Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tTOQDq2YIcULlCAN--CsyHMO06I.roa
File: tTOQDq2YIcULlCAN--CsyHMO06I.roa (raw, json)
Hash identifier: CcxL7C7QYTWgnfSAwNV0NYUbJS5OBg7MikLMrRCDtKw=
Subject key identifier: B5:33:90:0E:AD:98:21:C5:0B:94:20:0D:FB:E0:AC:C8:73:0E:D3:A2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018697549EEDE262C5E5EECECAABC7ADB52B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tTOQDq2YIcULlCAN--CsyHMO06I.roa
Signing time: Tue 28 Feb 2023 09:22:30 +0000
ROA not before: Tue 28 Feb 2023 09:22:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28964
IP address blocks: 178.253.193.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
188.255.205.0/24 maxlen: 24
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
178.253.250.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.219.4.0/22 maxlen: 22
178.219.15.0/24 maxlen: 24
178.219.12.0/23 maxlen: 23
77.105.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:54:9e:ed:e2:62:c5:e5:ee:ce:ca:ab:c7:ad:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 28 09:22:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b533900ead9821c50b94200dfbe0acc8730ed3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:2e:8d:a6:3c:98:21:7b:14:99:7b:74:1a:
79:10:7b:bd:30:56:fc:97:d9:15:16:62:8a:9d:e4:
5a:70:9c:0a:e7:f9:23:4d:71:a6:58:5c:79:15:33:
3c:68:8a:21:b4:8f:da:52:07:61:d2:6d:91:a2:e6:
e4:36:68:20:a6:37:13:be:5b:4c:74:12:cd:56:ad:
c3:63:4e:02:6b:9c:0e:ff:b6:3a:2d:ed:9c:7f:4f:
55:a4:f8:35:4e:e1:72:27:71:67:14:7c:b7:d1:f9:
36:c0:66:0a:34:85:18:b3:73:86:ae:5e:5f:74:48:
73:1a:86:75:d5:5a:b5:74:7d:14:c9:c0:18:ef:e5:
75:6d:ca:0d:c6:70:99:94:23:f1:34:9f:82:40:a8:
f6:d1:2d:46:0e:a8:89:68:f4:a2:6f:4e:7d:86:bc:
8f:d1:4c:af:d6:ab:bd:4e:e0:b4:77:3d:3e:e5:3d:
3c:a6:53:d7:34:c3:18:6b:5e:e8:e3:71:c3:ed:2b:
d3:a1:98:d9:0d:3b:03:ef:23:a4:93:fa:a1:63:2f:
59:dc:a1:ec:c7:5f:c3:2c:4b:b2:7e:c5:2d:21:22:
ea:a9:b9:57:44:f0:b8:ad:0a:a7:4e:80:21:09:bd:
7f:1c:56:38:2b:37:3c:ad:12:ba:de:df:c4:7a:67:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:90:0E:AD:98:21:C5:0B:94:20:0D:FB:E0:AC:C8:73:0E:D3:A2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/tTOQDq2YIcULlCAN--CsyHMO06I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.39.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
178.219.2.0/24
178.219.4.0/22
178.219.12.0/23
178.219.15.0/24
178.253.193.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.220.0/23
178.253.238.0/24
178.253.244.0-178.253.246.255
178.253.250.0/24
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.199.255
188.255.205.0/24
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.3.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0c:9f:0a:7d:38:93:86:3b:53:fd:5b:de:ff:bf:f2:72:57:
c1:42:bd:7b:68:73:af:37:2f:83:ca:f6:cd:3e:94:56:d8:7f:
df:65:19:b0:2d:23:bc:4a:d0:16:6f:2d:29:78:4f:0c:54:bd:
dd:38:24:88:7d:71:45:72:fc:71:81:8b:38:7f:38:bd:35:47:
ee:0e:32:30:56:0d:49:22:b5:3c:e8:4e:06:2f:33:2c:7b:fc:
6a:2c:f9:3d:fa:73:42:53:e6:8e:ba:6c:91:ba:a4:04:3a:53:
a8:85:9d:e1:11:18:c2:49:74:c3:c6:e5:01:e9:2f:1b:b1:81:
61:53:5f:eb:6d:17:34:18:f3:a7:3f:27:4a:5e:14:9d:c2:f1:
56:14:3f:5e:46:4c:1e:7c:18:e0:c3:4f:5d:81:85:91:1d:46:
8b:20:01:81:9b:b7:22:9f:e5:4a:f1:53:03:bf:e5:0f:fb:37:
4b:a1:67:46:fd:f0:f3:11:1f:c9:d6:39:b6:9c:6b:e7:4b:07:
b6:19:c0:15:8a:0f:1a:53:2a:2b:f8:e6:ee:04:51:a2:0f:aa:
36:4e:4e:07:db:94:82:42:3a:8c:52:18:58:ba:2b:76:9e:d8:
29:64:02:a7:b9:f8:43:3f:c2:a3:0c:a4:14:97:9b:b8:5a:7c:
ed:ab:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org