:b0:0e:f2:87:b7:c2:42:db:b7:ff:78:64:c9:8c:cd:80:
35:b4:57:06:fe:ee:4e:03:d5:44:09:ad:b4:a4:2a:2d:54:ce:
9a:1e:32:10:55:a5:b1:18:10:96:82:d0:60:c2:11:82:f2:37:
45:9e:c9:87:fb:b9:58:10:a3:9d:6b:74:09:b5:7c:09:83:54:
64:a3:b0:c4:10:05:96:cf:61:ca:89:e6:b1:10:33:ff:d8:d1:
77:0b:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:34 2024 by rpki-client on console-ams.rpki-client.org