Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/I2eWTuuad3LfQrq81cgoKW8sSuw.roa
File: I2eWTuuad3LfQrq81cgoKW8sSuw.roa (raw, json)
Hash identifier: YLKQpDhMsdwtukoG3FHgLuBoK68BW5kRNZ6nqri3JxQ=
Subject key identifier: 23:67:96:4E:EB:9A:77:72:DF:42:BA:BC:D5:C8:28:29:6F:2C:4A:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01877B3E6CCE768C6D49B8EC8FCA5A319C77
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/I2eWTuuad3LfQrq81cgoKW8sSuw.roa
Signing time: Thu 13 Apr 2023 15:31:41 +0000
ROA not before: Thu 13 Apr 2023 15:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 78.144.0.0/13 maxlen: 24
213.208.64.0/18 maxlen: 24
193.218.99.0/24 maxlen: 24
217.68.128.0/20 maxlen: 24
212.159.128.0/18 maxlen: 24
81.178.0.0/15 maxlen: 24
92.0.0.0/11 maxlen: 24
195.112.0.0/18 maxlen: 24
84.43.0.0/17 maxlen: 24
79.75.0.0/16 maxlen: 24
62.24.128.0/17 maxlen: 24
212.139.0.0/16 maxlen: 24
89.240.0.0/14 maxlen: 24
80.40.0.0/13 maxlen: 24
88.104.0.0/13 maxlen: 24
212.1.128.0/19 maxlen: 24
81.170.0.0/17 maxlen: 24
91.146.112.0/21 maxlen: 24
82.133.0.0/17 maxlen: 24
145.255.240.0/21 maxlen: 24
87.242.128.0/17 maxlen: 24
185.173.116.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
217.8.0.0/19 maxlen: 24
81.1.64.0/18 maxlen: 24
83.67.0.0/16 maxlen: 24
2.96.0.0/13 maxlen: 24
84.12.0.0/16 maxlen: 24
212.74.96.0/19 maxlen: 24
194.247.224.0/19 maxlen: 24
79.76.0.0/14 maxlen: 24
79.66.0.0/15 maxlen: 24
185.175.144.0/22 maxlen: 24
62.3.192.0/18 maxlen: 24
212.67.96.0/19 maxlen: 24
185.173.120.0/22 maxlen: 24
185.175.48.0/22 maxlen: 24
81.6.192.0/18 maxlen: 24
194.106.32.0/19 maxlen: 24
89.168.128.0/17 maxlen: 24
81.86.0.0/16 maxlen: 24
79.68.0.0/14 maxlen: 24
62.241.160.0/19 maxlen: 24
195.149.0.0/18 maxlen: 24
185.24.12.0/22 maxlen: 24
213.78.0.0/16 maxlen: 24
195.137.0.0/17 maxlen: 24
79.73.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:3e:6c:ce:76:8c:6d:49:b8:ec:8f:ca:5a:31:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Apr 13 15:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2367964eeb9a7772df42babcd5c828296f2c4aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:b3:93:b8:f1:ac:79:1f:78:c6:91:d1:a8:
2d:57:b4:78:f2:61:43:ac:30:d7:2c:d5:9d:01:6f:
07:fd:62:3b:64:8a:84:0c:8b:af:dd:c1:ab:30:9d:
7e:bb:e6:8c:16:5e:79:4c:f5:25:f1:05:56:fd:d0:
4b:c4:a3:9c:10:b7:05:2d:15:3d:12:52:f5:2b:23:
6a:d8:12:22:82:0d:d3:35:05:49:ba:01:6a:58:22:
66:1e:5d:97:cf:75:ea:70:e6:ee:1e:fe:31:2b:60:
cf:84:ac:82:9e:32:fe:0b:cb:9c:0e:91:b6:8e:78:
14:7b:c8:9e:8a:2b:8b:d8:a0:7a:a9:ab:9f:a4:fa:
39:a9:53:bf:bc:a7:1b:e2:40:4a:7d:db:5a:f5:66:
bb:35:c1:b1:6f:8f:58:c7:cb:1b:ac:2b:9b:67:ef:
07:e8:0c:4b:45:60:f0:ec:84:22:2b:f2:ad:14:18:
d6:d3:bb:79:1d:8e:d2:94:3a:3f:8e:4f:df:cf:ce:
15:dd:8a:19:e2:9c:62:4a:16:a2:32:e2:df:59:4a:
38:b6:35:d2:fb:f3:01:fd:19:4d:7d:c5:27:8c:35:
26:d3:e3:99:7a:a2:36:4b:67:dc:e3:bf:77:a9:11:
48:79:e0:01:f7:92:bb:0b:86:ba:2f:69:66:47:df:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:96:4E:EB:9A:77:72:DF:42:BA:BC:D5:C8:28:29:6F:2C:4A:EC
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/I2eWTuuad3LfQrq81cgoKW8sSuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
79.66.0.0-79.71.255.255
79.73.0.0/16
79.75.0.0-79.79.255.255
80.40.0.0/13
81.1.64.0/18
81.6.192.0/18
81.86.0.0/16
81.170.0.0/17
81.178.0.0/15
82.133.0.0/17
83.67.0.0/16
84.12.0.0/16
84.43.0.0/17
87.242.128.0/17
88.104.0.0/13
89.168.128.0/17
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
145.255.240.0/21
185.24.12.0/22
185.112.212.0/22
185.173.116.0-185.173.123.255
185.175.48.0/22
185.175.144.0/22
193.218.99.0/24
194.106.32.0/19
194.247.224.0/19
195.112.0.0/18
195.137.0.0/17
195.149.0.0/18
212.1.128.0/19
212.67.96.0/19
212.74.96.0/19
212.139.0.0/16
212.159.128.0/18
213.78.0.0/16
213.208.64.0/18
217.8.0.0/19
217.68.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:61:f3:c8:6c:b8:37:6d:58:7b:8c:4f:a1:46:c0:9a:d0:48:
0d:f8:fe:ed:d8:a1:f1:b9:fd:b5:c5:fa:94:59:e2:7e:20:2b:
84:50:da:ef:fc:21:01:34:4f:79:f8:d8:93:32:f7:2e:3c:85:
b2:40:8e:f6:a5:f7:19:98:a8:a9:c0:71:d2:fb:05:10:cb:3b:
08:5e:54:55:c1:b3:e7:bf:62:dc:97:21:3d:92:07:65:b3:45:
0c:fe:d0:d6:6d:53:eb:cd:d1:3c:bd:59:fd:3f:93:1a:e4:43:
0f:13:86:c1:b3:15:19:2b:7b:80:cc:94:68:56:a9:75:de:f3:
6f:d8:55:db:fd:02:1a:6b:e6:10:95:e9:f6:d3:4e:ba:5e:a2:
ca:d8:bc:77:63:96:af:1b:dc:3b:a4:c3:5e:70:bc:77:c3:2a:
a1:02:fd:43:be:c2:81:08:58:45:f9:db:92:e7:12:50:e2:11:
c1:5b:b3:73:95:45:3b:71:c3:eb:2a:d8:9c:e3:1e:7b:2c:9a:
83:ad:20:87:1d:4a:63:ef:a7:33:83:c3:59:f3:29:66:51:ce:
4a:ac:98:71:a1:16:ab:08:b8:17:09:1c:fb:3d:c4:3d:a2:e4:
ac:31:49:0c:b7:8d:41:3a:ef:b9:90:6d:ce:dd:70:c6:49:63:
09:2e:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-fra.rpki-client.org