Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/La5T8U6FgHfh9yzmccaDZ-EQq3I.roa
File: La5T8U6FgHfh9yzmccaDZ-EQq3I.roa (raw, json)
Hash identifier: e1IvEuwRuT/CgUr1fvz042IT+W+ETjtvAUTc8MUM4to=
Subject key identifier: 2D:AE:53:F1:4E:85:80:77:E1:F7:2C:E6:71:C6:83:67:E1:10:AB:72
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0185DD742F3B95C3A85EE4CB492547A779C8
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/La5T8U6FgHfh9yzmccaDZ-EQq3I.roa
Signing time: Mon 23 Jan 2023 07:07:37 +0000
ROA not before: Mon 23 Jan 2023 07:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3352
IP address blocks: 83.60.0.0/16 maxlen: 16
83.55.0.0/16 maxlen: 16
79.146.0.0/16 maxlen: 16
88.13.0.0/16 maxlen: 16
79.144.0.0/16 maxlen: 16
88.16.0.0/16 maxlen: 16
88.11.0.0/16 maxlen: 16
81.38.0.0/16 maxlen: 16
83.38.0.0/16 maxlen: 16
83.33.0.0/16 maxlen: 16
88.1.0.0/16 maxlen: 16
83.52.0.0/16 maxlen: 16
83.47.0.0/16 maxlen: 16
88.15.0.0/16 maxlen: 16
2.138.0.0/16 maxlen: 16
88.10.0.0/16 maxlen: 16
83.37.0.0/16 maxlen: 16
81.37.0.0/16 maxlen: 16
88.8.0.0/16 maxlen: 16
81.40.0.0/16 maxlen: 16
81.35.0.0/16 maxlen: 16
83.35.0.0/16 maxlen: 16
80.30.0.0/16 maxlen: 16
83.57.0.0/16 maxlen: 16
88.25.0.0/16 maxlen: 16
83.39.0.0/16 maxlen: 16
81.39.0.0/16 maxlen: 16
83.34.0.0/16 maxlen: 16
81.34.0.0/16 maxlen: 16
81.32.0.0/16 maxlen: 16
83.32.0.0/16 maxlen: 16
88.0.0.0/16 maxlen: 16
83.59.0.0/16 maxlen: 16
83.54.0.0/16 maxlen: 16
79.145.0.0/16 maxlen: 16
81.36.0.0/16 maxlen: 16
80.31.0.0/16 maxlen: 16
83.63.0.0/16 maxlen: 16
83.58.0.0/16 maxlen: 16
83.53.0.0/16 maxlen: 16
88.24.0.0/16 maxlen: 16
79.147.0.0/16 maxlen: 16
88.14.0.0/16 maxlen: 16
81.41.0.0/16 maxlen: 16
88.9.0.0/16 maxlen: 16
2.137.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 18 Oct 2023 14:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:74:2f:3b:95:c3:a8:5e:e4:cb:49:25:47:a7:79:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 23 07:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dae53f14e858077e1f72ce671c68367e110ab72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:8d:c7:aa:77:2b:81:76:8b:d5:00:99:a5:
ac:48:a3:72:bd:1b:2a:4d:cd:cb:7a:f5:e8:70:fc:
41:1b:aa:d0:41:5f:9e:18:9c:bf:11:ba:31:78:38:
17:45:1e:be:60:53:3d:d1:86:28:25:e8:41:6c:1e:
cc:0a:9f:74:fc:f8:59:91:a4:48:81:e2:b7:95:39:
57:17:65:ae:b4:c0:5f:d7:de:ba:cb:db:0b:f3:96:
a1:6f:54:b4:30:98:fd:ac:8b:5d:05:b6:59:2e:48:
0d:f3:cf:a1:67:8d:fa:55:8a:05:99:51:20:7c:f5:
f5:02:07:d5:79:59:60:80:f5:bb:34:ca:4d:67:32:
45:4b:b6:b4:71:8b:68:c7:85:96:25:42:99:2f:5c:
96:e3:72:f9:a6:c2:22:76:5d:6c:96:31:fd:eb:4e:
00:57:79:ab:c2:8f:79:89:06:5a:8c:e8:12:e0:b1:
f2:73:ef:ae:5e:97:af:02:de:cc:bb:60:32:3b:2e:
2c:5f:d7:54:67:e5:dd:55:03:47:98:f3:32:f0:6b:
46:c4:fa:d3:71:02:4a:db:c9:36:d3:ff:11:35:8e:
d7:06:21:a2:0d:4b:b9:bc:ef:de:75:7d:bc:5a:84:
ee:71:48:7c:eb:79:7c:94:71:22:f6:29:82:c4:0b:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:53:F1:4E:85:80:77:E1:F7:2C:E6:71:C6:83:67:E1:10:AB:72
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/La5T8U6FgHfh9yzmccaDZ-EQq3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.137.0.0-2.138.255.255
79.144.0.0/14
80.30.0.0/15
81.32.0.0/16
81.34.0.0-81.41.255.255
83.32.0.0/14
83.37.0.0-83.39.255.255
83.47.0.0/16
83.52.0.0/14
83.57.0.0-83.60.255.255
83.63.0.0/16
88.0.0.0/15
88.8.0.0/14
88.13.0.0-88.16.255.255
88.24.0.0/15
Signature Algorithm: sha256WithRSAEncryption
58:16:fe:62:44:09:68:d7:69:98:e4:93:8c:55:90:1e:df:cd:
c2:9d:cd:a2:33:7c:95:4b:0d:b5:ab:49:e6:28:fc:15:8e:f6:
43:14:18:b9:19:b5:a5:30:17:fc:69:31:d7:2f:d1:bd:2c:8d:
a5:43:64:27:f3:0d:90:03:9a:bf:9a:a7:00:ac:f2:ad:b2:38:
0c:c8:49:5d:09:ca:90:56:28:64:41:3c:1c:d4:a1:60:18:b4:
71:d3:2a:3f:47:ef:a3:7b:68:83:63:b8:d5:9b:05:c7:2f:f6:
9f:8b:b3:19:12:d9:49:a0:67:11:7d:70:c9:ae:df:97:cd:c6:
ab:ac:15:35:a7:79:8a:78:37:4c:f3:13:23:72:c0:bd:63:32:
0d:79:59:0f:8b:45:72:c9:9d:4b:07:11:15:dc:1f:e2:fa:c6:
21:46:e9:1a:b9:c3:1b:67:21:78:f0:21:9b:b9:19:17:cc:83:
5e:a5:a2:d3:86:f4:12:d5:ac:47:c2:d5:2a:f8:61:44:5c:ac:
0e:17:a4:f8:8b:3c:99:75:ff:37:e0:7c:99:82:97:eb:30:28:
98:ce:a9:57:2c:40:45:ef:0d:a0:17:56:b6:79:7a:28:ba:b8:
b0:41:ce:59:3b:79:25:aa:77:5f:97:55:e6:07:0a:cc:e2:81:
c8:da:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:05 2024 by rpki-client on console-fra.rpki-client.org