Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/7chBk-JQdmtSnZW6EFvut8cc4uY.roa
File: 7chBk-JQdmtSnZW6EFvut8cc4uY.roa (raw, json)
Hash identifier: Efw12xxkUqRDNQCqvwqxc0pcNdmmj8w7H+bjpCYa9Qw=
Subject key identifier: ED:C8:41:93:E2:50:76:6B:52:9D:95:BA:10:5B:EE:B7:C7:1C:E2:E6
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 018872A9D211BC91DB560EEBBB33829C1488
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/7chBk-JQdmtSnZW6EFvut8cc4uY.roa
Signing time: Wed 31 May 2023 16:35:11 +0000
ROA not before: Wed 31 May 2023 16:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57363
IP address blocks: 91.231.234.0/24 maxlen: 24
91.231.235.0/24 maxlen: 24
91.231.236.0/24 maxlen: 24
91.231.237.0/24 maxlen: 24
91.231.239.0/24 maxlen: 24
91.238.108.0/24 maxlen: 24
91.238.109.0/24 maxlen: 24
91.238.110.0/24 maxlen: 24
185.31.112.0/24 maxlen: 24
185.31.114.0/24 maxlen: 24
185.31.115.0/24 maxlen: 24
91.240.170.0/24 maxlen: 24
91.240.168.0/24 maxlen: 24
91.240.169.0/24 maxlen: 24
151.236.109.0/24 maxlen: 24
151.236.110.0/23 maxlen: 23
151.236.111.0/24 maxlen: 24
151.236.106.0/24 maxlen: 24
151.236.107.0/24 maxlen: 24
151.236.113.0/24 maxlen: 24
151.236.122.0/23 maxlen: 23
151.236.123.0/24 maxlen: 24
151.236.125.0/24 maxlen: 24
151.236.64.0/24 maxlen: 24
151.236.65.0/24 maxlen: 24
151.236.67.0/24 maxlen: 24
151.236.68.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.74.0/24 maxlen: 24
151.236.75.0/24 maxlen: 24
151.236.77.0/24 maxlen: 24
151.236.78.0/24 maxlen: 24
151.236.72.0/24 maxlen: 24
151.236.73.0/24 maxlen: 24
151.236.81.0/24 maxlen: 24
151.236.83.0/24 maxlen: 24
151.236.84.0/24 maxlen: 24
151.236.85.0/24 maxlen: 24
151.236.80.0/24 maxlen: 24
151.236.88.0/24 maxlen: 24
151.236.89.0/24 maxlen: 24
151.236.90.0/24 maxlen: 24
151.236.91.0/24 maxlen: 24
151.236.86.0/24 maxlen: 24
151.236.87.0/24 maxlen: 24
151.236.95.0/24 maxlen: 24
151.236.96.0/24 maxlen: 24
151.236.102.0/24 maxlen: 24
151.236.99.0/24 maxlen: 24
151.236.100.0/24 maxlen: 24
2a02:aec0:3::/48 maxlen: 48
2a02:aec0:7::/48 maxlen: 48
2a02:aec0:8::/48 maxlen: 48
2a02:aec0:1::/48 maxlen: 48
2a02:aec0:5::/48 maxlen: 48
2a02:aec0:2::/48 maxlen: 48
2a02:aec0:9::/48 maxlen: 48
2a02:aec0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:a9:d2:11:bc:91:db:56:0e:eb:bb:33:82:9c:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: May 31 16:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc84193e250766b529d95ba105beeb7c71ce2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:01:c1:b5:ec:90:ee:cf:7e:ce:78:06:4b:
43:90:12:99:24:d5:50:9b:cc:a1:cc:91:82:04:14:
61:99:62:ce:b4:0a:ca:0b:9c:b9:7f:51:ee:b9:d7:
b5:ea:63:04:f2:f2:42:34:fe:bf:27:cd:01:53:52:
7a:2a:c8:4b:5b:54:27:88:9a:d2:9b:9e:3f:de:fc:
0d:2e:4f:9a:56:a4:f5:bd:27:de:54:b5:c9:0b:ae:
e9:f0:e0:10:a0:21:24:1b:7c:9e:f4:8b:48:43:36:
14:96:8a:23:11:b3:17:51:ae:3c:a8:d3:a9:72:e0:
56:1d:9d:aa:4e:80:de:a1:16:5b:17:84:2a:2f:4b:
94:54:8f:a8:57:cd:7d:f6:83:8c:65:77:c3:ac:f9:
6f:1b:bf:7b:f6:a1:a3:e6:3b:e0:58:03:db:66:7b:
37:1d:b5:34:2c:cf:a0:e0:06:e0:3b:9c:02:6f:c1:
c9:18:1b:5c:f1:1d:b5:9e:2e:b0:3e:d7:aa:42:07:
a9:1f:a7:ff:72:0f:cf:43:50:a2:13:ee:c2:a4:e5:
79:63:80:30:c3:d7:8f:22:3a:e6:83:2c:24:15:a3:
95:a3:f8:4b:54:50:0d:a3:83:aa:c7:e5:43:87:4e:
14:f8:de:74:ce:53:8a:bb:0c:27:bc:fa:44:84:78:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:41:93:E2:50:76:6B:52:9D:95:BA:10:5B:EE:B7:C7:1C:E2:E6
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/7chBk-JQdmtSnZW6EFvut8cc4uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.234.0-91.231.237.255
91.231.239.0/24
91.238.108.0-91.238.110.255
91.240.168.0-91.240.170.255
151.236.64.0/23
151.236.67.0-151.236.68.255
151.236.70.0/24
151.236.72.0/22
151.236.77.0-151.236.78.255
151.236.80.0/23
151.236.83.0-151.236.91.255
151.236.95.0-151.236.96.255
151.236.99.0-151.236.100.255
151.236.102.0/24
151.236.106.0/23
151.236.109.0-151.236.111.255
151.236.113.0/24
151.236.122.0/23
151.236.125.0/24
185.31.112.0/24
185.31.114.0/23
IPv6:
2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff
2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:de:69:8d:bc:b7:31:83:b0:a9:94:e9:cd:4d:1a:11:68:80:
f4:e7:42:25:ea:c6:f6:3b:4e:f4:db:32:bd:7b:28:14:ff:be:
5d:03:87:a2:22:e3:40:f2:6d:a0:a4:b3:aa:ea:0b:b8:19:b9:
95:75:fa:14:fa:41:78:4f:9c:10:da:5e:c5:79:08:83:95:33:
62:32:ee:a2:2e:f4:d9:05:fd:a4:52:3b:04:5f:44:9a:b9:ec:
c8:c8:48:cb:b2:be:65:86:8f:91:5f:34:d1:c0:db:d7:b1:b0:
ac:b2:15:cf:f2:06:17:bf:5e:f0:0c:ea:c3:fc:e4:f3:2c:f8:
97:69:da:4d:85:68:38:b6:05:01:8c:c2:8b:e7:20:ea:49:ed:
0d:59:5d:a7:80:11:d3:d7:eb:9e:5b:7e:08:2a:4d:26:44:e6:
82:7a:19:59:e7:18:69:e2:8c:e1:f5:3e:0e:02:46:8e:94:c1:
da:4d:40:74:59:d6:16:17:f5:f3:5b:78:cd:2c:5e:13:b9:6c:
51:7b:d6:d4:97:52:b5:92:4a:17:a2:51:f4:40:a4:a7:4e:ae:
3c:28:00:a4:8c:17:cd:43:1c:48:51:cc:cf:15:21:e2:d5:9d:
98:ca:0c:8b:1d:f6:05:ea:9c:d4:b0:dd:ba:a7:46:b9:4b:e8:
80:03:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:22 2024 by rpki-client on console-ams.rpki-client.org