Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/lVfxmGV_f89pCsvClpzSQKYZBTQ.roa
File: lVfxmGV_f89pCsvClpzSQKYZBTQ.roa (raw, json)
Hash identifier: vvZ6yFhJPhR0ouD47bXmrA5npOemVPDrI2JzgWpvBYY=
Subject key identifier: 95:57:F1:98:65:7F:7F:CF:69:0A:CB:C2:96:9C:D2:40:A6:19:05:34
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01881A6C0FE7783D20D7D32E9C5BCF83C34A
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/lVfxmGV_f89pCsvClpzSQKYZBTQ.roa
Signing time: Sun 14 May 2023 13:21:09 +0000
ROA not before: Sun 14 May 2023 13:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.152.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.128.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.39.43.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 24
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 24
2.191.0.0/16 maxlen: 16
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:6c:0f:e7:78:3d:20:d7:d3:2e:9c:5b:cf:83:c3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 14 13:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9557f198657f7fcf690acbc2969cd240a6190534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:ad:c1:25:9e:9d:3b:1e:7b:91:99:ef:77:
d3:3c:af:1a:9a:d9:d6:6e:10:09:94:1c:c5:5c:87:
38:54:08:03:e9:20:dc:f1:13:1f:c2:14:d8:fb:7e:
99:15:49:cc:dc:1b:71:2e:e5:d3:ef:42:67:7f:47:
c6:18:9f:2f:48:e8:38:60:c9:16:18:04:73:d4:f5:
15:9f:81:e1:ab:58:06:e9:8f:17:12:a8:19:c2:8e:
02:2e:10:c5:fd:d7:d2:3b:59:27:fe:4c:c3:91:a7:
fe:92:33:29:c1:bc:3e:4a:9a:1a:85:40:bd:b4:29:
71:79:9e:f4:d9:94:b9:8b:b9:16:ed:54:ed:8f:08:
2b:0c:7b:e4:45:a4:09:2c:81:39:c1:27:02:92:a9:
4b:a5:15:b4:b5:8d:d8:c4:14:be:1b:29:84:50:6a:
dd:d7:05:a8:d2:ca:7b:81:92:2e:dc:e9:6b:b2:56:
b7:b7:ae:d6:da:c6:2a:c7:89:14:38:e0:74:04:d4:
c5:cb:a1:55:bd:0c:64:e7:4d:df:15:fc:04:f1:a9:
90:d3:e9:ad:f0:b8:d1:b6:83:ee:75:ed:7a:f6:3e:
e1:00:65:67:5f:49:7e:3d:eb:c7:c0:1e:30:11:6e:
11:ab:53:e0:ab:48:b8:7a:f8:64:f9:be:d0:2b:15:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:F1:98:65:7F:7F:CF:69:0A:CB:C2:96:9C:D2:40:A6:19:05:34
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/lVfxmGV_f89pCsvClpzSQKYZBTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
22:ce:ca:cc:4d:0c:70:80:8b:37:4f:ec:77:55:0f:43:51:24:
cb:fe:f7:52:35:35:b1:5b:a3:76:6a:4c:0b:a7:6d:e9:f2:84:
a3:a5:d8:2c:52:41:e0:76:0d:d2:c9:99:e5:6c:6d:21:79:36:
23:8f:32:27:b4:c1:35:85:53:2f:32:6e:54:03:aa:3a:ba:92:
a8:61:ca:64:9e:9a:ec:25:68:90:78:37:64:3d:50:81:c0:f7:
41:f7:57:50:6f:27:5c:c2:be:29:a0:2f:35:13:00:6a:ef:26:
e3:ee:b8:2c:8f:94:db:73:88:64:c2:2e:81:b7:12:74:cf:84:
07:eb:4f:9b:f5:a5:1d:81:cf:ef:e4:ec:ca:09:47:c8:61:7e:
60:ed:2f:6d:5e:44:58:eb:30:6b:de:bd:e4:74:48:aa:13:b3:
61:2d:dd:01:90:16:0f:f0:d8:80:98:d7:4b:e6:75:ec:ad:96:
39:a4:b9:aa:4a:40:1d:df:da:01:e0:de:28:3b:c5:f9:96:21:
87:f5:c1:85:2b:1a:a3:6a:45:fe:ae:37:37:e1:c4:d8:50:e9:
d5:36:b6:2a:39:a7:dd:34:32:bd:1e:8c:38:6d:6f:10:2c:c0:
5f:25:96:79:93:d9:fa:f8:8c:4b:b6:fa:82:64:da:28:99:86:
38:40:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:02 2023 by rpki-client on console-fra.rpki-client.org