Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/mkYSD7xx8F17I_4WqMF_xY6bfMY.roa
File: mkYSD7xx8F17I_4WqMF_xY6bfMY.roa (raw, json)
Hash identifier: l1J/EsG437Io62qJs1YlmxQqIldiO0Xd7pUimWnWR0I=
Subject key identifier: 9A:46:12:0F:BC:71:F0:5D:7B:23:FE:16:A8:C1:7F:C5:8E:9B:7C:C6
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018793DDD4A472DB11CD6D22248C42F86196
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/mkYSD7xx8F17I_4WqMF_xY6bfMY.roa
Signing time: Tue 18 Apr 2023 10:16:41 +0000
ROA not before: Tue 18 Apr 2023 10:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 16
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 16
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 16
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 23
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 21
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
217.218.0.0/17 maxlen: 17
217.218.0.0/16 maxlen: 16
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Apr 2023 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:dd:d4:a4:72:db:11:cd:6d:22:24:8c:42:f8:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 18 10:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a46120fbc71f05d7b23fe16a8c17fc58e9b7cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:0d:39:fe:b1:1f:12:c6:cb:09:b6:0b:85:
07:60:1d:0e:6b:41:ed:6d:87:44:23:eb:bd:71:63:
75:7e:5b:2b:a6:03:0b:1c:99:95:55:ad:cb:cd:e2:
57:73:27:90:d6:13:77:14:b6:1a:32:3a:a7:b6:0f:
3a:59:5f:1e:d9:ff:98:1d:49:0d:41:f8:15:e9:70:
d7:ac:26:a2:fe:63:09:1c:da:c2:e8:d0:2f:c8:8a:
3c:4a:99:3d:58:a0:66:af:66:8b:3a:34:9e:a2:93:
10:98:d6:bd:5d:e5:01:e3:cd:fa:79:65:88:a2:e4:
1c:60:14:c7:22:35:d3:d6:17:1e:56:35:6a:a6:f5:
d9:85:54:8f:1d:87:45:d2:f3:f9:03:5e:a4:76:3e:
b1:e2:56:ec:81:1c:82:26:83:a3:d5:ce:82:ac:3b:
13:7a:67:b9:06:26:f7:06:85:0d:b2:ac:ef:c5:8b:
65:ed:7f:aa:65:bf:e7:3e:46:23:86:4e:f4:d4:40:
13:b9:e8:41:52:d2:30:13:1f:ff:c8:a2:e1:64:05:
7c:f0:c2:94:a6:01:4b:f2:eb:27:65:5e:9d:ad:08:
fb:7e:43:46:01:3c:65:ea:2f:fd:11:f6:f9:09:78:
64:de:e1:d2:4f:25:35:d7:86:ee:54:20:1e:8e:23:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:12:0F:BC:71:F0:5D:7B:23:FE:16:A8:C1:7F:C5:8E:9B:7C:C6
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/mkYSD7xx8F17I_4WqMF_xY6bfMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
3c:23:bd:c0:4e:3c:e5:26:e9:57:05:4e:62:f9:bf:36:93:53:
5b:e5:f3:e0:24:fa:54:b3:94:8a:4d:b6:02:35:66:d3:2e:cd:
64:12:be:e0:e7:4c:e2:75:ae:d5:e6:ee:0e:41:fd:d0:26:1f:
ad:05:5f:0e:07:79:1b:61:c2:b6:d2:6b:29:d6:62:56:ba:3a:
5a:9f:05:37:ce:da:c1:e7:94:91:bc:06:74:ce:79:a3:31:f2:
50:ec:79:ad:bf:67:8f:b6:38:ad:d8:ce:c0:87:c4:68:b1:be:
11:dc:46:2b:ff:17:e7:c4:c6:51:7d:13:90:61:17:35:df:8a:
eb:28:0d:79:0c:da:d3:0a:da:6b:76:6f:cf:4c:5f:84:9f:b9:
7b:c1:0f:4a:10:ab:24:bc:d2:4a:d0:b0:79:1e:e9:86:0a:51:
e6:35:ae:64:78:36:f9:ed:f0:be:f6:cb:40:a6:f0:30:fc:82:
41:e5:10:a7:58:ae:3e:e5:d2:dc:ef:6f:92:82:ff:e4:c4:41:
98:72:a5:05:a0:74:25:fa:45:11:de:65:e9:2f:44:99:b6:6b:
f3:56:dc:ed:f6:f7:fe:e0:cd:0d:47:dd:89:9b:39:8b:e1:5b:
bc:04:5e:20:93:5f:6f:49:9e:ea:9a:71:57:5b:c0:32:c6:d6:
a2:f2:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org