Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/y4qJDq1HENMioyIvwrwFhaqZpN4.roa
File: y4qJDq1HENMioyIvwrwFhaqZpN4.roa (raw, json)
Hash identifier: JAoJSgEPRpfo9UqVJ3j27PKYeOoUiatQyALuO3yB9Ck=
Subject key identifier: CB:8A:89:0E:AD:47:10:D3:22:A3:22:2F:C2:BC:05:85:AA:99:A4:DE
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018C67A3059D83B2EB2B1D969B41B0A5868C
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/y4qJDq1HENMioyIvwrwFhaqZpN4.roa
Signing time: Thu 14 Dec 2023 09:23:06 +0000
ROA not before: Thu 14 Dec 2023 09:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8648
IP address blocks: 193.22.255.0/24 maxlen: 24
185.80.92.0/22 maxlen: 24
82.141.0.0/18 maxlen: 24
185.137.168.0/22 maxlen: 24
212.110.96.0/19 maxlen: 24
128.127.64.0/21 maxlen: 24
195.225.133.0/24 maxlen: 24
45.87.136.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
94.154.148.0/22 maxlen: 24
93.90.176.0/20 maxlen: 24
195.42.120.0/23 maxlen: 24
91.203.212.0/22 maxlen: 24
109.237.128.0/20 maxlen: 24
195.62.96.0/19 maxlen: 24
195.82.152.0/23 maxlen: 24
84.254.120.0/24 maxlen: 24
193.25.114.0/23 maxlen: 24
195.110.42.0/23 maxlen: 24
185.211.60.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
195.5.120.0/23 maxlen: 24
185.32.116.0/22 maxlen: 24
89.22.96.0/19 maxlen: 24
185.143.164.0/22 maxlen: 24
194.116.186.0/23 maxlen: 24
5.11.48.0/21 maxlen: 24
91.206.142.0/23 maxlen: 24
91.220.49.0/24 maxlen: 24
194.145.226.0/24 maxlen: 24
213.146.96.0/19 maxlen: 24
193.38.156.0/22 maxlen: 24
109.75.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
178.250.168.0/21 maxlen: 24
37.218.248.0/21 maxlen: 24
185.117.248.0/22 maxlen: 24
141.101.32.0/21 maxlen: 24
185.84.80.0/23 maxlen: 24
185.84.80.0/22 maxlen: 24
185.84.82.0/24 maxlen: 24
178.20.96.0/21 maxlen: 24
195.34.82.0/23 maxlen: 24
192.162.84.0/22 maxlen: 24
91.226.88.0/22 maxlen: 24
31.47.240.0/20 maxlen: 24
46.243.88.0/21 maxlen: 24
81.88.16.0/20 maxlen: 24
185.51.8.0/22 maxlen: 24
185.158.212.0/22 maxlen: 24
81.88.27.0/24 maxlen: 24
185.3.232.0/22 maxlen: 24
81.88.32.0/20 maxlen: 24
5.44.96.0/20 maxlen: 24
2a0e:fe80::/29 maxlen: 48
2a04:4cc0::/29 maxlen: 48
2a01:aee0::/32 maxlen: 48
2a02:2b80::/32 maxlen: 48
2a02:a60::/32 maxlen: 48
2a0b:6340::/29 maxlen: 48
2a04:ff40::/29 maxlen: 48
2a00:5300::/32 maxlen: 48
2a00:12c0::/29 maxlen: 48
2a02:248::/32 maxlen: 48
2a0d:6940::/29 maxlen: 48
2a00:fa40::/32 maxlen: 48
2a0b:2a40::/29 maxlen: 48
2001:880::/32 maxlen: 32
2a01:64c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Dec 2023 15:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:a3:05:9d:83:b2:eb:2b:1d:96:9b:41:b0:a5:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Dec 14 09:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb8a890ead4710d322a3222fc2bc0585aa99a4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:c6:2d:e0:e4:50:66:09:a0:16:a7:bf:5a:
4a:ac:dc:2e:a9:37:0f:a0:82:3d:4f:24:97:59:5b:
10:00:c2:01:ba:80:7e:30:75:c3:06:f0:8d:af:25:
ec:73:05:f0:3a:c5:78:1e:f0:0c:1b:04:c5:ea:99:
a4:6a:e2:a0:90:5e:5d:f3:f9:07:11:99:c2:6c:c9:
22:05:ed:56:0d:74:d9:7b:7a:e0:8a:76:ba:e9:fa:
f8:9a:2e:3c:65:55:bd:05:ce:65:03:ae:98:5a:a3:
59:ad:f6:bc:a7:6c:bc:71:d6:b3:3a:c3:d9:55:9c:
38:b3:99:49:ea:15:8f:62:85:e9:fa:b5:34:80:fc:
64:27:5d:fc:ba:22:ad:f0:34:2c:c7:dd:b5:e9:5e:
0c:5e:6d:64:00:93:94:68:36:74:92:a3:87:d5:0d:
0c:f8:15:b8:01:83:7d:da:05:db:a1:be:8f:8c:7e:
96:fd:d9:45:76:22:1f:da:44:5a:c5:f2:54:ab:8a:
7e:0a:a5:d7:9a:35:97:65:c1:de:b0:c4:8d:ae:9a:
30:4a:80:00:17:43:4f:54:e6:c2:32:c6:5b:42:da:
fc:7d:d4:7c:27:a6:5d:3d:c1:c3:5a:a9:ff:30:11:
86:10:18:41:9a:2c:1f:e0:9a:fc:71:e0:9e:9e:6d:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:89:0E:AD:47:10:D3:22:A3:22:2F:C2:BC:05:85:AA:99:A4:DE
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/y4qJDq1HENMioyIvwrwFhaqZpN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
5.44.96.0/20
31.47.240.0/20
37.218.248.0/21
45.87.136.0/22
46.243.88.0/21
81.88.16.0-81.88.47.255
82.141.0.0/18
84.254.120.0/24
89.22.96.0/19
91.203.108.0/22
91.203.212.0/22
91.206.142.0/23
91.220.49.0/24
91.226.88.0/22
93.90.176.0/20
93.190.64.0/21
94.154.148.0/22
95.130.248.0/21
109.75.176.0/20
109.237.128.0/20
128.127.64.0/21
141.101.32.0/21
178.20.96.0/21
178.250.168.0/21
185.3.232.0/22
185.32.116.0/22
185.51.8.0/22
185.65.88.0/22
185.80.92.0/22
185.84.80.0/22
185.117.248.0/22
185.137.168.0/22
185.143.164.0/22
185.158.212.0/22
185.207.228.0/22
185.211.60.0/22
192.162.84.0/22
193.22.255.0/24
193.25.114.0/23
193.38.156.0/22
194.116.186.0/23
194.145.226.0/24
195.5.120.0/23
195.34.82.0/23
195.42.120.0/23
195.62.96.0/19
195.82.152.0/23
195.110.42.0/23
195.225.133.0/24
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a00:12c0::/29
2a00:5300::/32
2a00:fa40::/32
2a01:64c0::/32
2a01:aee0::/32
2a02:248::/32
2a02:a60::/32
2a02:2b80::/32
2a04:4cc0::/29
2a04:ff40::/29
2a0b:2a40::/29
2a0b:6340::/29
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:6f:da:4b:71:ee:b6:18:9d:a7:a8:a7:98:63:e8:09:6f:0c:
05:cc:1f:bd:4c:8d:7d:1c:f6:fc:75:cf:38:0b:25:a9:c5:b9:
34:b6:74:be:3b:62:b7:50:c5:10:76:3f:b0:d7:47:c0:db:04:
ab:88:f9:bf:02:32:79:7d:cf:2d:96:7c:16:9f:a8:fa:14:a9:
d2:d0:d4:e5:bb:75:3f:21:3c:5d:9c:5d:9c:ce:d9:eb:a8:6f:
52:ab:00:fe:49:de:8e:a9:da:49:c5:cd:de:f8:ee:9d:81:1e:
5d:41:e5:87:44:26:40:65:e5:b1:23:2b:df:84:09:d1:26:de:
ac:03:a6:25:88:5a:76:6e:df:da:5c:16:8c:66:fd:2e:e1:e9:
1e:45:76:7d:d2:a6:b6:7e:48:3b:51:0f:e0:6c:b3:91:b6:c9:
b5:95:f9:e4:7e:75:14:9d:5d:10:de:e8:12:4a:80:3b:53:4e:
81:75:77:2f:85:45:66:c3:ee:24:88:fc:ff:ac:59:af:c4:79:
8e:93:f7:5a:42:1a:24:0f:94:61:4a:06:ba:4e:d4:54:10:ac:
1a:88:20:f0:38:db:02:46:6e:6a:1c:a3:48:99:1c:bd:86:1b:
a1:7b:33:7f:3a:42:0c:f7:d3:cf:23:aa:97:da:f9:2b:41:a2:
96:75:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org