Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/svQAZ5zkrgiLXriI4NwqnsUUDAM.roa
File: svQAZ5zkrgiLXriI4NwqnsUUDAM.roa (raw, json)
Hash identifier: gcybbFLuP5KAvxgQRX3f6Lfkm8FIxpPNp4rfhCZztqQ=
Subject key identifier: B2:F4:00:67:9C:E4:AE:08:8B:5E:B8:88:E0:DC:2A:9E:C5:14:0C:03
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018DCE00149ED06E4E9573B39C39BEF079A7
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/svQAZ5zkrgiLXriI4NwqnsUUDAM.roa
Signing time: Wed 21 Feb 2024 23:28:48 +0000
ROA not before: Wed 21 Feb 2024 23:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 84.18.0.0/19 maxlen: 19
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.60.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
195.5.64.0/19 maxlen: 19
212.49.128.0/18 maxlen: 18
212.49.129.0/24 maxlen: 24
212.49.189.0/24 maxlen: 24
212.59.192.0/19 maxlen: 19
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 20
212.163.0.0/16 maxlen: 16
212.163.1.0/24 maxlen: 24
212.163.5.0/24 maxlen: 24
212.163.31.0/24 maxlen: 24
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
212.163.240.0/20 maxlen: 20
213.9.128.0/17 maxlen: 17
213.9.142.0/23 maxlen: 23
213.9.144.0/24 maxlen: 24
213.9.162.0/23 maxlen: 23
213.9.182.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
213.9.240.0/23 maxlen: 23
213.9.244.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.246.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.192.192.0/18 maxlen: 18
213.192.193.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 32
2001:ac0:30fd::/48 maxlen: 48
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 06 Mar 2024 09:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ce:00:14:9e:d0:6e:4e:95:73:b3:9c:39:be:f0:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Feb 21 23:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2f400679ce4ae088b5eb888e0dc2a9ec5140c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:d5:d9:6f:1e:b7:27:d2:6d:b9:b2:1f:fb:
db:fe:9d:36:dd:52:fa:b7:ed:13:92:85:f3:46:c8:
e0:ca:d3:2f:a4:a1:c3:89:fe:d9:d0:24:0e:58:b5:
29:a5:d1:45:11:3b:32:f3:e1:9e:91:80:37:f5:4b:
9e:68:e4:32:91:74:9d:8f:8d:f5:10:95:80:66:f0:
93:6e:5f:ba:e1:8c:61:63:4e:35:ab:d6:54:37:b5:
8a:df:9a:55:57:2d:35:e9:7a:d9:57:01:a1:fd:b2:
28:98:0e:bb:4d:16:1f:c4:82:36:ba:c8:d0:fb:37:
c3:db:55:19:ad:c1:da:85:e2:e7:73:70:70:06:ad:
e9:b5:04:36:9c:4b:b7:92:4f:fb:a7:78:5a:50:6b:
72:1a:9c:37:82:f2:cd:39:9c:5c:5e:f4:29:57:0f:
bd:fa:e3:a5:43:76:c0:62:a2:03:1a:7f:79:83:11:
3c:02:24:fa:1e:37:94:55:48:56:42:95:45:12:80:
bf:c6:5e:9a:cc:2f:7e:46:47:51:49:5a:a9:ac:8f:
71:3e:90:18:aa:b6:3b:0d:5d:c4:94:48:89:f6:5e:
02:7b:20:58:95:46:c9:28:a2:b5:55:02:80:f6:96:
3c:d5:36:75:c1:a0:99:92:75:36:b7:88:e5:f7:59:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:00:67:9C:E4:AE:08:8B:5E:B8:88:E0:DC:2A:9E:C5:14:0C:03
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/svQAZ5zkrgiLXriI4NwqnsUUDAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
92.60.160.0/20
185.66.60.0/22
195.5.64.0/19
212.49.128.0/18
212.59.192.0/19
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
00:c6:59:66:98:36:75:fe:50:85:a4:11:e5:ca:77:f4:a3:58:
c5:7e:15:79:2a:d5:20:a2:34:31:b1:07:36:ac:1a:80:50:9c:
24:9f:7c:29:a4:30:9f:ba:82:db:57:69:0e:d0:e2:ea:ad:0f:
54:15:d1:62:98:a5:29:71:d2:40:d7:af:25:6d:a8:1a:01:b0:
0a:ff:7e:bc:fc:33:ff:ab:ea:7c:84:a2:09:db:20:81:ef:d8:
e9:d0:4c:94:54:1d:93:1b:9b:9a:69:59:e2:29:ba:10:6f:6c:
af:b8:dd:6e:2a:50:1a:d8:f6:25:aa:66:11:40:46:f4:90:5a:
4a:8b:0c:39:19:3d:3e:4b:e7:a1:c9:5a:61:a7:83:45:ab:43:
53:52:5d:c1:ad:e8:0d:d0:e5:70:fc:1b:46:59:12:26:b0:72:
05:eb:09:65:73:17:be:e1:08:5a:d4:74:3d:da:a3:e7:e7:e8:
f4:53:3e:ce:31:6d:6b:17:02:2a:7d:1f:e0:db:f0:7d:09:07:
71:af:b6:c3:ed:7f:ae:b9:86:56:f0:5f:bc:0c:a0:38:d5:a0:
fb:11:f7:9f:49:1e:98:61:59:64:df:c2:b8:27:06:d5:f7:1e:
30:4e:b6:3c:6d:c6:19:af:79:80:48:ba:de:b6:1c:7d:35:ce:
bc:0d:a1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 13:57:26 2024 by rpki-client on console-ams.rpki-client.org