Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/1HpzIbYkYyiVGnma9THNF4enC2E.roa
File: 1HpzIbYkYyiVGnma9THNF4enC2E.roa (raw, json)
Hash identifier: bQ5jtbh2OGqnqj2MNFfOYAj6d0l1pWN8i7LfJ5JaN/M=
Subject key identifier: D4:7A:73:21:B6:24:63:28:95:1A:79:9A:F5:31:CD:17:87:A7:0B:61
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 0189B7B8A38B924FB8C0E91591DE88BB4ED3
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/1HpzIbYkYyiVGnma9THNF4enC2E.roa
Signing time: Wed 02 Aug 2023 19:27:58 +0000
ROA not before: Wed 02 Aug 2023 19:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 149.255.39.0/24 maxlen: 24
45.158.38.0/24 maxlen: 24
45.158.36.0/23 maxlen: 32
45.158.39.0/24 maxlen: 24
37.72.168.0/21 maxlen: 32
37.72.172.0/23 maxlen: 23
37.72.171.0/24 maxlen: 24
37.72.170.0/23 maxlen: 23
37.72.170.0/24 maxlen: 24
37.72.174.0/23 maxlen: 23
194.126.172.0/22 maxlen: 24
194.126.172.0/24 maxlen: 24
194.126.175.0/24 maxlen: 24
194.126.173.0/24 maxlen: 24
94.100.16.0/20 maxlen: 32
94.100.16.0/24 maxlen: 24
94.100.17.0/24 maxlen: 24
94.100.23.0/24 maxlen: 24
94.100.24.0/24 maxlen: 24
94.100.21.0/24 maxlen: 24
94.100.22.0/24 maxlen: 24
94.100.19.0/24 maxlen: 24
94.100.20.0/24 maxlen: 24
94.100.18.0/24 maxlen: 24
94.100.30.0/24 maxlen: 24
94.100.31.0/24 maxlen: 24
94.100.28.0/24 maxlen: 24
94.100.29.0/24 maxlen: 24
94.100.26.0/24 maxlen: 24
94.100.27.0/24 maxlen: 24
94.100.25.0/24 maxlen: 24
217.79.240.0/24 maxlen: 24
217.79.242.0/23 maxlen: 24
217.79.240.0/20 maxlen: 24
149.255.37.0/24 maxlen: 24
149.255.38.0/24 maxlen: 24
149.255.32.0/21 maxlen: 32
149.255.35.0/24 maxlen: 24
149.255.36.0/24 maxlen: 32
178.236.176.0/21 maxlen: 24
89.233.104.0/24 maxlen: 24
89.233.104.0/21 maxlen: 24
89.233.105.0/24 maxlen: 24
89.233.106.0/24 maxlen: 24
89.233.107.0/24 maxlen: 24
46.21.144.0/24 maxlen: 24
46.21.145.0/24 maxlen: 24
46.21.144.0/20 maxlen: 32
46.21.151.0/24 maxlen: 24
46.21.152.0/24 maxlen: 24
46.21.150.0/24 maxlen: 24
46.21.148.0/24 maxlen: 24
46.21.146.0/24 maxlen: 24
46.21.147.0/24 maxlen: 24
46.21.158.0/23 maxlen: 23
46.21.156.0/24 maxlen: 24
46.21.157.0/24 maxlen: 24
46.21.153.0/24 maxlen: 24
195.242.152.0/23 maxlen: 24
195.242.153.0/24 maxlen: 24
2a02:748:f000::/36 maxlen: 36
2a02:748:e000::/35 maxlen: 35
2a02:748::/35 maxlen: 35
2a02:748:c000::/35 maxlen: 35
2a02:748::/32 maxlen: 48
2a0f:5180::/32 maxlen: 32
2a02:748:6000::/48 maxlen: 48
2a0f:5180::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:b8:a3:8b:92:4f:b8:c0:e9:15:91:de:88:bb:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Aug 2 19:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d47a7321b6246328951a799af531cd1787a70b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:69:bb:58:83:7d:84:69:0f:de:31:de:16:
d8:88:71:26:6f:36:9e:12:59:ec:74:a9:02:5f:b7:
3f:76:44:dd:be:d8:0a:4d:67:39:33:3e:38:72:a0:
64:a9:4b:56:c0:f2:18:11:89:fc:40:d7:a4:8e:c6:
de:71:04:2d:c4:37:a0:69:93:7c:73:cd:c1:a3:3f:
bc:b8:8f:14:b6:b7:76:ac:dd:cf:76:5d:65:c3:4f:
ba:17:d9:5e:7e:17:48:b7:d3:4b:6a:d3:28:5a:60:
b4:7a:bb:cb:d8:a5:98:1f:91:81:09:1a:0c:f4:3f:
07:a4:98:c6:82:8b:d6:c6:fc:6d:fb:8c:75:fa:c0:
20:f8:4b:73:5a:19:68:0a:86:3d:b6:11:7d:21:8d:
4e:9d:1b:5b:b9:a1:a7:c3:d9:6b:c6:53:fe:aa:80:
19:a7:67:31:00:65:85:70:23:cd:32:ed:31:37:30:
f6:b7:b6:a2:3f:7a:b5:e4:e6:ed:9e:2e:3a:97:ed:
7b:d5:64:d7:91:ec:27:15:6c:97:3a:c9:63:e2:7a:
f8:8e:ee:89:2f:89:8c:3c:56:2b:aa:ed:ff:37:63:
6b:e3:19:1c:6f:76:6c:4b:44:88:7e:97:cd:a0:37:
2f:d4:22:89:c3:78:7e:db:9f:35:5a:63:39:86:ea:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7A:73:21:B6:24:63:28:95:1A:79:9A:F5:31:CD:17:87:A7:0B:61
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/1HpzIbYkYyiVGnma9THNF4enC2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.168.0/21
45.158.36.0/22
46.21.144.0/20
89.233.104.0/21
94.100.16.0/20
149.255.32.0/21
178.236.176.0/21
194.126.172.0/22
195.242.152.0/23
217.79.240.0/20
IPv6:
2a02:748::/32
2a0f:5180::/29
Signature Algorithm: sha256WithRSAEncryption
c2:7f:cf:8f:f4:d9:08:cb:59:d3:24:99:5d:f6:7f:1f:61:90:
05:93:f9:08:4e:38:e5:51:49:b2:bb:ab:9f:3d:aa:9a:04:6f:
dd:70:e2:e6:28:22:e2:83:f0:7d:ed:88:5e:82:da:20:92:7a:
76:0f:d5:4a:b1:16:14:c0:ba:85:16:06:28:17:58:7b:e1:3d:
90:0a:dc:49:02:45:21:3e:bc:cd:37:f8:82:7e:67:25:36:cb:
7b:58:d4:21:6c:26:36:c1:69:1b:44:b4:5c:5a:25:40:a3:7e:
35:78:29:50:e2:2c:09:3a:61:b1:18:0f:94:86:80:4d:47:77:
36:6e:3d:1f:a0:7c:11:ba:f8:97:98:dc:89:2e:41:a9:cb:87:
d6:d0:6a:53:05:1b:ee:55:7d:1b:df:f0:ec:48:5d:af:2d:1d:
2d:1a:00:7e:29:ba:65:3d:98:73:7b:12:b3:ed:ad:a9:14:c0:
8e:65:5a:77:e3:d4:b7:8e:61:a2:2d:9b:a5:f5:5a:21:28:61:
74:8f:be:85:38:25:1a:fa:6f:0c:b5:97:d1:99:e9:9d:7f:72:
1b:d8:f4:cf:5d:f5:3b:3a:3a:91:3c:b3:bb:09:ae:3c:b7:8d:
8b:25:41:12:88:ee:8f:0b:3f:45:f8:de:51:a0:62:81:62:89:
40:71:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:16 2024 by rpki-client on console-fra.rpki-client.org