Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/h7s0P7ZoQhzo-v0w0rZleyfOGNg.roa
File: h7s0P7ZoQhzo-v0w0rZleyfOGNg.roa (raw, json)
Hash identifier: 8ZPRnXUGhCBA88gr+y1trOVGF38oJQe0XTW8j7RAqHE=
Subject key identifier: 87:BB:34:3F:B6:68:42:1C:E8:FA:FD:30:D2:B6:65:7B:27:CE:18:D8
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018CC726E985AA1BA88C4EF5BC3DF93BAE8C
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/h7s0P7ZoQhzo-v0w0rZleyfOGNg.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41164
IP address blocks: 84.214.242.0/23 maxlen: 23
84.208.0.0/13 maxlen: 17
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.206.0/23 maxlen: 23
82.194.204.0/23 maxlen: 23
82.194.204.0/22 maxlen: 22
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
82.194.216.0/24 maxlen: 24
84.215.32.0/20 maxlen: 20
84.208.22.0/23 maxlen: 23
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.215.96.0/20 maxlen: 20
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
185.46.224.0/22 maxlen: 22
84.214.46.0/23 maxlen: 23
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.138.0/23 maxlen: 23
84.214.172.0/22 maxlen: 22
84.214.168.0/24 maxlen: 24
188.113.68.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.66.0/23 maxlen: 23
188.113.64.0/18 maxlen: 18
188.113.71.0/24 maxlen: 24
188.126.192.0/19 maxlen: 19
188.113.78.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.94.0/23 maxlen: 23
188.126.214.0/24 maxlen: 24
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.113.112.0/20 maxlen: 20
185.71.208.0/22 maxlen: 22
84.213.16.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
46.212.128.0/17 maxlen: 17
185.138.32.0/22 maxlen: 22
178.17.144.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
46.212.0.0/17 maxlen: 17
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
62.97.160.0/19 maxlen: 19
62.97.172.0/23 maxlen: 23
62.97.168.0/22 maxlen: 22
178.232.0.0/16 maxlen: 16
84.210.208.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
78.156.0.0/19 maxlen: 24
109.108.216.0/21 maxlen: 21
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
84.209.210.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
84.209.221.0/24 maxlen: 24
109.108.213.0/24 maxlen: 24
84.210.112.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
84.208.224.0/20 maxlen: 20
62.141.128.0/19 maxlen: 19
84.208.240.0/20 maxlen: 20
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.238.0/24 maxlen: 24
46.249.236.0/23 maxlen: 23
46.249.234.0/23 maxlen: 23
46.249.252.0/22 maxlen: 22
176.74.208.0/21 maxlen: 21
84.209.80.0/20 maxlen: 20
46.249.224.0/22 maxlen: 22
46.249.224.0/19 maxlen: 19
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Mar 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e9:85:aa:1b:a8:8c:4e:f5:bc:3d:f9:3b:ae:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87bb343fb668421ce8fafd30d2b6657b27ce18d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:9f:81:35:cf:8b:13:44:4b:65:b8:bc:b7:
37:7d:52:98:78:33:f1:d3:48:26:71:2d:a1:77:41:
cf:53:3f:97:e0:4e:26:0f:76:64:ab:b4:5b:bc:1f:
59:6c:f9:53:c7:76:d2:f8:66:f6:db:67:77:7a:96:
74:10:eb:32:2a:97:16:fc:4d:f1:ae:b7:84:ce:f5:
d8:45:65:2e:4c:8c:38:71:3f:6f:e3:9a:1c:d4:30:
8d:71:2b:04:9d:8e:2e:95:ea:5f:e1:b8:95:e8:f4:
53:b6:c7:e6:49:88:48:29:12:ce:ec:af:07:8c:86:
fc:52:8d:97:6b:a5:b9:1d:72:90:e8:b3:c4:b6:af:
ab:97:52:c0:e5:90:bb:61:dc:e2:d3:dc:49:30:73:
19:c8:fe:c7:5d:63:97:8c:de:8a:90:35:85:d4:b4:
5c:94:94:4d:75:89:0d:2e:78:39:b0:fc:90:fe:33:
0b:49:e4:63:43:24:6e:e9:53:22:7e:96:f2:37:7f:
d7:17:ce:3b:41:ba:6e:95:b4:f5:53:ce:ec:81:f0:
98:0d:91:bc:cf:c7:09:45:6b:62:e7:47:27:9f:42:
50:80:fe:8f:5b:06:3e:b8:66:70:ff:8e:53:82:47:
75:07:95:62:14:dd:f9:f9:58:c9:77:b5:45:c5:0e:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BB:34:3F:B6:68:42:1C:E8:FA:FD:30:D2:B6:65:7B:27:CE:18:D8
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/h7s0P7ZoQhzo-v0w0rZleyfOGNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
46.249.224.0/19
62.97.160.0/19
62.141.128.0/19
78.156.0.0/19
82.194.192.0/19
84.208.0.0/13
109.108.192.0/19
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.138.32.0/22
188.113.64.0/18
188.126.192.0/19
IPv6:
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:aa:9d:eb:0d:a5:7e:c0:c6:e8:89:52:21:b9:3d:e2:0f:66:
1e:83:d7:28:7d:5c:b3:b8:33:63:c6:9f:02:d0:74:83:25:c1:
38:d6:c6:50:7b:89:61:ff:25:77:e3:0c:25:17:e0:43:59:4c:
7c:49:14:07:30:b2:6b:6d:f8:1c:93:d7:ea:c3:57:13:9f:fb:
f2:b0:b9:56:5b:a6:3f:ea:b4:39:89:73:18:2c:eb:e0:ef:5a:
1c:12:61:26:0f:72:5a:dc:6b:f5:b2:ef:02:52:bb:de:c8:e1:
46:f3:da:d6:a2:f6:61:a9:6f:f3:15:4e:88:69:28:a4:8d:81:
e9:a8:5e:94:3f:60:99:77:b6:df:83:35:93:b4:51:f0:3b:51:
a6:2b:d2:18:ee:e6:ff:11:56:86:4f:0a:7d:4f:c1:4f:4d:09:
54:21:cd:98:14:8b:94:c1:48:f4:d2:c1:bb:29:30:43:7f:13:
e1:af:10:9d:6b:55:5c:0f:48:c0:2a:ec:d7:d7:15:28:4c:5e:
3c:55:48:64:a1:38:05:17:b2:e4:c3:fc:34:b6:4f:10:80:dd:
bb:6f:4b:95:57:2f:67:2c:b0:7e:1a:16:51:5a:83:ee:1d:82:
03:7a:b1:c7:75:c8:57:f6:37:b2:84:23:5e:f0:b0:0e:63:31:
90:26:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org