Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/RK-OHaYBcBzFgt-nFMyZsyfgWUY.roa
File: RK-OHaYBcBzFgt-nFMyZsyfgWUY.roa (raw, json)
Hash identifier: 91j21QjxdylCZ0XMvQGumOicOknoj3/ws4PnavIUrxA=
Subject key identifier: 44:AF:8E:1D:A6:01:70:1C:C5:82:DF:A7:14:CC:99:B3:27:E0:59:46
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B85AF626CF608BE13F7D9F24E5A74285
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/RK-OHaYBcBzFgt-nFMyZsyfgWUY.roa
Signing time: Tue 25 Apr 2023 12:19:41 +0000
ROA not before: Tue 25 Apr 2023 12:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 213.198.28.0/24 maxlen: 24
213.198.30.0/24 maxlen: 24
213.198.31.0/24 maxlen: 24
213.198.51.0/24 maxlen: 24
213.198.54.0/23 maxlen: 24
213.198.65.0/24 maxlen: 24
62.73.162.0/23 maxlen: 23
213.198.71.0/24 maxlen: 24
62.73.161.0/24 maxlen: 24
62.73.160.0/19 maxlen: 19
213.198.70.0/24 maxlen: 24
62.73.160.0/24 maxlen: 29
213.198.75.0/24 maxlen: 24
213.198.73.128/25 maxlen: 25
213.198.78.0/24 maxlen: 24
213.198.74.0/24 maxlen: 24
213.198.4.0/24 maxlen: 24
213.198.0.0/24 maxlen: 24
213.198.2.0/24 maxlen: 24
213.198.3.0/24 maxlen: 24
213.198.8.0/23 maxlen: 24
213.198.6.0/23 maxlen: 24
213.198.10.0/23 maxlen: 24
213.198.5.0/24 maxlen: 24
213.198.24.0/23 maxlen: 24
213.198.83.0/25 maxlen: 25
213.198.85.0/24 maxlen: 24
213.198.79.0/24 maxlen: 24
213.198.82.0/25 maxlen: 25
213.198.84.0/24 maxlen: 24
213.198.26.0/29 maxlen: 29
213.198.91.0/24 maxlen: 24
213.198.90.0/24 maxlen: 24
213.198.88.0/24 maxlen: 24
213.198.93.0/24 maxlen: 24
213.198.97.0/24 maxlen: 24
213.198.98.0/24 maxlen: 24
213.198.96.0/24 maxlen: 24
213.198.99.0/24 maxlen: 24
213.198.1.32/27 maxlen: 27
213.198.26.16/29 maxlen: 29
213.130.32.0/19 maxlen: 19
213.198.86.160/27 maxlen: 27
213.198.94.96/27 maxlen: 27
212.119.0.0/19 maxlen: 19
213.198.26.8/29 maxlen: 29
213.198.86.64/26 maxlen: 26
213.198.86.192/26 maxlen: 26
213.198.86.0/26 maxlen: 26
213.198.95.64/26 maxlen: 26
213.198.1.0/27 maxlen: 27
213.198.86.128/27 maxlen: 27
5.158.208.0/21 maxlen: 21
5.158.212.0/24 maxlen: 24
5.158.210.0/24 maxlen: 24
5.158.211.0/24 maxlen: 24
5.158.208.0/23 maxlen: 24
5.158.214.0/24 maxlen: 24
5.158.215.0/24 maxlen: 24
2001:728:2807::/48 maxlen: 64
2001:728:4000::/38 maxlen: 64
2001:728:4400::/38 maxlen: 64
2001:728:2c00::/38 maxlen: 64
2001:728:2400::/38 maxlen: 64
2001:728:c00::/38 maxlen: 64
2001:728::/32 maxlen: 32
2001:728:2808::/48 maxlen: 64
2001:728:2806::/48 maxlen: 64
2001:728:2809::/48 maxlen: 64
2001:728:1010:300::/56 maxlen: 64
Validation: Failed, certificate revoked on Tue 25 Apr 2023 12:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:5a:f6:26:cf:60:8b:e1:3f:7d:9f:24:e5:a7:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 12:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44af8e1da601701cc582dfa714cc99b327e05946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:77:51:82:86:2d:52:16:dd:88:33:83:d5:6c:
88:9b:f7:47:ad:8d:4a:bd:27:0b:61:2b:10:cd:1a:
21:c0:fa:44:a3:39:4b:9e:90:80:00:a7:ff:ac:ad:
eb:bf:56:68:54:62:a0:68:95:13:7f:f9:a9:f9:6c:
c0:5a:7f:91:10:f3:1f:29:96:3d:45:ec:da:88:97:
bb:3f:bf:4d:9c:b7:4b:8d:41:d1:7e:d4:57:9d:d0:
89:47:c0:c8:cc:75:f8:bd:04:6d:8b:44:2e:38:e7:
64:b8:3b:a1:3c:ed:d5:09:ae:7e:8a:44:b2:c9:0f:
0b:8a:05:4d:b6:0b:82:03:bc:28:08:54:be:43:be:
1d:61:0b:50:1a:8f:96:52:6b:03:7d:e2:fc:6f:e4:
05:8e:47:80:ec:0c:a6:f2:b4:92:89:23:d7:bc:1a:
51:9b:06:9b:15:20:cf:9b:7a:61:3c:75:2b:12:f1:
2b:42:1d:3a:6a:10:4d:60:0d:fe:18:9d:a4:b3:7e:
7c:64:f2:90:26:d6:56:cf:ce:a6:90:e3:52:e1:c7:
21:cc:80:75:cb:4f:49:3c:fa:0a:7e:98:1c:af:35:
bf:0a:85:1d:f2:52:e4:ef:60:ee:9d:76:c1:32:54:
10:62:12:6f:c2:a5:f2:70:c0:cd:97:d9:fa:86:29:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AF:8E:1D:A6:01:70:1C:C5:82:DF:A7:14:CC:99:B3:27:E0:59:46
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/RK-OHaYBcBzFgt-nFMyZsyfgWUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.208.0/21
62.73.160.0/19
212.119.0.0/19
213.130.32.0/19
213.198.0.0-213.198.1.63
213.198.2.0-213.198.11.255
213.198.24.0-213.198.26.23
213.198.28.0/24
213.198.30.0/23
213.198.51.0/24
213.198.54.0/23
213.198.65.0/24
213.198.70.0/23
213.198.73.128-213.198.75.255
213.198.78.0/23
213.198.82.0/25
213.198.83.0/25
213.198.84.0-213.198.86.255
213.198.88.0/24
213.198.90.0/23
213.198.93.0/24
213.198.94.96/27
213.198.95.64/26
213.198.96.0/22
IPv6:
2001:728::/32
Signature Algorithm: sha256WithRSAEncryption
3f:c9:3d:83:3c:71:13:2b:ba:cc:69:f7:30:00:e8:70:93:e0:
7c:31:d7:c5:cf:45:a4:c2:8d:0a:d1:6f:99:7d:d3:c1:3f:a9:
51:f6:1d:3b:e2:29:44:3a:a0:50:9f:f8:1c:56:20:b5:c5:eb:
15:4f:c4:65:4e:b0:f8:e8:15:c4:9c:6d:60:38:92:d5:36:ca:
43:4c:6c:9e:f6:40:14:4a:a1:1a:97:a0:47:d6:16:64:c1:25:
5e:8e:ea:f5:6c:96:33:87:29:8c:4b:07:b9:cf:a7:0c:cd:d0:
d9:6f:55:8e:13:28:95:3d:5e:5a:49:44:ce:09:2f:8e:66:d8:
ad:17:f9:ea:ff:d2:96:b8:6d:a3:da:06:57:31:47:ee:3b:f2:
40:af:85:f3:cd:59:ea:1a:7e:68:c4:c3:b0:b1:7f:f2:ea:f9:
ea:bd:2d:36:d5:4d:2d:e9:11:19:ff:59:23:e1:64:32:b8:70:
c1:97:48:bb:ef:5c:05:0c:b2:d5:ab:22:9e:16:d0:c8:65:1e:
7c:fd:6e:fe:87:62:91:a5:2d:a9:30:5f:62:de:ae:af:c2:52:
ff:81:df:32:30:22:f2:b3:e9:2a:51:3c:b5:0b:4d:96:72:e7:
72:3c:29:4e:4a:3f:14:2c:3b:ee:fe:e0:f4:6d:00:84:82:16:
1f:db:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:03 2024 by rpki-client on console-ams.rpki-client.org