Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/lz84sxkXB-ItRxqZIhBSc1aao70.roa
File: lz84sxkXB-ItRxqZIhBSc1aao70.roa (raw, json)
Hash identifier: 0LODpITqbM5mMRKNxi6TrbDF0UNkXU2s/QquAtksO0Q=
Subject key identifier: 97:3F:38:B3:19:17:07:E2:2D:47:1A:99:22:10:52:73:56:9A:A3:BD
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018ACCB87C77B4FB29DCD154A6FF34A93026
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/lz84sxkXB-ItRxqZIhBSc1aao70.roa
Signing time: Mon 25 Sep 2023 14:22:37 +0000
ROA not before: Mon 25 Sep 2023 14:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16839
IP address blocks: 163.120.128.0/17 maxlen: 24
138.12.128.0/17 maxlen: 24
148.139.48.0/20 maxlen: 20
148.139.64.0/20 maxlen: 20
148.139.80.0/20 maxlen: 20
37.98.233.0/24 maxlen: 24
37.98.232.0/21 maxlen: 24
37.98.232.0/24 maxlen: 24
37.98.236.0/24 maxlen: 24
37.98.238.0/24 maxlen: 24
37.98.237.0/24 maxlen: 24
37.98.235.0/24 maxlen: 24
37.98.234.0/24 maxlen: 24
37.98.239.0/24 maxlen: 24
148.139.4.0/22 maxlen: 22
148.139.1.0/24 maxlen: 24
148.139.0.0/24 maxlen: 24
148.139.3.0/24 maxlen: 24
148.139.2.0/24 maxlen: 24
148.139.0.0/16 maxlen: 24
148.139.8.0/22 maxlen: 22
148.139.12.0/22 maxlen: 22
148.139.16.0/22 maxlen: 22
148.139.29.0/24 maxlen: 24
148.139.28.0/24 maxlen: 24
148.139.30.0/24 maxlen: 24
148.139.32.0/20 maxlen: 20
148.139.96.0/22 maxlen: 22
148.139.105.0/24 maxlen: 24
148.139.104.0/24 maxlen: 24
148.139.100.0/22 maxlen: 22
148.139.108.0/22 maxlen: 22
148.139.112.0/22 maxlen: 22
148.139.116.0/22 maxlen: 22
148.139.125.0/24 maxlen: 24
148.139.124.0/24 maxlen: 24
148.139.120.0/22 maxlen: 22
2a04:37c0:3510::/48 maxlen: 48
2a04:37c0:4910::/48 maxlen: 48
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0:4410::/48 maxlen: 48
2a04:37c0:3110::/48 maxlen: 48
2a04:37c0:4430::/48 maxlen: 48
2a04:37c0::/29 maxlen: 48
2a04:37c0:3120::/48 maxlen: 48
2a04:37c0:4120::/48 maxlen: 48
2a04:37c0:4420::/48 maxlen: 48
2a04:37c0:4920::/48 maxlen: 48
2a04:37c0:3520::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:b8:7c:77:b4:fb:29:dc:d1:54:a6:ff:34:a9:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 25 14:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973f38b3191707e22d471a9922105273569aa3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:bb:f7:9a:9b:fe:bc:0f:b0:c0:c9:b1:7e:
37:d4:1b:02:b4:fb:84:55:0e:84:69:f6:de:e5:75:
0d:e5:0d:0a:6a:07:0a:07:b4:5a:8e:df:e5:00:d1:
97:14:fc:7f:79:30:97:76:7d:2c:d2:25:b6:75:bd:
41:39:66:ad:b2:ec:23:5a:81:e3:5d:b4:82:42:96:
cf:e8:c7:21:1f:6c:92:3b:4a:d3:91:68:a2:c9:57:
d4:5c:70:13:ab:07:cd:5d:79:f5:70:b7:a1:cd:55:
ea:0f:f1:c7:fd:61:7a:57:8f:68:a0:fa:89:9d:01:
50:61:48:8f:f5:1e:f2:47:c6:d2:4a:e8:21:65:8a:
e6:df:df:9b:20:20:89:ea:31:ea:a4:6a:b0:3a:88:
e9:ec:ed:1c:01:43:76:c7:93:0f:d5:60:b1:10:25:
e8:fe:81:06:42:12:b8:ff:92:4c:5a:c8:86:1f:9d:
9e:c3:b5:a3:36:03:cc:04:21:09:16:23:fd:d1:8a:
53:4a:18:e2:e0:0a:c7:27:18:25:b9:f5:da:10:4d:
d4:6f:34:4b:52:2a:ea:dd:e6:82:62:65:67:6a:68:
d3:17:d4:5a:2d:8f:21:58:13:68:2c:86:1f:6a:41:
0e:3b:e2:dc:b3:e6:bf:33:e5:db:d7:1d:dd:03:d8:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:38:B3:19:17:07:E2:2D:47:1A:99:22:10:52:73:56:9A:A3:BD
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/lz84sxkXB-ItRxqZIhBSc1aao70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:0e:6c:6d:ec:73:b0:7d:47:e8:45:66:5e:26:9d:13:bb:41:
5b:35:9f:f2:33:3c:4a:93:06:56:69:50:07:43:c1:9a:42:bf:
1c:d6:6b:81:24:20:77:19:af:b5:0e:df:81:e4:e8:61:67:0b:
83:ec:29:ff:dd:05:ce:b8:71:07:09:27:ad:8e:07:71:57:d3:
ee:81:18:b0:ef:2a:4e:20:3b:7e:3b:66:c8:7d:4c:9e:6c:46:
b5:cd:67:1f:44:00:f8:bc:aa:99:98:8b:01:5e:7b:1b:91:c0:
49:9a:51:35:5f:d8:fd:52:cc:67:c6:8c:2c:6f:eb:91:cf:be:
e7:a4:34:67:5c:e7:4c:8e:f8:07:48:24:60:65:79:a4:c1:9e:
fc:e0:31:26:99:a3:ad:93:78:e5:d3:c4:6a:93:ce:6a:79:11:
8c:36:82:20:59:80:8b:5e:66:38:2a:96:0f:68:22:47:e5:ba:
8c:7d:8f:45:fc:55:fa:37:c9:6d:d1:0e:e5:b2:c2:5d:7a:e9:
d8:9d:cb:b4:89:f2:55:d5:df:33:46:b2:4e:87:2c:2a:7b:55:
d4:9a:a7:57:c9:6e:be:09:46:f8:d9:37:c4:85:b2:42:07:2e:
49:89:3d:bc:ec:24:d2:4f:28:b8:69:f3:54:77:fa:2e:6a:4b:
1e:c7:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 15:38:51 2023 by rpki-client on console-ams.rpki-client.org