Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/R8jXfAW-Qzub3HbTh-EU0mugeo8.roa
File: R8jXfAW-Qzub3HbTh-EU0mugeo8.roa (raw, json)
Hash identifier: GM+hD376ex5xc3aqKI7Z6yzGpAfLaHUZXTrVOqu5uDM=
Subject key identifier: 47:C8:D7:7C:05:BE:43:3B:9B:DC:76:D3:87:E1:14:D2:6B:A0:7A:8F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01883288521463F47B452DD57B47C82E3756
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/R8jXfAW-Qzub3HbTh-EU0mugeo8.roa
Signing time: Fri 19 May 2023 05:42:54 +0000
ROA not before: Fri 19 May 2023 05:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12716
IP address blocks: 37.63.97.0/24 maxlen: 24
37.63.98.0/24 maxlen: 24
151.251.254.0/24 maxlen: 24
37.63.96.0/24 maxlen: 24
151.251.255.0/24 maxlen: 24
37.63.96.0/22 maxlen: 24
37.63.99.0/24 maxlen: 24
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
151.251.240.0/24 maxlen: 24
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.245.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
151.251.243.0/24 maxlen: 24
151.251.246.0/24 maxlen: 24
151.251.241.0/24 maxlen: 24
151.251.244.0/24 maxlen: 24
151.251.242.0/24 maxlen: 24
151.251.253.0/24 maxlen: 24
151.251.248.0/24 maxlen: 24
151.251.251.0/24 maxlen: 24
151.251.249.0/24 maxlen: 24
151.251.252.0/24 maxlen: 24
151.251.247.0/24 maxlen: 24
151.251.250.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
37.63.20.0/22 maxlen: 24
37.63.24.0/22 maxlen: 22
37.63.28.0/22 maxlen: 24
62.204.154.0/23 maxlen: 23
37.63.32.0/22 maxlen: 24
151.251.121.0/24 maxlen: 24
85.118.64.0/22 maxlen: 22
85.118.71.0/24 maxlen: 24
85.118.68.0/23 maxlen: 24
213.226.17.0/24 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.74.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
213.226.19.0/24 maxlen: 24
185.151.156.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.80.0/22 maxlen: 22
213.226.36.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.63.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:88:52:14:63:f4:7b:45:2d:d5:7b:47:c8:2e:37:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 19 05:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c8d77c05be433b9bdc76d387e114d26ba07a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:dd:8a:6c:22:e4:79:82:6e:d9:5a:b6:df:
7a:88:a6:f1:90:e9:11:cf:fd:f0:fd:20:07:06:a2:
8d:78:23:12:18:ea:5d:c5:38:91:cb:21:bb:27:93:
85:6a:53:c2:6e:ae:b1:37:54:dd:25:93:fa:c2:d0:
f1:17:c5:78:33:0e:67:98:ff:d0:2f:5d:45:bd:0d:
9a:7b:1c:c6:e8:61:3a:a4:ff:ac:24:31:12:64:e0:
b0:70:3c:0a:db:fa:91:76:ce:94:1d:32:a8:ff:87:
c7:1b:4a:c2:e9:82:fb:37:1b:5a:ae:cb:9a:91:2a:
a2:1b:34:2f:da:8b:43:93:40:3b:6d:e7:32:34:eb:
9f:9f:7c:c8:1e:73:a1:fe:10:5c:7d:a0:3b:90:4a:
2c:6d:6f:09:85:c3:b0:62:b1:d2:1d:97:97:58:bd:
fa:cd:9e:f0:a3:2d:34:9c:a4:7f:d9:84:f2:f2:2b:
28:1c:f0:d3:eb:33:fa:d1:5d:93:30:c9:75:ae:a7:
e3:7a:9b:55:f0:02:9a:c3:ef:3c:97:07:1c:3e:cf:
62:ae:a2:1d:00:7f:4f:91:ec:cc:60:35:e1:90:ca:
48:a5:83:98:e7:28:55:89:85:65:32:4c:5b:cb:44:
d6:d5:da:cf:83:05:99:24:76:30:e9:ea:87:0b:23:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:D7:7C:05:BE:43:3B:9B:DC:76:D3:87:E1:14:D2:6B:A0:7A:8F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/R8jXfAW-Qzub3HbTh-EU0mugeo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.35.255
37.63.96.0/22
62.204.154.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.238.0-151.251.255.255
185.151.156.0/22
185.224.160.0/23
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
213.226.63.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6c:ec:ef:f2:1e:ab:35:4d:d3:1a:77:64:65:23:04:ab:d2:
be:67:60:ba:5e:e9:31:6c:86:3f:c9:b0:cd:80:f5:ca:24:d3:
0d:d1:a2:f7:a3:50:cc:6c:e9:4f:ab:bb:0f:0d:f7:99:08:e2:
66:38:23:08:ae:18:20:4c:93:b8:1d:fb:87:96:de:c1:80:48:
1e:d3:3f:18:f0:94:3b:0f:6a:2a:37:1c:0c:6d:0a:b9:0e:d8:
27:cc:c6:f0:93:73:b2:84:ec:d6:d2:ab:54:38:2b:8a:1d:df:
b3:19:d3:56:89:7f:3f:43:bf:28:b3:c4:b5:33:ae:6d:5a:db:
d6:f5:73:e1:66:f0:e6:13:2d:95:f0:fc:92:be:33:7d:93:90:
bf:e4:5e:f9:8f:a3:7f:a4:e3:da:8d:9b:95:e4:c1:44:6c:5c:
ee:a7:f4:29:8a:50:36:d2:cb:80:ac:5b:43:a4:1b:22:ee:44:
d0:04:f4:35:4e:ac:ec:46:d5:c1:be:4e:67:c7:10:56:93:77:
dc:63:03:4e:f2:d9:62:c8:92:bb:2f:0b:65:e5:f6:a8:70:16:
a4:31:14:7b:85:70:4b:3f:8b:b4:3e:0d:f2:5f:13:af:19:36:
07:1f:b3:25:51:de:e9:ab:82:36:f2:aa:ba:dd:af:f7:e9:7e:
10:65:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-ams.rpki-client.org