Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/a7aHP_eoeJ9-GDsn99hJPJ7L26k.roa
File: a7aHP_eoeJ9-GDsn99hJPJ7L26k.roa (raw, json)
Hash identifier: PAzCaPspV2173hWzneWOOp0+WF8p7XULIcszVPL3YuQ=
Subject key identifier: 6B:B6:87:3F:F7:A8:78:9F:7E:18:3B:27:F7:D8:49:3C:9E:CB:DB:A9
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018BC89D0D2FAD12EB453562B6CDCC6C9863
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/a7aHP_eoeJ9-GDsn99hJPJ7L26k.roa
Signing time: Mon 13 Nov 2023 12:16:57 +0000
ROA not before: Mon 13 Nov 2023 12:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16839
IP address blocks: 163.120.128.0/17 maxlen: 24
138.12.128.0/17 maxlen: 17
148.139.48.0/20 maxlen: 20
148.139.64.0/20 maxlen: 20
148.139.80.0/20 maxlen: 20
37.98.233.0/24 maxlen: 24
37.98.232.0/21 maxlen: 21
37.98.232.0/24 maxlen: 24
37.98.232.0/22 maxlen: 22
37.98.232.0/23 maxlen: 23
37.98.235.0/24 maxlen: 24
37.98.236.0/22 maxlen: 22
37.98.236.0/23 maxlen: 23
37.98.236.0/24 maxlen: 24
37.98.238.0/23 maxlen: 23
37.98.238.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.234.0/24 maxlen: 24
37.98.234.0/23 maxlen: 23
37.98.239.0/24 maxlen: 24
148.139.4.0/22 maxlen: 22
148.139.1.0/24 maxlen: 24
148.139.0.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.0.0/16 maxlen: 16
148.139.8.0/22 maxlen: 22
148.139.12.0/22 maxlen: 22
148.139.16.0/22 maxlen: 22
148.139.29.0/24 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 20
148.139.96.0/22 maxlen: 22
148.139.105.0/24 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.100.0/22 maxlen: 22
148.139.108.0/22 maxlen: 22
148.139.112.0/22 maxlen: 22
148.139.116.0/22 maxlen: 22
148.139.125.0/24 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.120.0/22 maxlen: 22
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0::/29 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:9d:0d:2f:ad:12:eb:45:35:62:b6:cd:cc:6c:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Nov 13 12:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bb6873ff7a8789f7e183b27f7d8493c9ecbdba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:f0:a5:e9:2a:71:11:57:42:e9:be:39:cf:
58:56:3a:94:a1:24:40:dd:b3:f5:73:2b:63:ac:9d:
71:30:8d:fe:35:df:50:59:1e:e0:8b:ba:6d:81:7c:
0d:0d:63:68:ef:7a:37:21:c3:03:21:f2:16:4b:ca:
aa:a3:e9:90:d3:85:7e:68:46:3e:fd:e3:af:28:f1:
e9:10:ef:48:43:22:0e:d9:18:c4:45:66:4e:92:36:
e8:eb:b9:3b:63:f3:c6:5d:c3:73:68:8a:17:b8:28:
14:c4:ab:02:ec:61:73:b2:f5:97:2a:a9:40:a9:49:
3f:9e:62:9a:41:76:80:5c:81:7b:1f:50:c8:07:c6:
7c:3c:b8:e9:2d:c1:d4:8d:08:00:9d:b4:0a:10:5d:
7d:88:36:5f:bc:bb:a4:e1:df:57:f1:4e:9b:7d:08:
63:72:90:44:4e:b4:dd:a9:74:c3:2d:55:49:16:89:
69:17:ac:af:b7:6f:f4:d8:50:d4:b4:9a:da:e6:0f:
b2:f6:e6:5e:cd:08:02:d3:12:30:12:53:db:fa:f4:
d7:71:1c:44:27:24:d6:a2:ce:08:5d:0f:e9:46:07:
3f:3b:78:96:39:c1:b8:ff:d4:a6:8d:b8:f3:c1:8d:
26:3a:74:37:5f:f3:f9:4e:7b:05:ee:61:9c:a9:00:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:87:3F:F7:A8:78:9F:7E:18:3B:27:F7:D8:49:3C:9E:CB:DB:A9
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/a7aHP_eoeJ9-GDsn99hJPJ7L26k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:20:29:be:98:49:33:50:07:e1:67:7f:df:7b:33:c9:5b:f3:
d0:9a:ca:d2:d5:a9:1b:22:d2:51:c8:42:01:5d:4e:4e:57:ac:
d4:d2:62:d5:68:f5:86:4b:35:5b:b6:94:9b:b3:3c:cf:24:6b:
79:59:21:7c:d0:69:ee:01:6c:3c:1a:d6:1f:44:84:67:2a:80:
43:6a:8c:98:6c:a7:96:e2:ec:6c:f9:9a:74:38:f6:bf:ae:ca:
f1:ee:0a:5d:f5:63:48:03:16:0e:7c:9f:c4:46:b5:60:00:36:
45:32:73:6c:02:71:ed:50:0d:44:1f:9b:6d:e0:08:60:12:4e:
69:51:00:a1:3f:05:39:d8:60:7e:4a:c6:b4:2f:de:62:df:53:
0b:d8:7c:4a:7c:1a:9a:84:ac:15:51:80:29:92:e6:29:c7:9a:
af:8a:35:30:28:c9:11:27:fd:bf:40:c6:8c:d8:19:3b:ff:8f:
bc:2c:63:65:77:a4:c3:63:49:d5:0d:95:04:0a:6b:3d:96:fc:
fc:76:c2:8d:14:61:fa:e7:45:cb:ce:26:e2:e4:63:a4:e0:fc:
9b:3c:6d:17:2a:ac:b0:ab:fd:5e:ba:59:15:ae:a9:43:63:d1:
cd:81:46:84:3d:cd:d7:85:be:43:50:f7:aa:6b:ad:c6:0b:54:
e3:77:5d:48
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYvInQ0vrRLrRTVits3MbJhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4
ZTcxYTUwHhcNMjMxMTEzMTIxNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmI2ODczZmY3YTg3ODlmN2UxODNiMjdmN2Q4NDkzYzllY2JkYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizjwpekqcRFXQum+Oc9YVjqUoSRA
3bP1cytjrJ1xMI3+Nd9QWR7gi7ptgXwNDWNo73o3IcMDIfIWS8qqo+mQ04V+aEY+
/eOvKPHpEO9IQyIO2RjERWZOkjbo67k7Y/PGXcNzaIoXuCgUxKsC7GFzsvWXKqlA
qUk/nmKaQXaAXIF7H1DIB8Z8PLjpLcHUjQgAnbQKEF19iDZfvLuk4d9X8U6bfQhj
cpBETrTdqXTDLVVJFolpF6yvt2/02FDUtJra5g+y9uZezQgC0xIwElPb+vTXcRxE
JyTWos4IXQ/pRgc/O3iWOcG4/9SmjbjzwY0mOnQ3X/P5TnsF7mGcqQBWDwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGu2hz/3qHiffhg7J/fYSTyey9upMB8GA1UdIwQY
MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt
YjI5ZjEwY2MwMzI4LzEvYTdhSFBfZW9lSjktR0Rzbjk5aEpQSjdMMjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4
LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQDJWLoAwQH
igyAAwMAlIsDBAejeIAwDQQCAAIwBwMFAyoEN8AwDQYJKoZIhvcNAQELBQADggEB
AEUgKb6YSTNQB+Fnf997M8lb89CaytLVqRsi0lHIQgFdTk5XrNTSYtVo9YZLNVu2
lJuzPM8ka3lZIXzQae4BbDwa1h9EhGcqgENqjJhsp5bi7Gz5mnQ49r+uyvHuCl31
Y0gDFg58n8RGtWAANkUyc2wCce1QDUQfm23gCGASTmlRAKE/BTnYYH5KxrQv3mLf
UwvYfEp8GpqErBVRgCmS5inHmq+KNTAoyREn/b9AxozYGTv/j7wsY2V3pMNjSdUN
lQQKaz2W/Px2wo0UYfrnRcvOJuLkY6Tg/Js8bRcqrLCr/V66WRWuqUNj0c2BRoQ9
zdeFvkNQ96prrcYLVON3XUg=
-----END CERTIFICATE-----
Generated at Mon Dec 4 12:24:48 2023 by rpki-client on console-fra.rpki-client.org