Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/NPU9bWoqTacfs5cC8CJ6HB0uGJU.roa
File: NPU9bWoqTacfs5cC8CJ6HB0uGJU.roa (raw, json)
Hash identifier: udYmf556vUM+eHTvy8XI9F7cmsS2fgYjbo0CL4jNa3c=
Subject key identifier: 34:F5:3D:6D:6A:2A:4D:A7:1F:B3:97:02:F0:22:7A:1C:1D:2E:18:95
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881675A78B1B7810B01A994EDBB84863F1
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/NPU9bWoqTacfs5cC8CJ6HB0uGJU.roa
Signing time: Sat 13 May 2023 18:53:09 +0000
ROA not before: Sat 13 May 2023 18:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 May 2023 12:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:75:a7:8b:1b:78:10:b0:1a:99:4e:db:b8:48:63:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 18:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34f53d6d6a2a4da71fb39702f0227a1c1d2e1895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:b5:a2:e3:9d:c9:b1:0f:4f:9e:6c:31:63:
5f:25:9a:e3:65:0f:18:0d:d1:6b:89:03:1c:6a:4b:
97:51:b7:d5:89:59:62:59:1c:a3:68:db:93:5b:a3:
5f:c0:7e:f7:63:92:54:7e:be:cb:30:c4:36:5f:13:
24:ee:04:b0:94:d0:1d:7d:6b:6d:bb:20:a0:ab:77:
90:99:c6:1b:58:69:e3:d7:65:7f:4c:3f:8b:1b:31:
19:ba:56:fb:ff:4d:2d:9a:19:16:cd:66:2c:a9:05:
60:f4:42:a4:80:6b:2f:e7:ac:13:a4:b0:2f:64:23:
b6:15:76:cc:63:96:93:38:4f:a6:48:50:35:e0:d0:
b2:13:95:d3:e8:52:de:58:a4:ba:09:cb:80:c0:91:
d0:9c:95:25:1c:f5:b5:4b:ce:27:65:ed:7c:85:98:
1b:4b:cb:e9:fe:d6:65:be:66:55:75:5e:39:77:92:
00:4b:55:cf:5b:aa:3b:f5:6e:36:32:58:0b:54:01:
5c:d7:88:a3:83:80:e8:b3:ce:d9:ca:c0:93:4a:f5:
74:e6:bb:eb:14:5d:aa:26:d2:74:93:b7:d7:86:a5:
d7:c5:f0:4d:14:57:53:a8:21:32:e9:8e:91:85:0b:
f2:0e:40:02:64:33:60:e3:7e:05:f3:db:bc:7e:1c:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:3D:6D:6A:2A:4D:A7:1F:B3:97:02:F0:22:7A:1C:1D:2E:18:95
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/NPU9bWoqTacfs5cC8CJ6HB0uGJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
85:6b:e6:98:45:b2:4f:85:60:60:de:f1:48:c3:c1:93:a4:7c:
28:f2:5c:9e:ba:1e:04:62:4a:d5:3e:95:6b:48:9b:65:06:b2:
25:49:54:79:0a:92:6b:d8:25:76:7a:35:ea:92:50:1b:19:76:
9a:cb:2d:14:1a:36:90:cb:b1:e9:de:8e:29:28:12:65:87:ac:
18:97:ea:df:f2:b1:fd:44:3a:69:e3:51:74:a4:ff:4a:51:97:
01:a1:ba:1e:09:76:fb:c8:e6:a7:15:24:fb:c6:80:9e:1f:9c:
d5:20:95:21:a5:2d:cd:32:66:1d:b2:a7:34:ab:5a:7b:f3:9f:
3f:fd:ff:16:45:fb:cd:ed:e3:c6:92:2f:69:02:b7:40:4b:99:
90:1c:9d:62:d9:81:cc:d5:a3:cd:bc:1c:ce:21:47:37:20:09:
f5:57:33:38:d6:95:cf:ce:8a:95:e3:21:a9:eb:a4:69:9a:7d:
ea:a1:0d:33:98:2f:aa:15:2d:7b:7c:1f:91:99:16:74:ac:2b:
45:c1:54:de:c0:b4:7b:29:de:26:ed:54:99:8f:e9:be:5c:ff:
db:77:b1:e8:73:d4:ee:8d:42:fe:2e:9f:e5:eb:63:c8:9b:fe:
5e:38:32:d5:86:ea:df:83:f3:d6:d4:23:10:22:ef:f4:dd:2f:
9b:d1:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org