Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/od_Cjrh0xqa1xcV1RqxWtsYd3J8.roa
File: od_Cjrh0xqa1xcV1RqxWtsYd3J8.roa (raw, json)
Hash identifier: VhSZgIQZWW9Gg4MwFtTkoOADyorVyB1p0fKKgemGoh8=
Subject key identifier: A1:DF:C2:8E:B8:74:C6:A6:B5:C5:C5:75:46:AC:56:B6:C6:1D:DC:9F
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018815C4F643F401EC75DDA59E80A53594EB
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/od_Cjrh0xqa1xcV1RqxWtsYd3J8.roa
Signing time: Sat 13 May 2023 15:40:09 +0000
ROA not before: Sat 13 May 2023 15:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12880
IP address blocks: 2.188.2.0/24 maxlen: 24
2.188.3.0/24 maxlen: 24
2.188.4.0/24 maxlen: 24
2.188.5.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.10.0/24 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.8.0/24 maxlen: 24
2.188.11.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.14.0/24 maxlen: 24
2.188.13.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.15.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.18.0/24 maxlen: 24
2.188.21.0/24 maxlen: 24
2.188.20.0/24 maxlen: 24
2.188.19.0/24 maxlen: 24
2.188.26.0/23 maxlen: 23
2.188.30.0/24 maxlen: 24
2.188.25.0/24 maxlen: 24
2.188.31.0/24 maxlen: 24
2.188.48.0/22 maxlen: 22
78.39.165.0/24 maxlen: 24
78.39.179.0/24 maxlen: 24
2.189.5.48/28 maxlen: 28
2.188.54.0/24 maxlen: 24
2.188.58.0/24 maxlen: 24
2.188.61.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.78.0/24 maxlen: 24
2.188.77.0/24 maxlen: 24
2.188.76.0/24 maxlen: 24
2.188.79.0/24 maxlen: 24
78.38.242.0/24 maxlen: 24
78.38.241.0/24 maxlen: 24
78.38.244.0/24 maxlen: 24
78.38.245.0/24 maxlen: 24
78.38.249.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
78.38.255.0/24 maxlen: 24
78.39.0.0/16 maxlen: 16
78.38.193.0/24 maxlen: 24
78.38.201.0/24 maxlen: 24
78.38.209.0/24 maxlen: 24
2.187.0.0/16 maxlen: 24
78.38.220.0/23 maxlen: 23
78.38.240.0/24 maxlen: 24
78.39.130.0/24 maxlen: 24
2.189.5.96/28 maxlen: 28
78.38.32.0/19 maxlen: 19
217.219.236.0/22 maxlen: 22
78.38.0.0/16 maxlen: 16
78.38.160.0/19 maxlen: 19
195.146.37.0/24 maxlen: 24
195.146.32.0/19 maxlen: 19
195.146.32.0/20 maxlen: 20
195.146.36.0/24 maxlen: 24
195.146.32.0/24 maxlen: 24
195.146.50.0/24 maxlen: 24
195.146.46.0/23 maxlen: 23
195.146.60.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
217.219.40.0/22 maxlen: 22
2.178.192.0/18 maxlen: 18
217.219.0.0/16 maxlen: 16
217.219.24.0/21 maxlen: 21
217.219.152.0/21 maxlen: 21
85.185.230.0/23 maxlen: 23
2.189.5.64/28 maxlen: 28
85.185.192.0/22 maxlen: 22
217.218.85.0/24 maxlen: 24
80.191.103.0/24 maxlen: 24
217.218.94.0/24 maxlen: 24
217.218.96.0/19 maxlen: 19
217.218.105.0/24 maxlen: 24
217.218.104.0/24 maxlen: 24
2.178.0.0/19 maxlen: 19
217.218.114.0/24 maxlen: 24
217.218.131.0/24 maxlen: 24
217.218.127.0/24 maxlen: 24
217.218.132.0/24 maxlen: 24
80.191.41.0/24 maxlen: 24
80.191.64.0/23 maxlen: 24
217.218.48.0/21 maxlen: 21
80.191.61.0/24 maxlen: 24
80.191.67.0/24 maxlen: 24
217.218.56.0/24 maxlen: 24
80.191.69.0/24 maxlen: 24
80.191.70.0/24 maxlen: 24
217.218.55.0/24 maxlen: 24
217.218.64.0/24 maxlen: 24
217.218.64.0/18 maxlen: 18
80.191.81.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
80.191.88.0/21 maxlen: 24
2.189.79.64/27 maxlen: 27
85.185.42.0/24 maxlen: 24
85.185.45.0/24 maxlen: 24
217.218.239.0/24 maxlen: 24
217.218.235.0/24 maxlen: 24
2.189.5.112/28 maxlen: 28
2.178.128.0/18 maxlen: 18
217.218.143.0/24 maxlen: 24
2.178.32.0/19 maxlen: 19
217.218.141.0/24 maxlen: 24
217.218.155.0/24 maxlen: 24
2.178.64.0/18 maxlen: 18
85.185.0.0/16 maxlen: 16
217.218.180.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
2.177.0.0/17 maxlen: 17
2.177.128.0/17 maxlen: 17
80.191.0.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
2.191.0.0/16 maxlen: 16
217.218.0.0/17 maxlen: 17
217.218.0.0/16 maxlen: 24
80.191.24.0/24 maxlen: 24
80.191.27.0/24 maxlen: 24
80.191.29.0/24 maxlen: 24
80.191.36.0/24 maxlen: 24
217.218.21.0/24 maxlen: 24
80.191.32.0/24 maxlen: 24
2.189.5.32/28 maxlen: 28
2.182.248.0/22 maxlen: 22
2.182.214.0/23 maxlen: 23
2.189.79.32/27 maxlen: 27
2.176.192.0/18 maxlen: 18
2.189.5.80/28 maxlen: 28
2.176.0.0/12 maxlen: 12
2.189.7.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.183.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.192.0/18 maxlen: 18
2.189.78.0/24 maxlen: 24
2.189.77.0/24 maxlen: 24
2.189.79.0/24 maxlen: 24
2.182.96.0/19 maxlen: 19
2.189.45.0/24 maxlen: 24
2.189.59.0/24 maxlen: 24
2001:4188::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 May 2023 17:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:15:c4:f6:43:f4:01:ec:75:dd:a5:9e:80:a5:35:94:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 15:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1dfc28eb874c6a6b5c5c57546ac56b6c61ddc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:0e:cb:51:d0:93:10:e5:db:32:3d:91:5b:
7e:74:0f:71:d2:93:87:77:e6:b8:3e:b3:8b:72:1e:
7d:a0:2a:20:38:df:32:d2:a5:8a:30:65:2c:d8:46:
cc:f3:0d:81:96:ad:df:1e:e0:7d:80:17:1c:95:fa:
42:dd:e0:47:a1:9b:77:79:ae:59:52:3c:96:d5:54:
9a:4b:09:54:a9:60:5e:ff:7d:e8:52:da:e6:c2:9e:
0d:cd:f3:25:04:d1:d1:82:5e:bb:5f:b3:57:7f:12:
41:7a:36:00:fb:d6:e4:11:03:34:53:fb:d0:80:cc:
37:81:41:23:e2:4a:2c:5c:00:27:f3:b0:8a:16:5f:
92:bb:47:8d:50:f1:fa:e2:2d:54:a7:0a:f2:88:57:
f1:81:d7:18:19:92:da:1e:3d:ce:fe:87:bb:f1:d4:
54:dc:79:30:b2:fe:d3:36:bc:15:7b:fc:cd:ea:e9:
7b:19:e8:80:23:3e:f5:49:08:0d:e5:72:d7:a8:37:
a1:f6:46:77:a2:28:13:4b:07:d5:9a:a8:34:8f:61:
7d:7b:71:7e:bc:6e:ca:dd:94:00:5e:1f:9e:ec:04:
ad:1d:7c:d9:4a:6b:bf:3a:ee:cb:82:2a:b4:df:42:
7f:62:f4:2e:5c:0f:22:a1:ba:94:4c:59:8a:78:6f:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:C2:8E:B8:74:C6:A6:B5:C5:C5:75:46:AC:56:B6:C6:1D:DC:9F
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/od_Cjrh0xqa1xcV1RqxWtsYd3J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/12
78.38.0.0/15
80.191.0.0/16
85.185.0.0/16
195.146.32.0/19
217.218.0.0/15
IPv6:
2001:4188::/48
Signature Algorithm: sha256WithRSAEncryption
55:d4:39:bc:fb:88:38:25:3c:21:4b:a6:13:f0:ee:99:eb:a0:
97:90:4a:60:30:b6:c0:5e:7c:cf:4a:5b:e5:2e:20:2b:14:bb:
b9:0e:73:f3:ab:63:44:a6:c4:06:b7:d3:6a:91:7e:28:c1:0c:
c3:1e:12:0a:2b:44:a7:7d:ca:6c:ac:36:e4:0a:43:83:83:98:
8a:7a:e2:53:64:29:28:6b:9e:04:3f:6f:9b:16:8a:aa:75:88:
1e:d1:21:f3:23:c3:19:3e:a1:6f:93:ff:e4:af:f2:17:a7:88:
a8:92:81:a3:4d:d1:d1:12:3d:a0:e6:fa:bd:1c:3f:ff:7a:99:
8e:57:2b:5e:a9:9f:e1:19:72:c7:dd:05:95:ee:96:b7:b7:49:
90:4a:83:2b:7b:e2:26:37:dc:de:82:df:23:6f:d2:73:e2:7e:
8d:12:15:4c:1f:1f:39:74:53:4c:17:64:41:a4:00:86:ef:f5:
74:22:43:56:a8:7d:2e:9f:e2:fe:0f:54:c0:98:e1:aa:d2:9e:
91:85:62:a9:04:4d:45:95:ab:1f:78:7a:fd:b3:af:f4:5c:16:
b2:51:3d:2f:7f:9a:bf:31:84:da:ae:5b:dd:73:03:00:1f:6c:
0c:9e:92:51:5e:a0:25:e7:3e:00:46:cc:78:52:e3:29:9b:b8:
8c:f9:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org