Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/100al116rY5NHihMLUMAY4wo_wQ.roa
File: 100al116rY5NHihMLUMAY4wo_wQ.roa (raw, json)
Hash identifier: rQsS52nQeD9OYEb+ws0Xb0Y6VPZaD86/wVtINfc5K/8=
Subject key identifier: D7:4D:1A:97:5D:7A:AD:8E:4D:1E:28:4C:2D:43:00:63:8C:28:FF:04
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0187E0F3BDB4F6279BA2045C2D2C8E92B51B
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/100al116rY5NHihMLUMAY4wo_wQ.roa
Signing time: Wed 03 May 2023 09:31:22 +0000
ROA not before: Wed 03 May 2023 09:31:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41164
IP address blocks: 84.214.242.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
82.194.216.0/24 maxlen: 24
84.215.32.0/20 maxlen: 20
84.208.22.0/23 maxlen: 23
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.215.96.0/20 maxlen: 20
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
185.46.224.0/22 maxlen: 22
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.172.0/22 maxlen: 22
84.214.168.0/24 maxlen: 24
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.113.71.0/24 maxlen: 24
188.126.192.0/19 maxlen: 19
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.126.214.0/24 maxlen: 24
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
185.71.208.0/22 maxlen: 22
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
46.212.128.0/17 maxlen: 17
185.138.32.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
46.212.0.0/17 maxlen: 17
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
178.232.0.0/16 maxlen: 16
84.210.208.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
78.156.0.0/19 maxlen: 24
109.108.216.0/21 maxlen: 21
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
84.209.210.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
84.209.221.0/24 maxlen: 24
109.108.213.0/24 maxlen: 24
84.210.112.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
84.208.224.0/20 maxlen: 20
62.141.128.0/19 maxlen: 19
84.208.240.0/20 maxlen: 20
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
176.74.208.0/21 maxlen: 21
84.209.80.0/20 maxlen: 20
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:f3:bd:b4:f6:27:9b:a2:04:5c:2d:2c:8e:92:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 3 09:31:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d74d1a975d7aad8e4d1e284c2d4300638c28ff04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:b9:09:a6:55:ea:0c:e2:61:c1:9b:da:49:
e5:18:cf:ca:9a:30:76:81:97:91:07:99:77:04:c6:
bf:7c:06:f9:d2:7a:7a:1f:d3:cb:6e:f1:64:76:60:
f5:46:cb:d4:72:e3:e6:0a:20:8f:80:5d:4c:d3:db:
ee:02:bd:56:8e:d6:d6:f5:17:e7:6f:f8:93:97:d0:
9a:2e:81:62:e6:79:7d:c2:a0:d2:6f:06:87:da:f6:
81:81:8c:73:0b:7a:32:ef:ec:e6:a5:8a:c8:57:e6:
06:4f:b3:f2:19:28:27:a1:09:14:28:4f:f7:1d:52:
44:2f:11:10:e1:ea:34:d5:89:e3:bd:07:54:6d:0b:
90:6c:b0:20:d8:af:aa:98:64:40:41:32:cd:32:a3:
84:03:f5:51:83:64:6b:95:0a:df:2f:f3:26:b1:47:
5f:76:c9:41:aa:68:3b:ec:77:bc:37:1c:7c:73:f8:
a4:45:c6:61:51:c5:ae:3a:75:53:4f:c9:a4:c1:5c:
81:da:d5:85:1f:2d:c7:02:38:62:70:d8:27:4b:04:
53:86:45:48:2f:80:c4:55:cf:f0:1b:79:82:61:23:
94:ec:a1:ec:62:97:13:57:d1:b6:b9:d9:bf:2c:1c:
f9:ca:01:89:ef:c3:b5:1c:a1:6c:bc:60:03:f9:56:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:1A:97:5D:7A:AD:8E:4D:1E:28:4C:2D:43:00:63:8C:28:FF:04
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/100al116rY5NHihMLUMAY4wo_wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:b6:92:08:b7:1a:f9:50:6f:86:6f:f7:a3:7d:e3:bb:cf:6a:
d3:f5:e3:60:ba:68:2d:ce:37:10:b6:f3:42:ea:59:83:ce:f8:
91:bc:a8:ef:0a:24:59:d1:ea:46:de:37:ea:64:c3:c0:6f:ca:
bc:a2:03:e7:58:08:3e:6d:78:8f:21:e0:e2:e0:06:dc:97:ae:
f4:cc:cc:7b:0c:62:62:ea:8d:d6:a3:46:62:81:2b:5a:ea:29:
78:4b:77:65:72:d1:6f:36:ab:2e:d8:95:9a:c9:1e:55:1a:8a:
f5:50:77:a1:f1:f4:e6:80:16:79:38:c8:f1:f9:af:07:5c:fc:
c8:d7:ca:25:d8:24:68:78:30:e8:54:16:da:48:b8:c6:b4:0c:
98:f4:c5:22:7e:82:d3:aa:3f:c9:35:86:f8:f6:57:40:07:87:
80:25:b7:fd:9e:e8:1c:b6:2d:da:92:40:96:45:6c:53:a0:25:
1e:15:6d:b4:93:80:2e:b2:89:62:d4:ac:21:a8:52:de:bb:ac:
db:7d:cb:72:18:ab:14:e3:c2:3a:b4:d5:81:8a:25:b2:2b:ed:
d5:71:9c:53:15:d8:20:e7:80:b8:b1:be:4c:1c:93:e6:9d:be:
d4:c7:1e:a6:1b:98:99:81:15:87:da:05:fd:bc:da:c3:96:0a:
17:a0:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org