Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pj245-w9UpjyLIahDVV5OF5qimk.roa
File: Pj245-w9UpjyLIahDVV5OF5qimk.roa (raw, json)
Hash identifier: 16zZNk5Zh9f1i4uCR5me3jzQK1ZZN+h6i5S6uArBJ+8=
Subject key identifier: 3E:3D:B8:E7:EC:3D:52:98:F2:2C:86:A1:0D:55:79:38:5E:6A:8A:69
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7CFB5C69B585CAD23C279BAD4FE8F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pj245-w9UpjyLIahDVV5OF5qimk.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28964
IP address blocks: 178.253.193.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
188.255.206.0/23 maxlen: 23
188.255.205.0/24 maxlen: 24
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
109.233.190.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
178.253.250.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.219.4.0/22 maxlen: 22
178.219.15.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
77.105.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cf:b5:c6:9b:58:5c:ad:23:c2:79:ba:d4:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e3db8e7ec3d5298f22c86a10d5579385e6a8a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:6d:e7:25:b8:12:fc:06:9e:96:fb:b0:8a:
2e:d9:e7:45:e9:02:9b:56:96:a3:f5:ee:1b:89:3c:
7b:ab:9b:8c:aa:80:d7:ce:2f:b4:c6:79:a9:8c:0b:
4b:60:3a:08:6c:59:9b:36:e6:14:15:91:fe:e0:81:
65:75:23:2f:7d:df:a1:21:e4:e2:55:d9:69:63:98:
a7:99:d6:b0:d6:6c:81:44:81:5c:3a:ea:3a:38:42:
ab:84:26:a8:28:86:a8:20:3c:69:9f:be:64:7b:12:
9b:ef:8b:52:df:42:95:7e:94:f1:78:c4:1d:f2:3d:
ca:75:cd:5b:62:2e:63:c8:33:f6:b3:a0:22:80:02:
46:2d:1e:a2:f1:cc:f2:28:12:3d:14:fb:88:9a:36:
92:5c:e1:48:41:81:28:cd:cf:98:be:7d:4f:ce:55:
33:0f:7c:d3:f0:de:92:3e:02:58:64:82:4a:28:d3:
f5:03:2a:11:5a:39:68:7c:2d:19:07:3a:ab:5c:1b:
13:10:ca:20:e8:98:df:38:b4:cf:c5:c2:9a:d1:0c:
da:df:44:30:a6:48:9f:17:04:d2:32:5e:99:79:69:
67:ee:f5:be:82:07:c0:c0:ce:63:59:2c:95:e7:2d:
b6:36:bd:a9:6e:c5:84:b8:92:51:08:fe:a4:fd:67:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:B8:E7:EC:3D:52:98:F2:2C:86:A1:0D:55:79:38:5E:6A:8A:69
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pj245-w9UpjyLIahDVV5OF5qimk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.39.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
109.233.190.0/24
178.219.2.0/24
178.219.4.0/22
178.219.12.0/23
178.219.15.0/24
178.253.193.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.220.0/23
178.253.238.0/24
178.253.244.0-178.253.246.255
178.253.250.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.199.255
188.255.205.0-188.255.207.255
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.3.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
17:66:2a:20:22:21:d8:f9:dd:9d:ff:2e:49:46:ff:d5:0a:5e:
f8:0a:e7:ee:a2:27:72:bd:0f:67:3a:08:58:9c:73:f5:cd:f7:
a2:97:c8:5e:3b:eb:fc:8b:74:c5:a0:ec:93:c2:75:22:83:e4:
78:c8:39:f1:ef:67:89:03:6c:ab:06:cf:9e:4a:41:03:26:5c:
a9:b0:89:c0:74:ea:f7:fe:54:ff:f5:8d:85:9e:08:69:87:be:
4d:b8:6f:38:e6:f5:33:9b:9f:18:90:69:03:97:43:f3:27:66:
8e:d7:97:b4:1a:f9:dd:1c:8f:df:16:6b:61:a2:00:32:3b:2b:
c7:a9:d0:22:a0:cf:9b:e2:13:34:2d:25:07:c5:10:d6:f9:ae:
0c:3e:8d:78:92:53:d1:35:ab:c8:a5:1c:1b:71:d5:18:84:b1:
b0:b3:ac:f3:f9:6c:fc:d7:78:99:a9:54:01:a1:4d:2f:49:03:
cd:ab:6b:f0:d3:aa:b7:91:53:f7:25:f4:25:14:d6:98:03:a8:
dd:fa:a1:7e:61:1e:19:62:d8:6a:55:89:df:6d:da:61:39:d4:
00:6e:b5:56:15:2f:05:e4:9a:3c:91:26:c6:b8:0f:eb:22:5b:
7d:5e:03:3c:e0:0a:19:00:46:45:0f:2a:08:3f:96:01:2a:97:
35:7a:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org