Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/9xlBCbGknXWkhNnwz2gMownnFuA.roa
File: 9xlBCbGknXWkhNnwz2gMownnFuA.roa (raw, json)
Hash identifier: ceU64cJF4esZUXslQKtSNGg+i2pXeI/YJ4xXGMe97Pk=
Subject key identifier: F7:19:41:09:B1:A4:9D:75:A4:84:D9:F0:CF:68:0C:A3:09:E7:16:E0
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 018CCA2BCD162580CB6ABEE48C302292F4E0
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/9xlBCbGknXWkhNnwz2gMownnFuA.roa
Signing time: Tue 02 Jan 2024 12:35:17 +0000
ROA not before: Tue 02 Jan 2024 12:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 80.144.0.0/13 maxlen: 13
80.156.0.0/16 maxlen: 16
62.156.0.0/14 maxlen: 14
217.224.0.0/11 maxlen: 11
80.128.0.0/11 maxlen: 11
46.80.0.0/12 maxlen: 12
217.80.0.0/12 maxlen: 12
193.158.0.0/15 maxlen: 15
194.25.0.0/16 maxlen: 16
62.153.0.0/16 maxlen: 16
217.0.0.0/13 maxlen: 13
80.157.0.0/16 maxlen: 16
80.157.8.0/21 maxlen: 21
91.0.0.0/10 maxlen: 10
79.192.0.0/10 maxlen: 10
87.128.0.0/10 maxlen: 10
84.128.0.0/10 maxlen: 10
93.192.0.0/10 maxlen: 10
62.224.0.0/14 maxlen: 14
195.145.0.0/16 maxlen: 16
62.154.0.0/15 maxlen: 15
80.128.0.0/12 maxlen: 12
80.157.16.0/20 maxlen: 20
212.184.0.0/15 maxlen: 15
195.243.0.0/16 maxlen: 16
80.152.0.0/14 maxlen: 14
2003:3c0::/28 maxlen: 28
2003:8:f40a::/48 maxlen: 48
2003:8:f405::/48 maxlen: 48
2003:8:f408::/48 maxlen: 48
2003:8:f403::/48 maxlen: 48
2003:3e0::/28 maxlen: 28
2003::/23 maxlen: 23
2003:8:f40d::/48 maxlen: 48
2003:8:f40b::/48 maxlen: 48
2003:8:f406::/48 maxlen: 48
2003:8:f401::/48 maxlen: 48
2003:8:f404::/48 maxlen: 48
2003::/19 maxlen: 19
2003:8:f40e::/48 maxlen: 48
2003:8:f409::/48 maxlen: 48
2003:8:f40c::/48 maxlen: 48
2003:8:f407::/48 maxlen: 48
2003:8:f402::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Jan 2024 09:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cd:16:25:80:cb:6a:be:e4:8c:30:22:92:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 2 12:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7194109b1a49d75a484d9f0cf680ca309e716e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:ad:4d:ad:44:6a:ae:59:59:41:80:6b:47:
4d:f6:3d:9f:8f:f7:1c:38:69:69:75:1d:a5:35:5b:
7b:a2:81:75:a2:d0:0f:e9:67:d1:04:22:6f:46:58:
27:28:f1:15:a5:43:84:b0:ae:14:2e:60:1f:5d:a7:
48:b2:cd:5c:dc:3c:15:f7:de:8f:1d:6d:db:c6:04:
b8:5d:82:7b:5b:df:5b:c3:d7:8c:25:77:1b:2e:d3:
0d:d1:48:01:ee:10:15:c9:b0:b4:f2:4c:e6:35:da:
38:67:3c:d5:3d:d3:d8:6f:a1:11:e5:d5:da:6a:db:
de:a2:a3:79:23:77:af:8e:16:a7:92:dd:54:3b:26:
1c:97:b2:ce:54:6a:d1:11:e9:95:93:00:91:42:da:
16:43:5b:e8:61:2e:cd:6b:ce:17:b6:bf:f2:1a:df:
cb:b5:ce:05:80:df:a5:03:57:53:a6:d4:d2:00:43:
ae:22:d0:6e:f3:31:f8:41:dc:22:d1:ce:1a:dd:20:
8d:89:8e:06:29:3f:72:a3:ac:1f:e7:84:5c:06:87:
1f:ed:a3:47:77:75:d4:bb:70:12:e8:a5:d1:d8:90:
af:6a:e0:3b:60:86:47:53:47:66:e0:3a:00:22:ff:
0c:d0:58:e8:1b:09:b0:72:f4:7d:8b:fe:8a:d7:73:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:41:09:B1:A4:9D:75:A4:84:D9:F0:CF:68:0C:A3:09:E7:16:E0
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/9xlBCbGknXWkhNnwz2gMownnFuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.80.0.0/12
62.153.0.0-62.159.255.255
62.224.0.0/14
79.192.0.0/10
80.128.0.0/11
84.128.0.0/10
87.128.0.0/10
91.0.0.0/10
93.192.0.0/10
193.158.0.0/15
194.25.0.0/16
195.145.0.0/16
195.243.0.0/16
212.184.0.0/15
217.0.0.0/13
217.80.0.0/12
217.224.0.0/11
IPv6:
2003::/19
Signature Algorithm: sha256WithRSAEncryption
10:3a:ea:af:81:3d:88:0a:67:81:e6:18:4a:75:5f:7a:53:19:
01:ce:56:fc:f5:21:6e:a8:d5:44:15:69:ee:38:87:84:07:20:
ba:9c:04:dd:f6:bd:74:9b:d3:fb:38:3b:12:29:4a:1c:69:ed:
b5:9f:1b:62:04:2b:14:f7:07:6a:fa:4d:0e:02:42:e7:3e:9e:
75:2c:af:04:ad:65:a3:95:49:1e:cc:31:3d:fa:3a:b7:c6:71:
1a:e4:e9:81:4b:10:26:e1:82:78:1a:97:38:d0:07:22:de:79:
bb:e3:23:00:52:a6:19:ec:e2:1a:69:f3:7a:72:57:30:41:cb:
24:b1:40:43:2b:3c:57:ba:4a:a0:b0:41:86:c6:40:c2:ca:66:
8e:f6:17:ee:5a:59:cd:8a:0b:fa:51:30:59:09:20:ab:c3:10:
2d:09:12:24:69:a5:89:a3:92:6b:96:ca:4e:9f:0c:f5:b4:21:
09:37:d2:3f:f2:76:df:54:03:13:c5:6c:dd:39:ba:7d:d9:61:
9f:28:2f:42:5f:27:b2:a6:65:3c:28:75:7d:fa:d7:10:22:75:
39:96:ff:79:f6:99:a5:67:ce:1d:cb:c1:9c:8f:04:d5:29:bc:
74:1b:c4:df:dc:1f:b3:f1:ce:34:91:94:a8:25:f0:38:1e:62:
38:94:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 12:48:38 2024 by rpki-client on console-ams.rpki-client.org