Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/Y8Pffqib5WQT6aWjRuH7P-Ot9ec.roa
File: Y8Pffqib5WQT6aWjRuH7P-Ot9ec.roa (raw, json)
Hash identifier: CdDvKP+lhKX8TCfUUDE0bgloRS3IdOKxNv9qmBoAIlk=
Subject key identifier: 63:C3:DF:7E:A8:9B:E5:64:13:E9:A5:A3:46:E1:FB:3F:E3:AD:F5:E7
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0185F32E2FEA123D60FAE8DD7EF7B2FFB874
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/Y8Pffqib5WQT6aWjRuH7P-Ot9ec.roa
Signing time: Fri 27 Jan 2023 12:22:48 +0000
ROA not before: Fri 27 Jan 2023 12:22:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202422
IP address blocks: 139.28.6.0/24 maxlen: 24
95.85.76.0/24 maxlen: 24
92.223.102.0/24 maxlen: 24
80.93.209.0/24 maxlen: 24
80.93.210.0/24 maxlen: 24
5.188.36.0/24 maxlen: 24
80.93.219.0/24 maxlen: 24
80.93.218.0/24 maxlen: 24
80.93.214.0/24 maxlen: 24
80.93.215.0/24 maxlen: 24
80.93.217.0/24 maxlen: 24
80.93.223.0/24 maxlen: 24
92.38.148.0/24 maxlen: 24
92.38.155.0/24 maxlen: 24
92.38.173.0/24 maxlen: 24
5.188.148.0/24 maxlen: 24
92.38.186.0/23 maxlen: 24
92.38.181.0/24 maxlen: 24
92.38.186.0/24 maxlen: 24
92.38.180.0/24 maxlen: 24
5.8.24.0/24 maxlen: 24
78.111.105.0/24 maxlen: 24
78.111.99.0/24 maxlen: 24
78.111.102.0/24 maxlen: 24
78.111.101.0/24 maxlen: 24
103.215.218.0/24 maxlen: 24
217.195.193.0/24 maxlen: 24
92.38.187.0/24 maxlen: 24
5.188.169.0/24 maxlen: 24
5.188.168.0/24 maxlen: 24
5.188.190.0/24 maxlen: 24
146.185.236.0/24 maxlen: 24
146.185.237.0/24 maxlen: 24
37.9.33.0/24 maxlen: 24
37.9.32.0/24 maxlen: 24
146.185.248.0/24 maxlen: 24
217.195.205.0/24 maxlen: 24
146.185.216.0/24 maxlen: 24
146.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:2e:2f:ea:12:3d:60:fa:e8:dd:7e:f7:b2:ff:b8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 27 12:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63c3df7ea89be56413e9a5a346e1fb3fe3adf5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:7e:e2:31:99:d3:95:aa:d5:d3:9b:71:d1:
de:5b:f1:07:8d:f8:98:6a:14:2a:e5:f0:47:26:53:
ad:08:fb:f5:94:9a:70:4e:7b:ac:f6:27:3c:ab:bd:
df:8a:89:a2:f7:bf:7f:23:3d:be:e4:6f:be:f0:09:
25:80:4e:dc:86:cc:36:a6:b3:0f:6a:a7:87:5e:cc:
84:46:03:47:bc:aa:90:c7:0c:8d:be:8f:15:64:67:
21:68:b2:f0:0c:ae:0d:69:e3:68:97:e6:2d:8e:d0:
5c:a6:01:86:28:34:76:2b:09:39:f7:26:4c:ff:fd:
6b:91:46:ee:44:f2:0c:f9:a5:24:06:2d:db:4a:a5:
1a:4a:7b:9b:06:52:c9:9a:50:b5:14:a7:c8:28:72:
fe:ad:6d:81:3c:f8:e6:17:76:9f:45:66:4d:97:a3:
38:8d:81:bc:e4:f8:c9:01:fe:e7:d2:23:59:ab:c2:
22:e0:e6:cd:98:f8:ff:b8:03:70:d4:f0:a4:8e:a6:
2e:2f:4c:79:36:d2:d5:1f:ce:7b:1f:6f:11:d2:97:
8c:dc:1e:66:f0:b0:f4:11:f2:4a:73:b5:b3:6e:55:
70:bd:d7:2d:e2:a7:66:f6:ac:1f:33:bd:d8:9b:45:
fd:8f:d5:77:30:73:ad:83:92:b7:f9:be:e0:8b:24:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:DF:7E:A8:9B:E5:64:13:E9:A5:A3:46:E1:FB:3F:E3:AD:F5:E7
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/Y8Pffqib5WQT6aWjRuH7P-Ot9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.24.0/24
5.188.36.0/24
5.188.148.0/24
5.188.168.0/23
5.188.190.0/24
37.9.32.0/23
78.111.99.0/24
78.111.101.0-78.111.102.255
78.111.105.0/24
80.93.209.0-80.93.210.255
80.93.214.0/23
80.93.217.0-80.93.219.255
80.93.223.0/24
92.38.148.0/24
92.38.155.0/24
92.38.173.0/24
92.38.180.0/23
92.38.186.0/23
92.223.102.0/24
95.85.76.0/24
103.215.218.0/24
139.28.6.0/24
146.185.216.0/23
146.185.236.0/23
146.185.248.0/24
217.195.193.0/24
217.195.205.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:6a:1b:fd:93:48:6b:84:c1:11:11:70:b9:15:53:24:ad:34:
4c:65:b4:9f:8d:f6:bb:f8:e7:62:1a:69:96:aa:c3:16:ea:35:
36:f7:5b:91:c5:6e:ba:19:b8:26:78:24:61:7d:ee:50:b0:17:
1d:f5:8a:65:a2:37:3e:97:d3:9c:ef:a3:58:5d:43:76:2e:ce:
c7:8a:c3:92:8c:6b:ad:45:16:4e:ce:83:0d:ea:15:9c:b3:e0:
08:20:cf:86:0d:a2:09:68:53:9d:7b:27:39:08:c1:26:3f:b0:
ac:6f:00:76:b4:1c:dd:c9:8d:c0:cc:2d:66:ef:c6:83:01:5c:
31:b5:d1:f8:c0:ab:76:2e:72:23:27:90:65:ab:17:c0:ea:b1:
55:08:37:b0:42:a6:80:64:d8:b8:a5:e4:83:24:ff:b4:10:d8:
4c:fc:6f:76:52:3c:5e:ad:89:c8:c0:ad:30:45:82:60:56:03:
c3:99:f7:2b:e2:f9:97:1e:a8:1b:ff:eb:4a:31:52:8b:48:80:
59:a8:51:4b:90:75:95:9a:bc:88:d6:02:c5:38:56:97:b8:10:
1b:37:33:d8:7f:81:45:c4:97:60:d2:17:47:28:07:74:7c:20:
9a:77:51:1d:32:2c:50:af:55:c8:54:31:df:d3:11:d7:83:88:
ca:86:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org