Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/PCfJPiTQ7CKAQ13jwLehlY9pr6M.roa
File: PCfJPiTQ7CKAQ13jwLehlY9pr6M.roa (raw, json)
Hash identifier: AD1oZ5n/eujUwkMLSb1rxdmX5g1gXvV4vdkIbUAU0Aw=
Subject key identifier: 3C:27:C9:3E:24:D0:EC:22:80:43:5D:E3:C0:B7:A1:95:8F:69:AF:A3
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0186DF2253645E964F116F9C9CED97D8790E
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/PCfJPiTQ7CKAQ13jwLehlY9pr6M.roa
Signing time: Tue 14 Mar 2023 08:00:14 +0000
ROA not before: Tue 14 Mar 2023 08:00:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 16
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.58.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 16
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 16
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 16
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 16
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 23
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 21
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
217.218.0.0/17 maxlen: 17
217.218.0.0/16 maxlen: 16
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Apr 2023 16:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:22:53:64:5e:96:4f:11:6f:9c:9c:ed:97:d8:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Mar 14 08:00:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c27c93e24d0ec2280435de3c0b7a1958f69afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:fd:23:20:67:52:c9:1b:15:e5:24:45:10:
a0:a0:48:46:8a:0c:d1:16:36:58:f4:3c:69:46:36:
69:9a:d0:40:49:93:32:07:d5:62:5c:e5:4e:c1:bf:
73:5d:db:43:7b:7a:30:4d:f7:a2:81:3f:95:ea:0d:
a8:78:64:15:1f:81:12:9c:20:1e:d6:dd:f6:7a:b7:
22:1b:47:64:61:cb:67:b6:02:23:ce:7c:35:cb:25:
b7:6a:ac:9f:26:6b:25:14:4e:ef:bf:89:65:4e:5e:
3e:6a:a0:b6:b7:20:34:51:bd:a3:aa:b4:c6:a2:33:
3c:a7:d1:19:61:91:2e:4f:ea:32:3b:5e:b5:f5:13:
ec:64:7e:d3:e9:b4:cf:d6:86:51:95:23:24:64:bd:
08:b5:6d:83:36:9f:fc:be:5e:b1:0e:e1:f6:f2:41:
d3:f8:9f:89:1f:f4:f2:22:b1:ee:eb:7f:fd:fb:0b:
23:48:1b:44:23:3a:bf:26:f3:eb:01:76:82:d8:28:
a5:73:ce:8e:55:13:62:ca:c9:05:95:07:10:39:ec:
9a:8c:3d:9d:a0:84:d2:9e:00:96:5c:0e:c0:70:1b:
4b:e4:44:ff:58:76:64:fe:b4:94:8d:e7:25:5f:b8:
c1:01:37:44:e0:ea:83:2a:42:c2:4a:8d:1d:97:93:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:C9:3E:24:D0:EC:22:80:43:5D:E3:C0:B7:A1:95:8F:69:AF:A3
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/PCfJPiTQ7CKAQ13jwLehlY9pr6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
82:0b:27:ae:ee:ff:8e:86:43:9a:1d:33:57:70:af:b3:11:1c:
99:70:1c:b1:32:9f:21:23:5f:65:fd:8e:98:8d:8b:7b:95:43:
23:10:be:78:1f:44:58:8e:04:da:af:b9:b7:8a:88:4c:39:1d:
4f:ac:f6:55:b0:6d:48:c3:e7:f2:a0:aa:72:5e:5c:4e:d0:aa:
3a:43:eb:e9:6e:31:33:fb:69:c5:c6:92:f6:44:ed:98:55:64:
84:d3:d1:d8:87:34:88:e9:ca:71:e8:d1:91:d9:0e:9e:bf:04:
d8:df:a8:de:f0:93:4b:39:d5:b1:15:c0:b0:93:03:69:14:5d:
de:df:df:61:99:3d:1e:8b:f7:a1:a1:38:03:68:cf:12:c0:2f:
08:99:05:c1:29:4b:10:80:81:04:71:f0:17:2c:8b:11:6c:12:
72:69:14:0c:53:73:82:e2:71:03:c3:62:65:8a:3d:db:cc:1c:
65:1f:62:37:fe:62:29:84:59:eb:c0:02:8b:75:5e:24:27:da:
68:18:5d:43:d1:47:45:53:84:f5:3f:64:8e:4e:fb:7d:29:ac:
75:33:62:25:11:4e:33:b2:a2:d0:5e:26:ad:ed:64:b3:01:fe:
15:c3:1b:58:14:69:d3:c2:18:0e:e4:92:ce:bd:1e:59:d4:00:
06:5c:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org