Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/y9Ahd19y_C9SbyGmhv4VgSAf9Rc.roa
File: y9Ahd19y_C9SbyGmhv4VgSAf9Rc.roa (raw, json)
Hash identifier: t6NJc+N8ISl+8lUwv1XCvf2KbY90bi+c8rre2uK22Ps=
Subject key identifier: CB:D0:21:77:5F:72:FC:2F:52:6F:21:A6:86:FE:15:81:20:1F:F5:17
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018CC86F85200226D9E3182A4C8A7898B327
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/y9Ahd19y_C9SbyGmhv4VgSAf9Rc.roa
Signing time: Tue 02 Jan 2024 04:30:00 +0000
ROA not before: Tue 02 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 213.9.128.0/17 maxlen: 17
213.9.142.0/23 maxlen: 23
213.9.144.0/24 maxlen: 24
213.9.162.0/23 maxlen: 23
212.49.189.0/24 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.162.0/23 maxlen: 23
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 20
213.9.240.0/23 maxlen: 23
213.9.246.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.244.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.9.182.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.49.128.0/18 maxlen: 18
212.49.129.0/24 maxlen: 24
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
185.66.60.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
212.163.240.0/20 maxlen: 20
84.18.0.0/19 maxlen: 19
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.235.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.238.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.241.0/24 maxlen: 24
213.192.246.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.248.0/21 maxlen: 21
213.192.253.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.249.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.1.0/24 maxlen: 24
212.163.0.0/16 maxlen: 16
212.163.5.0/24 maxlen: 24
212.163.31.0/24 maxlen: 24
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
213.192.193.0/24 maxlen: 24
213.192.192.0/18 maxlen: 18
213.192.203.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
2001:ac0:30fd::/48 maxlen: 48
2001:ac0::/32 maxlen: 32
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 16 Feb 2024 10:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:85:20:02:26:d9:e3:18:2a:4c:8a:78:98:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jan 2 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd021775f72fc2f526f21a686fe1581201ff517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:69:f0:2a:06:27:75:f0:68:07:db:6e:76:
bb:95:78:c0:12:b5:fe:1f:77:dc:02:ca:99:e1:ef:
d7:9b:cc:eb:ce:86:eb:cc:45:0d:0d:d1:51:f3:fd:
7a:11:bf:69:8c:54:ad:e6:33:7d:78:40:e5:32:f5:
df:9e:6e:6a:22:a5:5d:4d:f0:0e:69:12:cc:c5:3f:
53:e6:a6:8b:5b:a9:be:5d:73:14:9c:81:e9:5d:1c:
fa:37:13:c0:08:d1:95:8a:e3:00:c2:a7:04:2d:de:
39:e8:65:28:e1:19:21:a9:20:c8:89:54:a8:ff:36:
bd:3d:13:3a:7d:df:9a:ac:24:2c:5e:5c:19:83:19:
c4:bb:c5:8d:99:e1:ec:24:6d:bf:b9:07:4f:77:17:
c4:9d:2a:40:0f:d8:81:88:44:58:9b:e1:3b:33:a9:
0d:09:b4:62:8d:0a:02:4d:51:8c:5c:46:88:67:5b:
ac:63:2f:71:b3:33:46:b4:1b:54:6d:2e:e5:b2:63:
5a:c7:3c:47:a6:eb:55:43:88:f7:2c:86:00:8d:d4:
e8:ad:6c:23:06:2a:96:78:e7:57:28:c7:2c:f5:04:
ec:a2:13:86:1d:88:89:4c:6a:4f:f7:29:9b:52:c3:
3c:44:b2:46:26:7f:43:da:3f:85:bc:27:a9:9b:ad:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:21:77:5F:72:FC:2F:52:6F:21:A6:86:FE:15:81:20:1F:F5:17
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/y9Ahd19y_C9SbyGmhv4VgSAf9Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
92.60.160.0/20
185.66.60.0/22
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:38:69:eb:f8:6b:05:b7:dd:b8:d6:c2:a0:5f:91:b5:a2:5e:
50:51:b9:ff:d7:b8:a9:1a:0a:c2:bb:fc:1f:36:a0:eb:c9:6e:
7a:7e:5f:c5:22:98:dd:0b:6a:7d:d0:cf:24:72:5f:b1:35:34:
f3:96:bb:a3:4b:52:80:c4:bb:32:44:17:56:86:6d:bb:a5:77:
29:de:67:89:d0:d3:29:80:2b:82:ae:b2:3c:25:a1:76:0c:48:
37:f4:ad:89:1f:46:ad:32:38:51:22:d3:62:74:10:ad:b7:24:
55:70:49:cc:a6:3f:39:08:68:b5:ac:e0:8d:7e:71:52:5a:05:
f5:cd:ee:38:fd:a2:ed:a6:76:5f:19:b0:0f:c5:19:95:dd:63:
09:a1:17:fd:32:20:0b:d6:55:6f:6c:25:5a:4e:08:a2:b9:ff:
fd:0a:1f:f5:00:82:95:f8:22:f4:b8:0f:13:7b:fc:b9:ab:a3:
b2:8f:c4:6a:b3:29:d1:ff:34:0f:43:f6:29:0f:5f:00:bd:46:
3a:a1:58:5c:db:00:8b:68:46:fb:c9:f3:7a:50:97:3c:bc:ff:
ed:9e:7d:f3:1f:1d:48:6b:3e:c3:d9:ac:36:b4:5e:fb:98:8a:
8d:4e:54:63:ba:78:96:b0:ec:24:c5:74:47:d4:a6:d7:73:d7:
51:c1:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org