Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/3t-PKqN-RbzFe3WgwNKJf2BcNek.roa
File: 3t-PKqN-RbzFe3WgwNKJf2BcNek.roa (raw, json)
Hash identifier: eyAy66EqWw8LxgO6VaCkJ2lRXsbUTwCbxg4trFnaoOU=
Subject key identifier: DE:DF:8F:2A:A3:7E:45:BC:C5:7B:75:A0:C0:D2:89:7F:60:5C:35:E9
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 01856DC1DB4272972126C35BC43A30FE54FA
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/3t-PKqN-RbzFe3WgwNKJf2BcNek.roa
Signing time: Sun 01 Jan 2023 14:34:59 +0000
ROA not before: Sun 01 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25374
IP address blocks: 195.39.213.0/24 maxlen: 24
195.39.212.0/24 maxlen: 24
195.39.212.0/23 maxlen: 23
109.199.224.0/24 maxlen: 24
109.199.224.0/19 maxlen: 19
109.199.226.0/24 maxlen: 24
109.199.225.0/24 maxlen: 24
109.199.233.0/24 maxlen: 24
109.199.232.0/24 maxlen: 24
109.199.228.0/24 maxlen: 24
109.199.227.0/24 maxlen: 24
109.199.231.0/24 maxlen: 24
109.199.230.0/24 maxlen: 24
109.199.229.0/24 maxlen: 24
109.199.235.0/24 maxlen: 24
109.199.234.0/24 maxlen: 24
109.199.238.0/24 maxlen: 32
109.199.237.0/24 maxlen: 24
109.199.236.0/24 maxlen: 24
109.199.240.0/24 maxlen: 24
109.199.239.0/24 maxlen: 24
109.199.246.0/24 maxlen: 24
109.199.242.0/24 maxlen: 24
109.199.241.0/24 maxlen: 24
109.199.245.0/24 maxlen: 24
109.199.244.0/24 maxlen: 24
109.199.243.0/24 maxlen: 24
109.199.249.0/24 maxlen: 24
109.199.248.0/24 maxlen: 24
109.199.247.0/24 maxlen: 24
109.199.251.0/24 maxlen: 32
109.199.252.0/24 maxlen: 24
109.199.250.0/24 maxlen: 24
109.199.253.0/24 maxlen: 24
109.199.255.0/24 maxlen: 24
109.199.254.0/24 maxlen: 24
195.24.90.0/24 maxlen: 24
195.24.89.0/24 maxlen: 24
195.24.88.0/24 maxlen: 24
195.24.88.0/21 maxlen: 21
195.24.91.0/24 maxlen: 24
195.24.95.0/24 maxlen: 24
195.24.94.0/24 maxlen: 24
195.24.93.0/24 maxlen: 24
195.24.92.0/24 maxlen: 24
185.2.209.0/24 maxlen: 24
185.2.211.0/24 maxlen: 24
185.2.210.0/24 maxlen: 24
185.2.208.0/22 maxlen: 22
185.2.208.0/24 maxlen: 24
93.183.148.0/24 maxlen: 32
93.183.147.0/24 maxlen: 24
93.183.146.0/24 maxlen: 24
93.183.151.0/24 maxlen: 24
93.183.150.0/24 maxlen: 24
93.183.149.0/24 maxlen: 24
93.183.152.0/24 maxlen: 24
93.183.158.0/24 maxlen: 24
93.183.157.0/24 maxlen: 24
93.183.156.0/24 maxlen: 24
93.183.159.0/24 maxlen: 24
93.183.155.0/24 maxlen: 24
93.183.154.0/24 maxlen: 24
93.183.153.0/24 maxlen: 24
93.183.162.0/24 maxlen: 24
93.183.161.0/24 maxlen: 24
93.183.160.0/24 maxlen: 24
93.183.165.0/24 maxlen: 24
93.183.164.0/24 maxlen: 24
93.183.163.0/24 maxlen: 24
93.183.166.0/24 maxlen: 24
93.183.172.0/24 maxlen: 24
93.183.171.0/24 maxlen: 24
93.183.170.0/24 maxlen: 24
93.183.169.0/24 maxlen: 24
93.183.168.0/24 maxlen: 24
93.183.167.0/24 maxlen: 24
93.183.176.0/24 maxlen: 24
93.183.175.0/24 maxlen: 24
93.183.174.0/24 maxlen: 24
93.183.173.0/24 maxlen: 24
93.183.179.0/24 maxlen: 24
93.183.177.0/24 maxlen: 24
93.183.178.0/24 maxlen: 32
93.183.186.0/24 maxlen: 24
93.183.185.0/24 maxlen: 24
93.183.184.0/24 maxlen: 24
93.183.180.0/24 maxlen: 32
93.183.183.0/24 maxlen: 24
93.183.182.0/24 maxlen: 24
93.183.181.0/24 maxlen: 24
93.183.191.0/24 maxlen: 24
93.183.190.0/24 maxlen: 24
93.183.189.0/24 maxlen: 24
93.183.188.0/24 maxlen: 24
93.183.187.0/24 maxlen: 24
93.183.131.0/24 maxlen: 32
93.183.130.0/24 maxlen: 24
93.183.129.0/24 maxlen: 24
93.183.128.0/18 maxlen: 18
93.183.128.0/24 maxlen: 24
93.183.132.0/24 maxlen: 24
93.183.137.0/24 maxlen: 24
93.183.136.0/24 maxlen: 24
93.183.135.0/24 maxlen: 24
93.183.139.0/24 maxlen: 24
93.183.138.0/24 maxlen: 24
93.183.134.0/24 maxlen: 24
93.183.133.0/24 maxlen: 24
93.183.144.0/24 maxlen: 24
93.183.143.0/24 maxlen: 24
93.183.142.0/24 maxlen: 32
93.183.145.0/24 maxlen: 24
93.183.141.0/24 maxlen: 32
93.183.140.0/24 maxlen: 24
2a02:4dc0::/48 maxlen: 48
2a02:4dc0::/36 maxlen: 36
2a02:4dc0:1000::/36 maxlen: 36
2a02:4dc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:db:42:72:97:21:26:c3:5b:c4:3a:30:fe:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jan 1 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dedf8f2aa37e45bcc57b75a0c0d2897f605c35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:76:88:24:9a:2b:b6:37:d0:32:04:bb:50:
56:00:5c:8b:f8:c8:8d:57:37:29:20:86:c2:48:fd:
31:f5:35:6a:03:be:d9:02:ac:3c:ad:99:75:f5:75:
4e:b5:26:85:6f:93:21:b3:00:e0:84:64:e4:12:8c:
ea:cd:5e:3a:de:89:7a:26:81:9e:15:33:1a:22:53:
0c:05:4f:e4:22:be:8a:00:4d:19:54:f5:a4:81:02:
58:ad:2e:1f:6c:bc:1e:1c:33:0c:43:42:d5:09:46:
9d:c8:93:5d:96:41:49:59:a8:92:08:19:2b:09:b6:
b5:bc:80:90:ab:57:70:88:22:f4:46:fb:31:8f:61:
35:9d:80:09:d7:ea:17:56:52:98:ae:ec:6b:cb:f0:
f0:db:06:e0:20:2d:a4:30:eb:2d:10:50:99:ee:ce:
88:0c:7e:0f:7b:13:64:f0:a4:ef:a8:25:66:3b:ac:
60:0b:d6:8e:5b:39:48:df:71:7e:43:5c:c9:c3:61:
5a:f1:e3:83:2f:0d:f3:16:d1:c2:b6:7e:1c:0b:61:
73:93:f8:05:e2:20:42:c1:bb:99:a9:bb:5a:18:87:
0a:eb:12:b1:17:5c:83:fb:63:c4:bb:ba:73:26:f3:
fa:b8:bf:2b:45:eb:5a:30:b6:36:79:19:24:f0:da:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:8F:2A:A3:7E:45:BC:C5:7B:75:A0:C0:D2:89:7F:60:5C:35:E9
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/3t-PKqN-RbzFe3WgwNKJf2BcNek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.128.0/18
109.199.224.0/19
185.2.208.0/22
195.24.88.0/21
195.39.212.0/23
IPv6:
2a02:4dc0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:71:68:b1:fe:04:ce:10:60:e4:30:49:6e:14:0f:d1:38:71:
a7:f8:8b:0c:3c:f0:38:71:62:86:a2:f9:67:c8:51:13:66:20:
22:ad:ce:ac:e6:26:5b:67:92:b6:90:e1:0b:84:28:66:15:50:
9b:d4:18:fb:14:d8:26:aa:41:56:c7:db:cb:1c:97:8e:e5:91:
f2:4d:df:ac:ca:a1:c2:12:e9:46:dd:63:4f:99:ee:17:80:22:
df:7e:2c:a3:98:f0:2b:4f:1d:b0:3a:06:b0:f0:b9:23:10:11:
ee:26:00:c8:e2:c4:8c:75:c1:87:86:be:1f:5d:5b:96:60:97:
65:ce:26:d9:c7:2e:32:dd:db:37:70:94:d2:f2:e2:f5:e7:a6:
a2:33:72:d6:ff:21:5b:88:90:3c:41:d6:a1:32:c0:fc:2f:5e:
f1:69:ce:ad:7b:0d:d7:5c:f4:30:e4:ab:7c:ed:26:b3:ba:ac:
b6:94:7c:38:73:31:90:36:b5:ab:79:1d:62:02:d8:af:09:77:
36:ea:4d:67:89:0f:56:56:72:ab:c4:cb:f1:68:4d:88:55:a0:
b4:43:c9:a3:92:e9:e5:1f:09:ea:5c:d3:c3:2e:b5:38:58:70:
9c:96:2c:1c:be:47:28:4e:dd:14:11:ef:3a:ab:c7:6e:13:a0:
ea:83:fb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:42 2024 by rpki-client on console-fra.rpki-client.org