Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/3spuB8syheL7wx5NEZyC9oWNaEs.roa
File: 3spuB8syheL7wx5NEZyC9oWNaEs.roa (raw, json)
Hash identifier: Tt26LkrcXvfGDUdmPOVxHTI9g9+0Ox3UQidnz3F1XqA=
Subject key identifier: DE:CA:6E:07:CB:32:85:E2:FB:C3:1E:4D:11:9C:82:F6:85:8D:68:4B
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01856CAEF53C3D5E426ED78E00AE8E160131
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/3spuB8syheL7wx5NEZyC9oWNaEs.roa
Signing time: Sun 01 Jan 2023 09:34:43 +0000
ROA not before: Sun 01 Jan 2023 09:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.48.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
2a03:f80:65::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f5:3c:3d:5e:42:6e:d7:8e:00:ae:8e:16:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 09:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deca6e07cb3285e2fbc31e4d119c82f6858d684b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:d9:63:14:5c:0e:17:aa:f2:15:6e:14:c9:
0e:87:56:8b:ea:ef:5f:79:36:00:8a:84:0e:76:86:
06:10:98:0b:e4:27:5e:5a:a7:0f:cd:ee:71:76:55:
af:04:98:89:5d:70:fb:3e:fd:75:bf:72:a4:45:79:
d7:18:23:6e:cd:c8:05:bd:88:94:59:95:bb:13:6c:
a7:11:23:01:73:84:6c:50:56:75:a6:45:2b:d6:f5:
79:a8:54:94:cf:dd:10:cc:46:e6:4a:df:0c:da:e0:
ed:97:52:39:fc:b5:9e:0f:2d:1c:d2:b1:9b:b5:2d:
81:04:b7:4d:31:5a:f2:2f:a7:5a:47:af:00:b1:7f:
e3:0c:ef:a8:b2:4b:8a:0c:66:6b:54:e6:76:a5:17:
e5:ad:37:c2:36:9f:6f:c3:f3:94:6a:4c:4e:90:e7:
ee:39:9f:db:df:16:b5:79:96:70:f6:54:e8:0b:ab:
58:38:9b:ec:62:4f:87:b9:74:92:c1:7f:63:d7:af:
e6:dc:76:ba:c6:be:c7:ce:d9:e4:cc:79:5e:a5:9d:
cf:2e:b8:42:5e:d0:37:7b:21:1f:78:24:af:72:d1:
15:e7:06:26:ad:69:88:d9:1e:d3:64:29:6d:c1:eb:
3b:61:a4:8d:51:c6:34:0d:f4:3e:85:90:70:a2:04:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:6E:07:CB:32:85:E2:FB:C3:1E:4D:11:9C:82:F6:85:8D:68:4B
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/3spuB8syheL7wx5NEZyC9oWNaEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
46.183.187.0/24
83.243.121.0/24
89.31.120.0/23
91.132.92.0/23
91.132.95.0/24
103.57.248.0/23
103.57.251.0/24
149.154.157.0-149.154.159.255
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.239.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/48
2a03:f80:44::/47
2a03:f80:47::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9e:f3:e5:82:ec:89:cf:75:95:64:a9:73:9f:e9:ce:04:00:
88:73:99:6e:68:09:aa:ae:c5:15:e4:2e:73:63:bd:d8:3f:47:
b4:34:26:3d:a4:b3:ac:eb:74:9e:e9:38:91:76:33:6f:e2:d8:
97:e2:92:a1:36:ae:0e:e5:98:dd:d7:2f:22:a2:6f:f9:47:00:
3f:4a:88:ff:3b:13:04:e0:87:2e:3c:91:52:8e:8a:d8:b3:53:
9b:4f:57:4f:b7:7c:2f:a1:4a:35:e3:6c:39:21:6d:e9:3b:b8:
3e:45:c6:33:03:a8:2f:bc:80:96:15:da:7e:5e:45:4a:be:25:
b6:93:56:e1:92:2b:32:b5:f7:e5:ac:d0:29:d6:0c:8b:de:52:
7b:ed:38:3d:52:0d:95:5a:6c:98:d3:5c:56:42:5d:90:21:00:
f0:a0:93:25:0f:f0:a1:15:04:68:be:d7:6f:1f:36:dc:cf:05:
c6:c2:74:ac:96:b8:f9:1f:45:28:19:01:e9:43:4b:66:35:04:
e6:f5:92:6e:6d:34:a1:35:07:f9:ce:3f:d4:da:1e:03:09:e2:
c2:5a:a9:81:7a:3c:65:22:f9:93:99:a3:03:26:de:0d:48:4c:
a2:b3:b8:ff:50:0b:80:cb:74:0f:6b:d6:45:1a:e2:d9:7d:83:
6f:47:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org