Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/XsJKnC0Yx5rkNMppDkfS8xWkWgE.roa
File: XsJKnC0Yx5rkNMppDkfS8xWkWgE.roa (raw, json)
Hash identifier: fs3aGWmMQch51NQtHVrnDmSqTp+/DNFJGYfUQQkKdM4=
Subject key identifier: 5E:C2:4A:9C:2D:18:C7:9A:E4:34:CA:69:0E:47:D2:F3:15:A4:5A:01
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A5617656F97D72E0157E30601980F23
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/XsJKnC0Yx5rkNMppDkfS8xWkWgE.roa
Signing time: Sun 14 May 2023 12:57:09 +0000
ROA not before: Sun 14 May 2023 12:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 May 2023 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:56:17:65:6f:97:d7:2e:01:57:e3:06:01:98:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 12:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ec24a9c2d18c79ae434ca690e47d2f315a45a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:a4:28:12:a3:d4:1c:e5:ad:3e:7d:cb:dd:
e2:96:fa:d4:cd:85:86:25:4f:c8:a8:18:30:a4:ac:
22:a2:7f:4d:a0:20:b3:ca:3c:b1:2b:b5:e0:ff:bb:
c3:88:50:9f:56:a7:2b:b0:5c:b9:46:0b:97:08:2d:
81:b8:98:89:5a:10:71:5a:3d:c6:2f:9b:4b:66:23:
63:36:44:99:2c:93:0c:be:84:1c:50:cc:f3:71:c1:
87:a3:ea:aa:44:ef:1e:25:ae:be:52:11:51:a2:d6:
cf:df:06:54:3b:44:e2:52:c9:c8:0d:79:bf:e7:0a:
7b:64:6a:f9:83:1e:c8:61:05:85:5b:7f:71:64:7d:
6d:a3:83:3c:c1:34:4e:76:9d:2a:c2:9b:cb:28:9e:
e4:81:42:be:45:86:f6:1f:f6:5d:80:5f:59:41:51:
9f:00:5e:23:64:be:c7:88:77:44:bd:61:65:66:9d:
63:22:a7:7e:9b:f7:92:b8:bb:47:f4:ed:e5:33:fa:
61:92:d9:b3:5f:c1:fc:86:7b:e0:87:ee:f5:f6:b0:
b0:eb:f7:f7:d3:8d:d9:4a:b1:f7:bb:12:51:10:e0:
69:19:f0:6d:dc:44:35:b4:f4:3e:b3:2c:75:37:d8:
79:1d:67:86:87:15:a8:96:89:1c:c6:e9:c7:46:5e:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:4A:9C:2D:18:C7:9A:E4:34:CA:69:0E:47:D2:F3:15:A4:5A:01
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/XsJKnC0Yx5rkNMppDkfS8xWkWgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
89:4b:54:f1:13:af:8a:fa:23:a3:88:07:a7:2b:bd:e8:2a:92:
74:4d:b2:1f:b2:a3:08:ba:50:24:fd:0b:0a:29:d7:41:3e:43:
16:e0:d3:ad:76:9c:b1:f4:55:f2:68:b2:02:f6:9b:b6:05:83:
fc:f9:36:bc:71:c4:0f:06:81:f0:64:13:24:6b:5a:5d:88:49:
5c:4f:a1:12:1f:4f:d7:64:ea:57:5b:28:0d:12:56:fb:4d:c4:
8e:a9:02:d8:fb:38:77:63:19:62:3c:34:02:9d:5d:89:8e:13:
51:5a:15:d1:94:8c:c8:9e:5c:45:99:7b:e4:77:73:0d:38:d6:
e3:4d:8a:b4:bc:a5:36:09:af:3a:ab:b7:a9:47:a1:c3:96:d2:
d0:6f:84:6e:ec:0c:7b:36:d0:8d:74:b3:fe:e0:0d:ad:68:7b:
bc:73:b2:67:a3:e4:49:eb:aa:11:ef:cb:fb:9a:e0:3e:aa:f9:
9b:1f:23:48:6d:01:a8:6c:e5:ac:b7:0f:ef:6e:ac:1f:dd:d1:
8b:69:38:d1:da:94:c6:03:69:8b:3f:24:a3:45:6d:be:f4:5d:
c1:c5:86:bd:77:a8:70:bc:d6:83:1b:0e:4f:cc:4a:44:01:1f:
78:23:89:7c:88:94:bc:98:b8:0b:60:ff:40:e1:a6:fc:1d:f9:
4d:de:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org