Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7uK__czs0gHZRYGzq0rETqbqJw8.roa
File: 7uK__czs0gHZRYGzq0rETqbqJw8.roa (raw, json)
Hash identifier: JQ+2u84GYz6jhEigLi5CDeLDprRk+KnNlqsoEM+E7yM=
Subject key identifier: EE:E2:BF:FD:CC:EC:D2:01:D9:45:81:B3:AB:4A:C4:4E:A6:EA:27:0F
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A6C1055489444146B172B99EBF3D4F6
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7uK__czs0gHZRYGzq0rETqbqJw8.roa
Signing time: Sun 14 May 2023 13:21:09 +0000
ROA not before: Sun 14 May 2023 13:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48159
IP address blocks: 2.188.1.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.185.0.0/20 maxlen: 20
2.185.0.0/16 maxlen: 16
78.38.243.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.177.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
2.176.128.0/17 maxlen: 17
2.185.164.0/24 maxlen: 24
2.185.160.0/19 maxlen: 19
2.188.179.0/24 maxlen: 24
2.185.88.0/22 maxlen: 22
217.219.0.0/16 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.42.0/24 maxlen: 24
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.182.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 22 Oct 2023 20:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:6c:10:55:48:94:44:14:6b:17:2b:99:eb:f3:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 13:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee2bffdccecd201d94581b3ab4ac44ea6ea270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:e8:d0:41:8d:c5:35:e2:0f:36:f3:ea:12:
5f:39:c7:7b:cb:16:90:90:05:c6:f1:d4:ea:e6:ef:
32:98:26:8f:01:1a:b7:8a:a3:53:5d:6e:ac:85:ee:
b5:fe:97:39:97:2e:66:72:f3:fa:2e:ba:e4:4c:36:
f7:5f:29:53:3b:51:e1:06:d6:02:1f:3c:3f:c8:3f:
8d:0d:80:55:9d:2f:a6:36:34:d3:64:e6:27:ea:0e:
cc:a7:61:de:9f:da:2c:41:01:e0:04:b0:12:a1:4f:
1d:5f:29:8d:7f:b0:28:de:db:60:45:2f:f4:83:5d:
04:be:a0:1f:b0:8b:2b:cc:f8:5b:a7:ea:ac:9d:e4:
b0:35:cc:d1:06:b8:53:d6:57:14:57:e5:d3:c2:de:
74:cc:4d:31:d6:0a:c9:10:33:89:b8:24:1e:50:b8:
c3:eb:58:6b:83:29:3c:05:89:47:51:d9:00:2a:ae:
fa:4f:37:b4:63:54:4b:94:b8:4d:71:98:9e:96:6e:
5f:f9:d0:21:e2:cb:97:2f:89:30:ee:98:28:dc:8d:
36:28:17:45:ae:5a:c1:2d:36:f9:4c:b7:3c:f4:66:
bf:37:71:95:1f:bd:88:fb:31:cb:30:d3:f5:30:6b:
0c:bf:6e:f0:32:c1:c2:d9:fc:7d:54:c8:85:2a:0f:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:BF:FD:CC:EC:D2:01:D9:45:81:B3:AB:4A:C4:4E:A6:EA:27:0F
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/7uK__czs0gHZRYGzq0rETqbqJw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.128.0/21
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.42.0/23
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
11:65:c2:5e:4f:db:b6:ef:ad:99:a3:3e:c0:1d:72:98:e1:5b:
b4:3e:e2:fc:85:36:68:45:cb:33:1c:e8:57:1c:82:d6:5e:4e:
73:2d:d3:fb:8a:42:d1:92:b7:a3:44:17:fd:e9:a1:88:0e:dc:
4b:44:a1:8a:6c:89:d5:12:d3:5d:3e:4f:d3:e2:f9:42:df:31:
e9:28:37:d2:4d:27:51:7c:82:3e:d7:df:64:ae:29:8b:30:9e:
1a:a5:4c:35:5c:c0:02:40:3f:87:7e:94:97:a2:0d:d7:b5:f4:
7e:33:82:57:e3:cb:3e:4f:5c:60:4a:11:e7:1a:9d:4a:b2:7e:
af:64:d7:0a:fe:8d:fa:21:7d:2e:ca:d8:c9:e4:60:1d:07:02:
23:98:ad:a6:53:9b:16:e6:4d:74:16:ae:ff:37:31:99:50:18:
20:f6:1f:31:10:28:ae:be:5e:a1:e7:0c:1d:e1:47:a1:a6:1f:
53:d2:57:5c:ff:3f:31:e8:c0:86:bd:c2:be:e4:3f:b5:0b:99:
3b:ec:58:34:36:b5:c9:40:ac:04:f9:ad:e8:81:39:82:f6:1e:
ff:86:cc:79:65:79:43:04:97:1c:c2:b4:b9:c6:88:5b:a3:d6:
61:d1:4d:4c:ce:b5:0c:42:e6:45:60:9b:50:ce:c2:e7:36:07:
bb:cf:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org