Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/iKskuA8-YcDt__rSyBP1Faxrg78.roa
File: iKskuA8-YcDt__rSyBP1Faxrg78.roa (raw, json)
Hash identifier: e3vXcx57uZMdq0Jg2mD6xU3JUMCSzwSh0hGo2e+Fxwk=
Subject key identifier: 88:AB:24:B8:0F:3E:61:C0:ED:FF:FA:D2:C8:13:F5:15:AC:6B:83:BF
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0187099D7602B1DBEE2B61CFBD5A50149DBC
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/iKskuA8-YcDt__rSyBP1Faxrg78.roa
Signing time: Wed 22 Mar 2023 13:58:46 +0000
ROA not before: Wed 22 Mar 2023 13:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 213.127.128.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.160.252.0/22 maxlen: 22
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.46.128.0/17 maxlen: 17
62.195.0.0/16 maxlen: 16
212.187.64.0/18 maxlen: 18
62.194.0.0/16 maxlen: 16
62.194.0.0/15 maxlen: 15
213.93.0.0/17 maxlen: 17
213.93.0.0/16 maxlen: 16
212.187.0.0/18 maxlen: 18
212.187.0.0/17 maxlen: 17
80.113.0.0/17 maxlen: 17
80.113.0.0/16 maxlen: 16
213.126.128.0/18 maxlen: 18
213.126.128.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
213.127.0.0/17 maxlen: 17
213.127.0.0/16 maxlen: 16
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.126.192.0/18 maxlen: 18
77.248.0.0/15 maxlen: 15
77.248.0.0/14 maxlen: 14
213.46.0.0/17 maxlen: 17
213.46.0.0/16 maxlen: 16
24.132.128.0/17 maxlen: 17
80.85.32.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
89.99.0.0/16 maxlen: 16
217.105.224.0/20 maxlen: 20
217.105.224.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
217.104.192.0/18 maxlen: 18
89.98.0.0/16 maxlen: 16
89.98.0.0/15 maxlen: 15
213.124.160.0/20 maxlen: 20
213.124.160.0/19 maxlen: 19
213.124.176.0/20 maxlen: 20
217.104.128.0/18 maxlen: 18
217.104.128.0/17 maxlen: 17
213.124.192.0/19 maxlen: 19
213.124.192.0/18 maxlen: 18
24.132.0.0/17 maxlen: 17
24.132.0.0/16 maxlen: 16
217.105.32.0/19 maxlen: 19
178.85.0.0/16 maxlen: 16
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
31.151.0.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
95.97.0.0/16 maxlen: 16
178.84.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
31.151.128.0/17 maxlen: 17
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
217.63.160.0/19 maxlen: 19
212.178.48.0/20 maxlen: 20
185.137.202.0/23 maxlen: 23
185.137.200.0/23 maxlen: 23
185.137.200.0/22 maxlen: 22
80.57.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.0.0/16 maxlen: 16
95.96.0.0/16 maxlen: 16
95.96.0.0/15 maxlen: 15
62.163.128.0/17 maxlen: 17
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
217.103.128.0/17 maxlen: 17
212.83.80.0/20 maxlen: 20
80.56.0.0/16 maxlen: 16
80.56.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
217.102.64.0/18 maxlen: 18
217.102.0.0/18 maxlen: 18
217.102.0.0/17 maxlen: 17
46.129.0.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.128.0/17 maxlen: 17
62.163.0.0/17 maxlen: 17
62.163.0.0/16 maxlen: 16
81.175.96.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.0.0/19 maxlen: 19
62.108.16.0/20 maxlen: 20
92.108.0.0/15 maxlen: 15
92.108.0.0/14 maxlen: 14
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
185.94.92.0/22 maxlen: 22
81.175.64.0/19 maxlen: 19
81.175.64.0/18 maxlen: 18
77.250.0.0/15 maxlen: 15
2a02:a200::/28 maxlen: 28
2a02:a200::/27 maxlen: 27
2a03:4aa0::/29 maxlen: 29
2a02:a210::/28 maxlen: 28
Validation: Failed, certificate revoked on Thu 23 Mar 2023 01:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:9d:76:02:b1:db:ee:2b:61:cf:bd:5a:50:14:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 22 13:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ab24b80f3e61c0edfffad2c813f515ac6b83bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:4f:4f:25:81:b2:87:b4:58:90:87:d3:c0:
9d:c3:34:28:67:d7:63:fc:29:01:83:61:c7:cb:a2:
a1:5d:36:d2:81:5c:01:a0:e2:ee:19:c0:7b:5d:39:
02:d1:cb:0e:9a:12:4f:6a:87:ff:e5:20:07:bd:29:
a8:d6:70:99:bc:1f:07:c0:cc:5d:95:00:01:89:7b:
55:e6:a9:d8:9d:1c:c7:e3:bb:e5:df:78:26:c8:47:
9c:85:c8:30:4d:30:f6:c9:c1:44:5c:ce:26:68:ff:
6a:a9:12:91:84:06:8f:6a:f0:d0:68:76:75:ff:db:
2d:82:0c:01:d8:c5:e3:b9:6d:92:69:66:b1:d3:53:
e4:8c:5d:43:d8:63:52:05:91:8b:80:a8:5c:05:ad:
0f:26:56:e8:87:6a:c8:bc:7a:17:f9:cc:4b:3b:1b:
03:69:e0:9b:9c:6b:80:03:3d:2d:d5:40:44:34:27:
12:25:db:39:f8:9e:0b:54:79:06:cc:81:ef:4f:1c:
fd:36:95:3d:b0:19:f8:ad:56:b0:38:81:89:ed:d7:
f0:ba:0e:e8:32:ec:d7:ce:ac:f3:74:d5:e9:9e:a1:
4f:71:98:06:df:03:67:29:dc:99:d5:83:c0:f3:2d:
44:74:c1:59:65:f1:e6:21:f6:cc:fd:42:d0:95:a4:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:24:B8:0F:3E:61:C0:ED:FF:FA:D2:C8:13:F5:15:AC:6B:83:BF
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/iKskuA8-YcDt__rSyBP1Faxrg78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
81.175.64.0/18
89.98.0.0/15
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
IPv6:
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:d9:1a:b9:f3:05:a0:f2:a3:66:66:3d:58:52:cd:d8:9d:0d:
0f:80:39:71:28:2a:3d:9d:1b:31:04:ad:38:80:5a:a3:74:f7:
94:2a:d7:a4:aa:44:0b:6c:8a:78:77:bf:1e:fd:5c:73:0e:a8:
d9:17:18:4d:60:a1:87:ad:12:f8:cc:e9:d0:91:25:68:c8:2f:
54:94:7b:d3:93:49:a6:2b:e5:e9:d6:ee:69:59:87:b0:b3:90:
0b:55:f8:d6:db:ee:7f:f5:8a:e9:aa:31:4a:9b:4f:19:4c:ba:
a8:30:64:00:87:da:36:79:00:19:26:23:57:ad:19:35:f3:84:
81:40:41:7c:ec:61:52:2f:fa:f4:2f:27:e1:20:09:86:57:b2:
64:4a:17:b2:0f:1b:f2:01:01:a1:f5:1a:60:ed:69:c1:cf:f8:
39:de:11:76:66:c4:61:3a:fd:39:06:b5:1c:a4:cd:c9:ed:a7:
47:dc:be:a8:1f:ec:a8:d1:3c:e7:1e:b7:0a:7e:11:68:61:71:
c2:db:52:2c:57:ca:ff:4c:24:ad:bc:5c:04:93:70:20:7e:28:
98:6f:80:d1:96:81:e8:d3:4c:de:2e:29:ba:24:17:12:5a:fa:
13:06:9e:ce:ae:48:3f:f5:53:66:34:5a:2c:58:24:5d:2b:8e:
aa:f6:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org