Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/_b7P-EyxeozmAGu5G2AbGVgC38I.roa
File: _b7P-EyxeozmAGu5G2AbGVgC38I.roa (raw, json)
Hash identifier: ofpXXJmdKXHR1RGQzRF3q+rh+039Zn5wK6HPaJMJy7k=
Subject key identifier: FD:BE:CF:F8:4C:B1:7A:8C:E6:00:6B:B9:1B:60:1B:19:58:02:DF:C2
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018816585B4B7EDE81AB2FEF0B6DC9F1C15C
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/_b7P-EyxeozmAGu5G2AbGVgC38I.roa
Signing time: Sat 13 May 2023 18:21:09 +0000
ROA not before: Sat 13 May 2023 18:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 May 2023 18:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:16:58:5b:4b:7e:de:81:ab:2f:ef:0b:6d:c9:f1:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 18:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdbecff84cb17a8ce6006bb91b601b195802dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:c2:29:17:4a:79:62:17:82:56:c0:75:68:
3c:5a:ab:a8:3d:5e:3c:2e:b0:e1:8b:81:d2:64:a8:
f6:df:43:a6:49:58:b8:04:52:9b:40:cf:e4:44:a7:
f8:24:b9:25:67:2b:75:c4:b9:ac:71:30:2d:91:98:
d5:62:a9:55:a9:1a:c6:a5:5d:17:91:62:fa:18:a4:
01:b8:f3:0d:2f:58:80:ed:21:e9:06:45:23:48:ce:
22:e8:a2:06:2b:fc:51:01:c9:f3:c1:c7:c2:46:f9:
84:f7:88:1e:5f:23:86:d0:df:aa:ed:80:02:cf:d0:
58:12:00:6e:05:46:d8:2d:49:92:00:f0:62:09:ae:
08:b4:1e:05:1b:91:76:77:15:ef:8d:91:59:01:1c:
ff:2c:de:dc:02:b4:dc:d1:ef:db:18:ac:84:d4:ff:
8d:f1:e7:98:da:42:0c:f3:ff:91:59:d4:77:6a:93:
cb:00:10:bc:3f:44:cb:57:1e:87:a9:ad:7c:e1:04:
f2:85:44:13:75:34:73:6e:01:6f:2b:cc:ac:c6:74:
aa:75:ec:99:fc:e4:a0:1c:f9:a1:13:7f:55:78:00:
03:3b:95:43:2c:29:16:33:00:bd:d3:ee:36:ef:88:
64:cf:24:a1:8d:0b:eb:1b:9f:51:76:17:c5:48:e8:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BE:CF:F8:4C:B1:7A:8C:E6:00:6B:B9:1B:60:1B:19:58:02:DF:C2
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/_b7P-EyxeozmAGu5G2AbGVgC38I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
05:2f:ee:a9:fd:6d:f2:4d:03:c3:6f:ff:37:3a:a2:ab:a3:f8:
f5:28:8f:2a:54:43:55:48:0b:53:47:24:fc:4b:64:f6:f9:a1:
be:fe:c2:9d:0e:9a:1c:a3:88:2b:5b:8b:a0:8b:18:e8:96:40:
11:f4:4f:be:f6:35:16:5e:75:6c:ea:1f:f9:e6:93:8d:43:3a:
c3:fd:a8:c6:8c:98:07:d1:0f:45:ee:a8:26:46:5f:5d:24:af:
45:8d:c2:61:81:eb:a1:b0:93:83:8f:92:29:1e:55:6c:48:1c:
3c:12:a8:36:71:2b:59:ee:b4:7a:0e:b2:2e:8b:34:c1:b2:47:
c8:a9:b1:31:76:4a:db:d3:40:32:1e:93:0c:06:c5:5d:73:19:
7f:f6:5e:61:23:76:28:f9:7e:cb:f7:1b:7d:24:e6:4b:7b:6b:
42:7e:66:4e:d8:88:1e:a5:37:bf:ef:08:11:0a:70:9e:7c:66:
95:cd:0a:f4:7c:a6:be:bf:ab:89:dd:1d:46:fe:94:3d:fc:b4:
f3:bf:a6:1b:e0:be:eb:55:20:6a:ee:e3:59:6b:60:79:87:73:
d4:5d:73:02:dd:c3:3d:84:d1:bd:f2:aa:be:4e:7d:92:e3:1b:
a6:8a:3a:f2:c5:ff:4b:85:48:90:ec:c0:9d:74:60:1f:bc:07:
63:bf:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org