Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/2cMksfmdyBiBx6A1GQmw4jzhtMM.roa
File: 2cMksfmdyBiBx6A1GQmw4jzhtMM.roa (raw, json)
Hash identifier: sW/sdFETkfciqdzvY44QUB3oTyE2yuRVsaExHyG1sdU=
Subject key identifier: D9:C3:24:B1:F9:9D:C8:18:81:C7:A0:35:19:09:B0:E2:3C:E1:B4:C3
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 01856D8AFB7ED87D35C53C3B43ED874A8294
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/2cMksfmdyBiBx6A1GQmw4jzhtMM.roa
Signing time: Sun 01 Jan 2023 13:35:02 +0000
ROA not before: Sun 01 Jan 2023 13:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8781
IP address blocks: 78.100.112.0/20 maxlen: 24
78.100.128.0/19 maxlen: 24
37.211.192.0/20 maxlen: 24
78.100.155.0/24 maxlen: 24
37.211.96.0/22 maxlen: 24
78.100.53.0/24 maxlen: 24
78.100.64.0/20 maxlen: 24
37.211.104.0/22 maxlen: 24
37.211.100.0/22 maxlen: 24
78.100.59.0/24 maxlen: 24
185.96.224.0/22 maxlen: 24
37.211.112.0/22 maxlen: 24
37.211.108.0/22 maxlen: 24
37.211.116.0/22 maxlen: 24
37.211.124.0/22 maxlen: 24
37.211.120.0/22 maxlen: 24
78.100.80.0/20 maxlen: 24
176.202.0.0/15 maxlen: 24
37.211.208.0/22 maxlen: 24
37.211.212.0/22 maxlen: 24
37.211.216.0/22 maxlen: 24
37.211.224.0/22 maxlen: 24
37.208.128.0/17 maxlen: 24
37.211.228.0/22 maxlen: 24
37.211.232.0/22 maxlen: 24
37.211.236.0/22 maxlen: 24
37.211.240.0/20 maxlen: 24
78.100.2.0/24 maxlen: 24
78.100.3.0/24 maxlen: 24
86.62.241.0/24 maxlen: 24
78.100.6.0/24 maxlen: 24
89.211.48.0/20 maxlen: 24
78.100.0.0/15 maxlen: 24
213.130.96.0/19 maxlen: 24
213.130.112.0/24 maxlen: 24
213.130.113.0/24 maxlen: 24
78.100.32.0/20 maxlen: 24
78.100.32.0/24 maxlen: 24
213.130.121.0/24 maxlen: 24
213.130.119.0/24 maxlen: 24
78.100.48.0/20 maxlen: 24
78.100.48.0/24 maxlen: 24
86.62.192.0/18 maxlen: 24
89.211.4.0/24 maxlen: 24
89.211.3.0/24 maxlen: 24
89.211.0.0/16 maxlen: 24
89.211.7.0/24 maxlen: 24
89.211.6.0/24 maxlen: 24
89.211.5.0/24 maxlen: 24
89.211.16.0/21 maxlen: 24
89.211.24.0/21 maxlen: 24
89.211.32.0/20 maxlen: 24
37.210.0.0/15 maxlen: 24
212.77.192.0/24 maxlen: 24
212.77.192.0/19 maxlen: 24
212.77.199.0/24 maxlen: 24
212.77.204.0/24 maxlen: 24
212.77.202.0/24 maxlen: 24
212.77.207.0/24 maxlen: 24
212.77.211.0/24 maxlen: 24
212.77.210.0/24 maxlen: 24
212.77.209.0/24 maxlen: 24
212.77.218.0/24 maxlen: 24
212.77.217.0/24 maxlen: 24
212.77.221.0/24 maxlen: 24
212.77.220.0/24 maxlen: 24
82.148.96.0/19 maxlen: 24
82.148.96.0/24 maxlen: 24
178.152.0.0/15 maxlen: 24
2001:1a10::/29 maxlen: 48
2001:1a10:c1::/48 maxlen: 48
2001:1a11::/32 maxlen: 48
2001:1a10:1::/48 maxlen: 48
2001:1a10:cd::/48 maxlen: 64
2001:1a10:4000::/36 maxlen: 36
2001:1a10::/40 maxlen: 48
2001:1a10:100::/40 maxlen: 40
2001:1a10::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:fb:7e:d8:7d:35:c5:3c:3b:43:ed:87:4a:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Jan 1 13:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9c324b1f99dc81881c7a0351909b0e23ce1b4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:46:19:4c:d7:d0:17:c3:ea:ba:9f:e3:89:
81:9e:dd:16:ff:39:ab:e7:ad:5f:59:4b:4e:a3:11:
ff:91:1d:09:33:1c:4c:0f:4d:44:c4:e7:b0:83:06:
ae:2d:c1:e9:4a:ee:2e:b0:de:ab:f7:9e:4f:5d:40:
5a:96:a9:fd:58:94:4f:29:19:99:dd:0a:f6:81:ce:
0d:ed:cf:3f:59:65:09:2f:7f:87:90:21:3d:a5:0a:
cd:9f:11:34:61:66:14:37:bd:09:65:63:34:7b:d7:
5c:4d:fe:f4:55:af:17:37:e3:ab:92:1d:29:7a:90:
1a:e2:1f:1c:e3:b1:25:09:95:1d:fe:8c:ba:24:b8:
84:56:cd:4a:1a:63:e6:c8:5c:ab:1d:97:2f:f3:1e:
79:d2:9b:23:55:b8:f0:e8:99:7c:de:e7:be:dc:50:
25:3b:e8:be:22:f8:b7:0f:65:06:10:47:ae:49:c6:
37:3f:55:6a:3d:c7:0a:19:9c:0d:8a:d7:71:d1:eb:
44:95:4d:86:7d:65:15:fc:dd:22:e7:28:e5:d5:89:
5e:88:af:5c:e5:60:84:3c:be:3d:53:c1:17:5a:b2:
c6:b5:f8:6d:58:ca:63:de:49:6f:dc:1b:97:b2:09:
1b:78:7c:51:df:da:8e:3e:38:5f:d6:65:2d:4a:89:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:24:B1:F9:9D:C8:18:81:C7:A0:35:19:09:B0:E2:3C:E1:B4:C3
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/2cMksfmdyBiBx6A1GQmw4jzhtMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.128.0/17
37.210.0.0/15
78.100.0.0/15
82.148.96.0/19
86.62.192.0/18
89.211.0.0/16
176.202.0.0/15
178.152.0.0/15
185.96.224.0/22
212.77.192.0/19
213.130.96.0/19
IPv6:
2001:1a10::/29
Signature Algorithm: sha256WithRSAEncryption
1e:cd:85:d6:cf:19:3e:4b:3b:32:ec:5c:06:a9:8c:47:02:e2:
42:45:a0:57:45:1e:b4:b6:24:a1:9b:80:a7:d4:f2:0b:02:4e:
a9:37:c9:5e:d3:77:85:7e:51:d0:2c:fc:4b:4e:16:36:87:f4:
57:54:a7:0c:61:60:ca:d6:e5:72:6b:c1:2d:cb:60:c7:27:d1:
96:14:2e:10:59:ee:4b:54:c4:7f:86:90:df:9f:0b:cd:aa:f5:
b0:62:47:32:b2:12:a0:3c:13:84:16:7f:1a:dc:15:06:9b:96:
22:0e:a9:71:7a:f9:af:b8:e8:8b:df:2d:cc:e1:3e:17:c5:aa:
8c:54:62:9e:03:b8:56:86:46:17:ca:a7:6d:73:97:d7:13:7e:
f0:78:93:89:db:15:b9:8c:f1:89:8c:ed:5c:94:14:d0:4c:cc:
a3:21:f0:94:ee:ab:3f:05:44:bd:4b:57:06:a9:52:59:57:94:
2c:68:66:b1:bf:f8:ad:b5:d1:35:ee:9d:04:55:62:b8:be:7b:
73:cd:86:69:46:b6:59:09:03:5d:e8:e3:bd:ff:1f:1c:e9:69:
d7:f1:36:4f:9e:c8:e6:00:54:11:f0:86:fe:28:d7:2b:6a:d1:
ef:20:12:a0:ee:69:b7:08:06:18:66:90:0c:fe:5d:d1:ea:a2:
60:75:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:31 2024 by rpki-client on console-fra.rpki-client.org