Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/3A-EWyfdeJ8Zzx6vLvkDAZIKWE0.roa
File: 3A-EWyfdeJ8Zzx6vLvkDAZIKWE0.roa (raw, json)
Hash identifier: gUoOZ601+cJFp1xh2rrp2mBPdWq9nKvySOGIjYriitE=
Subject key identifier: DC:0F:84:5B:27:DD:78:9F:19:CF:1E:AF:2E:F9:03:01:92:0A:58:4D
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 018B18C0E243ED51809EF6904E55AC1384D4
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/3A-EWyfdeJ8Zzx6vLvkDAZIKWE0.roa
Signing time: Tue 10 Oct 2023 08:42:55 +0000
ROA not before: Tue 10 Oct 2023 08:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30722
IP address blocks: 91.80.64.0/18 maxlen: 18
109.114.0.0/15 maxlen: 19
176.242.0.0/15 maxlen: 15
91.80.0.0/19 maxlen: 19
93.144.0.0/16 maxlen: 20
2.43.0.0/16 maxlen: 16
93.70.0.0/16 maxlen: 18
91.80.32.0/21 maxlen: 21
2.33.0.0/17 maxlen: 17
83.225.0.0/16 maxlen: 16
91.80.46.0/24 maxlen: 24
91.80.48.0/20 maxlen: 24
2.33.128.0/17 maxlen: 17
93.148.0.0/16 maxlen: 20
93.151.128.0/17 maxlen: 20
2.40.0.0/16 maxlen: 20
91.80.128.0/17 maxlen: 17
83.224.64.0/20 maxlen: 20
83.224.81.0/24 maxlen: 24
83.224.80.0/24 maxlen: 24
83.224.86.0/23 maxlen: 23
93.66.0.0/15 maxlen: 17
2.32.0.0/16 maxlen: 20
93.150.0.0/16 maxlen: 20
2.36.0.0/14 maxlen: 18
31.26.0.0/16 maxlen: 16
188.218.0.0/15 maxlen: 18
37.117.0.0/16 maxlen: 19
93.147.0.0/16 maxlen: 20
83.224.128.0/17 maxlen: 17
2.46.0.0/15 maxlen: 20
37.176.0.0/13 maxlen: 20
37.119.0.0/17 maxlen: 19
109.119.0.0/16 maxlen: 16
31.156.0.0/14 maxlen: 19
93.146.0.0/16 maxlen: 20
37.159.128.0/17 maxlen: 20
109.115.192.0/19 maxlen: 19
2.45.0.0/16 maxlen: 20
109.115.96.0/19 maxlen: 19
109.112.0.0/15 maxlen: 15
188.152.128.0/17 maxlen: 20
31.27.224.0/19 maxlen: 19
93.65.0.0/16 maxlen: 18
37.116.0.0/16 maxlen: 19
109.116.0.0/15 maxlen: 20
176.244.0.0/14 maxlen: 14
2.42.0.0/16 maxlen: 20
37.119.128.0/17 maxlen: 20
93.69.0.0/16 maxlen: 16
109.115.224.0/19 maxlen: 19
188.153.0.0/16 maxlen: 20
130.25.0.0/16 maxlen: 18
2.44.0.0/16 maxlen: 19
93.71.0.0/16 maxlen: 18
2.34.0.0/15 maxlen: 20
93.64.0.0/16 maxlen: 18
31.27.0.0/18 maxlen: 18
109.118.0.0/16 maxlen: 16
37.118.0.0/16 maxlen: 16
91.81.0.0/17 maxlen: 19
93.145.0.0/16 maxlen: 20
5.88.0.0/13 maxlen: 20
93.68.0.0/16 maxlen: 16
91.81.128.0/17 maxlen: 24
37.159.0.0/17 maxlen: 17
31.27.192.0/19 maxlen: 19
93.149.0.0/16 maxlen: 20
188.152.0.0/17 maxlen: 20
31.27.96.0/20 maxlen: 20
188.216.0.0/15 maxlen: 17
130.0.128.0/18 maxlen: 21
31.27.128.0/17 maxlen: 19
2.41.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 15 Nov 2023 11:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:c0:e2:43:ed:51:80:9e:f6:90:4e:55:ac:13:84:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Oct 10 08:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc0f845b27dd789f19cf1eaf2ef90301920a584d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:ef:d3:41:13:bb:c4:bf:40:7b:e2:eb:9a:
9c:9c:9c:a7:d1:69:e5:9a:51:c1:d7:15:06:04:d1:
be:ab:71:13:ac:7f:ad:b3:26:bb:0b:fd:6c:5f:d7:
35:24:d9:d9:d5:dd:3f:e2:b5:02:6c:5e:c4:6c:59:
41:70:cd:ca:89:45:98:ee:d7:b6:21:bd:a9:74:45:
70:57:78:d0:30:3f:62:b9:08:80:ba:1a:43:5a:c7:
32:dc:4d:21:1b:ac:4d:67:68:fc:0e:d5:0f:e7:c7:
ae:26:af:6a:57:10:7e:20:ab:70:ad:fd:28:05:30:
69:40:de:51:95:72:d2:c8:08:76:6c:f7:4c:ad:07:
7d:3a:e7:a8:f1:1e:f4:23:0d:4a:60:3c:d2:27:c5:
e1:19:8c:4b:a2:14:a9:af:39:e3:e7:27:0a:07:29:
4b:7b:c3:b7:a9:40:04:43:da:7c:2d:91:72:cc:47:
73:86:4a:bd:75:78:29:6e:80:2f:c7:55:e7:fb:00:
95:ab:32:eb:d2:7a:33:13:80:2a:f3:80:5a:87:8c:
18:99:79:bb:2f:8d:ae:d9:a5:fa:a9:cc:d1:34:63:
7d:35:e5:61:81:be:34:ac:82:eb:29:f2:42:22:cc:
7d:ee:3d:24:44:45:d3:58:07:03:39:86:c1:19:46:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:84:5B:27:DD:78:9F:19:CF:1E:AF:2E:F9:03:01:92:0A:58:4D
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/3A-EWyfdeJ8Zzx6vLvkDAZIKWE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.32.0.0/12
5.88.0.0/13
31.26.0.0-31.27.63.255
31.27.96.0/20
31.27.128.0/17
31.156.0.0/14
37.116.0.0/14
37.159.0.0/16
37.176.0.0/13
83.224.64.0-83.224.81.255
83.224.86.0/23
83.224.128.0-83.225.255.255
91.80.0.0-91.80.39.255
91.80.46.0/24
91.80.48.0-91.81.255.255
93.64.0.0/13
93.144.0.0-93.150.255.255
93.151.128.0/17
109.112.0.0/13
130.0.128.0/18
130.25.0.0/16
176.242.0.0-176.247.255.255
188.152.0.0/15
188.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
79:c9:39:e5:6e:80:8b:0b:3f:85:a6:07:70:04:73:e8:bb:d8:
81:21:6a:a7:d7:74:72:8e:8c:34:cb:39:0d:50:29:01:7d:1f:
f3:6d:91:5b:95:69:64:38:81:c0:55:7e:f5:6b:a1:a9:b9:41:
3e:7c:61:d8:72:5d:2b:67:99:9b:ee:cd:19:b5:ae:8d:4d:ee:
51:06:79:be:53:ae:5f:6c:8d:71:d7:30:a8:5a:96:fe:a3:66:
5c:48:12:c7:94:3a:0d:03:94:df:ff:36:ad:de:86:3c:2c:54:
e2:04:35:8c:49:85:6f:08:3d:aa:6f:b1:ea:51:35:33:c6:41:
36:ef:f7:aa:00:9d:a0:8d:aa:fd:23:83:57:5e:12:da:58:e3:
89:ac:ea:47:51:d5:09:1d:b8:b4:0b:10:a4:89:33:e5:9c:7b:
9b:f4:b0:22:36:1b:4b:74:bf:92:de:54:9f:a0:f4:d8:de:18:
ab:44:07:6d:5e:9a:3e:96:99:6a:a2:fa:0a:87:a4:48:10:c5:
43:c3:fb:ce:06:4b:c8:f0:61:16:3d:85:f6:57:14:6c:f5:1e:
be:55:38:36:99:a5:9e:c4:b3:20:e6:f7:16:76:73:cf:75:91:
fc:56:2a:27:cf:e4:96:9d:2d:24:f6:f2:4c:4e:ed:28:32:3c:
c3:c3:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org