Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/G06ffKCQf0_d0fvhi5feJ3X04uc.roa
File: G06ffKCQf0_d0fvhi5feJ3X04uc.roa (raw, json)
Hash identifier: C/sXftc1Kwk2lg9zRTos3Hso62pz5tJ4veuQNqRTz5Y=
Subject key identifier: 1B:4E:9F:7C:A0:90:7F:4F:DD:D1:FB:E1:8B:97:DE:27:75:F4:E2:E7
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881FD108C01F80E6B7DBB1409D38059364
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/G06ffKCQf0_d0fvhi5feJ3X04uc.roa
Signing time: Mon 15 May 2023 14:29:32 +0000
ROA not before: Mon 15 May 2023 14:29:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49666
IP address blocks: 2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.22.0/24 maxlen: 24
2.188.23.0/24 maxlen: 24
2.188.30.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.153.0/24 maxlen: 25
217.218.67.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
85.185.0.0/16 maxlen: 24
2.185.0.0/16 maxlen: 16
78.38.246.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.177.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 24
217.218.0.0/16 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.59.0/24 maxlen: 24
2.176.0.0/17 maxlen: 17
78.38.0.0/16 maxlen: 24
2.176.128.0/17 maxlen: 17
195.146.63.0/24 maxlen: 24
2.189.3.0/24 maxlen: 24
2.189.1.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.181.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
2.188.187.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.44.0/24 maxlen: 24
2.189.63.0/24 maxlen: 24
2001:4188:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Jun 2023 12:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:d1:08:c0:1f:80:e6:b7:db:b1:40:9d:38:05:93:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 15 14:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b4e9f7ca0907f4fddd1fbe18b97de2775f4e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:57:7a:64:70:62:2c:67:9c:83:81:91:31:
7a:4c:e4:3b:4f:ae:b4:03:1b:24:76:a1:3e:09:3f:
c3:b1:2f:d5:3c:45:7c:eb:7a:54:39:ec:fa:a1:06:
79:c9:6d:b2:e3:9d:00:ab:69:9b:38:a5:00:3d:d4:
fc:2a:b4:16:c8:0a:0b:81:f6:84:f5:79:28:8d:df:
2b:29:77:42:8f:c6:30:d3:a0:c6:c8:58:f8:79:23:
ef:23:96:43:d9:55:bb:db:82:b6:2b:45:d3:c7:7d:
36:28:d3:91:82:b5:d0:19:d6:1b:b3:2e:71:3c:b3:
8c:56:c4:44:53:25:17:fc:36:d9:09:a6:32:75:b1:
19:5c:db:8e:c1:57:aa:ef:2f:07:ee:3c:45:e7:49:
53:cc:bc:57:5e:2d:69:5a:c6:58:90:0b:e6:c7:f9:
33:13:a8:b6:31:79:a2:30:46:66:f8:af:fe:1e:fc:
6f:87:16:da:e8:e6:d3:db:15:04:cd:0b:c5:2c:85:
90:43:d4:bd:ff:29:84:23:7e:7e:5e:8e:d6:7c:82:
f4:1b:0d:5c:65:9f:f3:2b:48:95:4d:5d:f5:7d:53:
f1:62:57:78:fa:d6:f0:35:a1:78:8e:84:a0:73:da:
f0:ee:b9:2e:5c:35:39:67:c5:05:68:a8:58:70:e1:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:9F:7C:A0:90:7F:4F:DD:D1:FB:E1:8B:97:DE:27:75:F4:E2:E7
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/G06ffKCQf0_d0fvhi5feJ3X04uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/15
2.185.0.0/16
2.188.0.0/15
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.63.0/24
217.218.0.0/15
IPv6:
2001:4188:2::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b2:41:b4:1a:a1:a9:cf:8e:cb:61:b5:7c:59:22:dc:b1:72:
93:13:c2:56:33:9d:7a:1c:a8:4e:3d:9c:0d:a8:47:dd:24:dc:
3d:f3:83:1e:5f:ed:5a:6f:ff:8c:d0:1d:53:28:d6:b5:c1:d1:
e1:eb:e0:52:52:d4:9c:6f:f7:af:38:13:33:b8:f5:9c:ca:56:
78:75:3b:c7:e1:32:98:a6:d4:e1:11:5b:9e:1d:54:9c:38:49:
9a:0b:f3:ef:11:47:4d:91:7d:09:51:49:22:72:fe:96:be:48:
35:00:29:0a:a1:00:58:b7:c5:93:8c:91:25:c2:d1:01:46:14:
2e:5e:1e:da:6f:bf:0a:91:29:07:6f:1e:42:f6:7a:64:7a:66:
10:a3:c2:76:1f:10:de:a8:a3:14:e7:49:fa:e9:d4:bb:9c:9f:
7f:80:9a:1b:23:09:55:26:b1:69:ec:19:21:1f:b9:ca:d0:57:
21:b0:2a:22:c6:09:84:50:0a:1a:9e:3c:2c:7a:a2:f3:14:6f:
21:0b:40:61:6b:15:69:0a:22:3e:d8:50:3f:f5:3a:f8:9e:27:
fd:0c:b3:7d:89:61:a5:f1:30:99:b7:f8:a2:6a:4b:c6:ae:5d:
b0:21:c1:79:dc:5e:b2:d4:7f:02:8c:c8:9e:a2:5c:d7:16:92:
a6:ad:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org