Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dstkOGQGwhJbvpSIhE0EikkZsVg.roa
File: dstkOGQGwhJbvpSIhE0EikkZsVg.roa (raw, json)
Hash identifier: t3Zvr4RST1wZHU6wmoAePw8mFnN22uRrLG63IyZGNiQ=
Subject key identifier: 76:CB:64:38:64:06:C2:12:5B:BE:94:88:84:4D:04:8A:49:19:B1:58
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01877B49B3691CA8863021E335B3521D35F7
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dstkOGQGwhJbvpSIhE0EikkZsVg.roa
Signing time: Thu 13 Apr 2023 15:44:00 +0000
ROA not before: Thu 13 Apr 2023 15:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.155.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
77.94.162.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/23 maxlen: 23
84.47.128.0/22 maxlen: 22
84.47.131.0/24 maxlen: 24
77.94.175.0/24 maxlen: 24
84.47.135.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.142.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.140.0/23 maxlen: 23
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
84.47.150.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
77.94.189.0/24 maxlen: 24
84.47.148.0/22 maxlen: 22
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.160.0/22 maxlen: 22
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/21 maxlen: 21
85.91.118.0/23 maxlen: 23
213.135.64.0/22 maxlen: 22
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
85.91.122.0/24 maxlen: 24
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.82.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.80.0/21 maxlen: 21
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Apr 2023 15:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:49:b3:69:1c:a8:86:30:21:e3:35:b3:52:1d:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 13 15:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76cb64386406c2125bbe9488844d048a4919b158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:be:e5:20:f3:d0:90:75:b2:b6:cd:6a:78:
df:a8:fa:29:d1:d0:e1:bd:15:67:21:3b:9c:f0:ec:
3a:fe:f4:c8:52:60:84:ea:0b:57:8e:2e:96:4a:a2:
fb:df:af:d7:e3:8a:8a:09:38:8d:d2:2c:62:9c:e1:
a4:7f:13:43:07:a9:5e:97:c6:68:08:04:7c:f0:f7:
dc:0a:6f:7e:83:e0:fc:2a:e3:2e:3a:a3:f4:72:af:
97:22:55:f6:a6:54:02:6b:35:f4:bf:38:d1:ab:4b:
b3:04:ac:b3:90:97:07:34:61:d1:95:97:49:0b:bb:
53:d3:4e:10:b8:22:68:42:ce:23:72:35:10:b2:c4:
6f:97:af:82:37:8a:e8:7d:7b:88:45:a9:fe:fb:e8:
d5:85:e7:73:69:54:b7:b3:da:8b:36:f2:93:87:67:
71:48:da:a9:e0:56:77:0a:59:4d:ec:8a:b5:8e:db:
42:af:54:cd:40:f3:42:eb:d9:6c:cd:45:c4:ee:56:
b7:a8:35:cc:4a:e0:74:81:ec:e5:35:70:0e:de:17:
53:43:e6:71:37:57:e1:82:68:2e:69:f5:37:5c:bd:
f4:d0:81:ce:fa:84:80:61:ef:6c:d8:65:19:b2:0d:
a9:f2:b8:e3:12:0c:56:14:c8:4a:ec:27:b0:a3:9e:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CB:64:38:64:06:C2:12:5B:BE:94:88:84:4D:04:8A:49:19:B1:58
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/dstkOGQGwhJbvpSIhE0EikkZsVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/22
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/22
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
74:58:b3:49:88:78:15:2b:4d:69:66:16:12:25:2f:80:74:1d:
80:de:7b:89:ac:7d:88:8e:1e:8b:d9:22:91:36:12:71:3b:cc:
e2:33:bb:62:2a:5e:c0:af:f0:6d:d6:1d:66:0e:8f:7d:59:d9:
ac:2f:4c:9a:04:76:0a:fa:1c:65:9f:bc:00:b3:ae:7f:01:fc:
53:89:db:cc:20:5b:73:ea:e8:c0:b1:05:82:42:84:06:a3:38:
ff:90:ed:00:6a:c2:68:a6:1b:8e:f2:a9:1d:8c:10:17:3f:b0:
98:c0:5b:60:99:80:92:76:33:67:c9:68:de:e0:4b:a9:e9:02:
d5:b0:ab:65:37:26:e1:7f:80:d1:29:f8:2a:4a:2a:5e:f8:e7:
7a:f9:b3:33:18:03:9c:43:5f:e9:43:39:62:b1:ab:66:07:9c:
08:7d:28:bf:de:be:7a:3b:7f:37:8f:6e:75:22:7b:7a:cd:ee:
fc:c3:35:09:68:20:88:3b:d4:5e:4e:f8:1d:66:e4:c1:67:5f:
aa:e6:c5:ac:2b:74:9e:a7:38:53:c7:d5:53:57:8b:54:0b:b5:
ee:f2:64:98:ef:ce:dc:10:3b:3a:e8:44:d7:7a:0b:e7:42:8a:
f2:97:a2:d8:6a:15:bd:04:5d:e5:bf:a9:83:fa:79:e0:5b:e9:
e1:1b:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org