Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/vESUfzH-hzYh5lLdrkn2Tmfcygc.roa
File: vESUfzH-hzYh5lLdrkn2Tmfcygc.roa (raw, json)
Hash identifier: YQQ9TfQyPMt2bvC4eLvmXaY8RoTcYK82/+0PsyJWNQ8=
Subject key identifier: BC:44:94:7F:31:FE:87:36:21:E6:52:DD:AE:49:F6:4E:67:DC:CA:07
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 0189B05CEC3F153FA54A3B8646CCD78AAC22
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/vESUfzH-hzYh5lLdrkn2Tmfcygc.roa
Signing time: Tue 01 Aug 2023 09:10:27 +0000
ROA not before: Tue 01 Aug 2023 09:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.245.0/24 maxlen: 24
185.1.244.0/24 maxlen: 24
185.1.246.0/24 maxlen: 24
185.1.248.0/24 maxlen: 24
185.1.252.0/24 maxlen: 24
185.1.253.0/24 maxlen: 24
185.1.176.0/24 maxlen: 24
185.1.183.0/24 maxlen: 24
185.1.182.0/24 maxlen: 24
185.1.187.0/24 maxlen: 24
185.1.192.0/23 maxlen: 23
185.1.197.0/24 maxlen: 24
185.1.204.0/24 maxlen: 24
185.1.210.0/23 maxlen: 23
185.1.208.0/23 maxlen: 23
185.1.220.0/24 maxlen: 24
185.1.48.0/24 maxlen: 24
185.1.47.0/24 maxlen: 24
185.1.46.0/24 maxlen: 24
80.81.192.0/21 maxlen: 21
80.81.203.0/24 maxlen: 24
80.81.202.0/24 maxlen: 24
185.1.8.0/24 maxlen: 24
185.1.119.0/24 maxlen: 24
185.1.131.0/24 maxlen: 24
185.1.170.0/23 maxlen: 23
185.0.4.0/24 maxlen: 24
185.0.7.0/24 maxlen: 24
185.0.6.0/24 maxlen: 24
185.0.5.0/24 maxlen: 24
185.0.8.0/24 maxlen: 24
185.0.17.0/24 maxlen: 24
185.0.35.0/24 maxlen: 24
185.0.33.0/24 maxlen: 24
2001:7f8:13e::/48 maxlen: 48
2001:7f8:44::/48 maxlen: 48
2001:7f8:df::/48 maxlen: 48
2001:7f8:13a::/48 maxlen: 48
2001:7f8:d5::/48 maxlen: 48
2001:7f8:73::/48 maxlen: 48
2001:7f8:14e::/48 maxlen: 48
2001:7f8:3d::/48 maxlen: 48
2001:7f8::/48 maxlen: 48
2001:7f8:36::/48 maxlen: 48
2001:7f8:10a::/48 maxlen: 48
2001:7f8:143::/48 maxlen: 48
2001:7f8:9e::/48 maxlen: 48
2001:7f8:139::/48 maxlen: 48
2001:7f8:13c::/48 maxlen: 48
2001:7f8:32::/48 maxlen: 48
2001:7f8:106::/48 maxlen: 48
2001:7f8:3f::/48 maxlen: 48
2001:7f8:a0::/48 maxlen: 48
2001:7f8:13b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:5c:ec:3f:15:3f:a5:4a:3b:86:46:cc:d7:8a:ac:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Aug 1 09:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc44947f31fe873621e652ddae49f64e67dcca07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:19:b7:9b:33:46:af:60:33:91:d0:d0:3c:
54:f2:5e:49:e3:10:77:42:ef:0d:42:7f:35:77:3a:
22:c9:e9:94:05:5c:1f:12:a7:22:31:5a:61:88:25:
34:44:da:41:23:38:3a:12:82:3b:8c:d2:37:3d:bf:
44:84:3f:28:2b:c1:24:18:70:6c:7a:60:19:a0:99:
84:2b:a5:0b:86:58:ce:9a:d1:a3:97:69:d2:95:f5:
89:e8:02:ee:4c:a0:9b:9d:ad:e7:75:5f:b1:0c:70:
74:25:83:5f:0c:a6:8a:3e:80:d4:a5:39:d5:ff:2f:
bb:12:9c:96:97:af:08:4d:09:a4:13:06:ec:84:06:
3b:10:66:ac:26:f7:c6:e6:a2:eb:05:45:89:a1:91:
d6:a8:33:13:08:91:7a:f0:1a:fa:70:a6:9e:c3:dc:
fa:0d:9d:b9:51:85:1d:29:e4:21:9a:ca:e4:e4:72:
05:a3:27:0f:1e:32:67:22:23:e1:e5:55:a3:4a:79:
cf:3f:4a:e8:6b:7c:b0:a3:c3:eb:5c:4d:bd:28:c8:
ab:52:a1:53:88:67:13:5f:85:ed:7e:42:18:53:c5:
39:ac:f3:29:d3:91:35:0e:d3:78:a5:81:70:9b:2d:
7d:32:c8:cd:02:79:96:8f:a6:03:89:76:20:57:84:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:94:7F:31:FE:87:36:21:E6:52:DD:AE:49:F6:4E:67:DC:CA:07
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/vESUfzH-hzYh5lLdrkn2Tmfcygc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.192.0/21
80.81.202.0/23
185.0.4.0-185.0.8.255
185.0.17.0/24
185.0.33.0/24
185.0.35.0/24
185.1.8.0/24
185.1.46.0-185.1.48.255
185.1.119.0/24
185.1.131.0/24
185.1.170.0/23
185.1.176.0/24
185.1.182.0/23
185.1.187.0/24
185.1.192.0/23
185.1.197.0/24
185.1.204.0/24
185.1.208.0/22
185.1.220.0/24
185.1.244.0-185.1.246.255
185.1.248.0/24
185.1.252.0/23
IPv6:
2001:7f8::/48
2001:7f8:32::/48
2001:7f8:36::/48
2001:7f8:3d::/48
2001:7f8:3f::/48
2001:7f8:44::/48
2001:7f8:73::/48
2001:7f8:9e::/48
2001:7f8:a0::/48
2001:7f8:d5::/48
2001:7f8:df::/48
2001:7f8:106::/48
2001:7f8:10a::/48
2001:7f8:139::-2001:7f8:13c:ffff:ffff:ffff:ffff:ffff
2001:7f8:13e::/48
2001:7f8:143::/48
2001:7f8:14e::/48
Signature Algorithm: sha256WithRSAEncryption
9d:eb:9a:44:bb:e4:8f:88:fc:51:c9:0e:2a:7f:9c:84:0a:8d:
2d:50:1d:ac:22:ae:20:6c:3f:fc:18:bd:31:85:d2:6f:61:ff:
93:97:93:d5:3f:2d:e2:7a:62:94:33:24:6d:75:e0:f5:77:eb:
c2:a1:3c:39:08:43:4b:ad:db:7f:54:0b:78:fc:57:55:8c:29:
f9:88:98:53:31:2b:fc:cf:a0:82:74:a3:f3:7a:df:0f:4f:4a:
94:b4:a1:4c:db:63:25:32:92:51:34:a9:86:82:06:2d:bc:b3:
94:6e:0c:64:a3:45:cf:d9:b3:32:4f:07:3e:d2:ec:70:71:de:
57:52:fa:ff:a3:bc:18:23:59:39:b0:96:13:d8:23:14:1a:93:
0c:fc:ba:3f:c2:d7:6f:ab:89:4a:e8:22:9a:43:f9:3e:02:60:
29:9d:42:04:b5:d1:d9:0a:9b:51:c8:7e:f9:6f:53:f2:e8:87:
1b:b8:03:16:64:c2:9a:0a:52:42:84:7e:1e:fc:05:e1:dc:e6:
0c:f7:6a:3b:cd:37:dc:63:f5:05:1e:e9:7e:98:5e:74:22:ac:
65:2a:49:f7:e9:19:0f:d1:62:60:06:6c:11:8c:6a:e7:e6:54:
55:48:9b:51:c7:86:19:76:b7:77:3f:83:63:40:fa:73:42:1a:
2d:9d:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:31 2024 by rpki-client on console-ams.rpki-client.org