Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/REqbaEaC2ffUdqnbKiHc4nRDjj0.roa
File: REqbaEaC2ffUdqnbKiHc4nRDjj0.roa (raw, json)
Hash identifier: N2T3scInlbCgVqTz4UsYCDtK60OAwATYuSJJ6VOEWwQ=
Subject key identifier: 44:4A:9B:68:46:82:D9:F7:D4:76:A9:DB:2A:21:DC:E2:74:43:8E:3D
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018B592198DB7EF4CB0CE0B8B2CEAAB0527B
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/REqbaEaC2ffUdqnbKiHc4nRDjj0.roa
Signing time: Sun 22 Oct 2023 20:44:15 +0000
ROA not before: Sun 22 Oct 2023 20:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48159
IP address blocks: 2.188.1.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.185.0.0/20 maxlen: 20
2.185.0.0/16 maxlen: 16
78.38.243.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
2.177.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
80.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
2.176.128.0/17 maxlen: 17
2.185.164.0/24 maxlen: 24
2.185.160.0/19 maxlen: 19
2.188.179.0/24 maxlen: 24
2.185.88.0/22 maxlen: 22
217.219.0.0/16 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.182.0.0/16 maxlen: 24
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.42.0/24 maxlen: 24
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.182.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:21:98:db:7e:f4:cb:0c:e0:b8:b2:ce:aa:b0:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Oct 22 20:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=444a9b684682d9f7d476a9db2a21dce274438e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:58:3c:cb:fa:35:b2:58:e5:6c:3c:e8:ab:
11:e0:6a:b5:08:a1:3b:6f:04:2d:3b:ad:ed:8e:9d:
f9:59:02:fa:56:a2:1a:98:7d:b6:04:d2:96:82:5e:
5f:1b:74:c2:c0:c8:3e:84:b3:80:6d:9c:d1:e5:66:
16:c8:fa:6b:86:17:b3:12:b8:80:d3:ff:d0:47:6d:
5b:11:5c:d4:d0:43:c4:87:93:78:42:aa:a3:4a:f4:
78:24:21:80:fb:3b:ff:0f:7f:4e:e7:ce:78:6e:09:
20:81:c1:d2:59:0a:f7:8d:3c:12:f3:1c:d9:4e:3f:
85:57:e5:32:89:46:c7:c3:36:c0:03:0f:45:7b:c7:
fe:34:13:96:42:52:64:df:02:7f:ef:c1:70:05:f9:
31:c5:0a:b3:27:40:e4:e2:cf:6c:f9:46:d0:37:f9:
d7:4f:07:b7:f6:5a:9f:30:b4:03:d8:14:c1:54:fe:
9c:6a:7e:3a:02:5f:6b:80:a1:03:8b:1e:10:fe:0e:
40:9e:07:0c:96:17:d2:99:9d:ac:df:fc:7b:1d:7f:
46:49:98:5d:21:9e:e1:30:a8:09:96:26:c3:ee:91:
25:8d:08:bc:16:d6:ef:09:00:bc:47:ad:4d:b7:73:
56:ad:6e:dc:de:7d:21:59:ac:02:45:e9:96:2b:54:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:9B:68:46:82:D9:F7:D4:76:A9:DB:2A:21:DC:E2:74:43:8E:3D
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/REqbaEaC2ffUdqnbKiHc4nRDjj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.0.0/16
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.42.0/23
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
24:55:2c:01:bd:54:bd:6f:1f:39:1b:38:f5:36:04:7e:c9:d4:
14:4c:d9:19:83:fe:68:87:69:1d:fc:4d:f3:c3:8e:54:6a:3b:
ce:46:2c:ee:b6:c9:e4:b1:5c:a8:33:43:b3:4c:2d:c7:89:73:
6d:c0:5f:21:a9:36:37:72:f5:fe:7e:25:b0:75:b1:cd:a7:cb:
6c:3b:65:6b:14:fc:33:9b:fe:11:36:6a:95:c4:c7:b9:33:59:
0f:5c:bf:cd:17:a4:d5:1c:38:f1:b5:9b:d2:8d:b5:1c:52:53:
02:b4:3a:4c:b4:73:64:8b:a0:64:ff:e3:fb:a5:9a:6a:31:ab:
4a:54:31:14:2d:66:03:d3:9c:fd:1f:ad:ce:5c:ff:57:32:bd:
d9:19:e5:2e:89:34:b2:20:04:e9:ad:b8:fe:14:c0:69:6e:ff:
1f:7e:0a:5a:62:87:3f:ff:18:3d:82:2c:f6:6c:e5:dd:86:80:
ff:fb:68:9a:38:9f:a0:11:ca:ec:e2:20:10:b0:ac:4e:2f:0e:
34:d0:65:c4:2a:71:b3:59:ec:32:50:e9:2e:02:6d:aa:ea:ef:
6e:0f:a8:06:c7:d0:42:d6:6d:d8:a6:16:28:5d:f1:68:76:06:
73:58:a9:ab:fc:12:a6:d8:bb:91:0a:b3:e9:bd:ff:da:38:88:
8d:52:11:9d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYtZIZjbfvTLDOC4ss6qsFJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjMxMDIyMjA0NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDRhOWI2ODQ2ODJkOWY3ZDQ3NmE5ZGIyYTIxZGNlMjc0NDM4ZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkZYPMv6NbJY5Ww86KsR4Gq1CKE7
bwQtO63tjp35WQL6VqIamH22BNKWgl5fG3TCwMg+hLOAbZzR5WYWyPprhhezEriA
0//QR21bEVzU0EPEh5N4QqqjSvR4JCGA+zv/D39O5854bgkggcHSWQr3jTwS8xzZ
Tj+FV+UyiUbHwzbAAw9Fe8f+NBOWQlJk3wJ/78FwBfkxxQqzJ0Dk4s9s+UbQN/nX
Twe39lqfMLQD2BTBVP6can46Al9rgKEDix4Q/g5AngcMlhfSmZ2s3/x7HX9GSZhd
IZ7hMKgJlibD7pEljQi8FtbvCQC8R61Nt3NWrW7c3n0hWawCRemWK1TFUQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFERKm2hGgtn31Hap2yoh3OJ0Q449MB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvUkVxYmFFYUMyZmZVZHFuYktpSGM0blJEamowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTB/BAIAATB5MAsDBAcC
sIADAwECsAMDAAK2AwMAArkDBAECvAADBAACvBYDBAACvBwDBAMCvEADBAACvEwD
BAACvLMDBAECvLgDBAACvLsDBAECvSoDBAACvTgDBAACvToDBAACvUQDBAACvUgD
AwACvwMDAU4mAwMAUL8DAwHZ2jANBgkqhkiG9w0BAQsFAAOCAQEAJFUsAb1UvW8f
ORs49TYEfsnUFEzZGYP+aIdpHfxN88OOVGo7zkYs7rbJ5LFcqDNDs0wtx4lzbcBf
Iak2N3L1/n4lsHWxzafLbDtlaxT8M5v+ETZqlcTHuTNZD1y/zRek1Rw48bWb0o21
HFJTArQ6TLRzZIugZP/j+6WaajGrSlQxFC1mA9Oc/R+tzlz/VzK92RnlLok0siAE
6a24/hTAaW7/H34KWmKHP/8YPYIs9mzl3YaA//tomjifoBHK7OIgELCsTi8ONNBl
xCpxs1nsMlDpLgJtqurvbg+oBsfQQtZt2KYWKF3xaHYGc1ipq/wSpti7kQqz6b3/
2jiIjVIRnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org