Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/qvP8l9rHojOQ_ZnfUxmgj4E91Cc.roa
File: qvP8l9rHojOQ_ZnfUxmgj4E91Cc.roa (raw, json)
Hash identifier: 5u6ZSazarELEotPHa28QbfWBGhxN5fqQOLH/1mBvMv8=
Subject key identifier: AA:F3:FC:97:DA:C7:A2:33:90:FD:99:DF:53:19:A0:8F:81:3D:D4:27
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01891C066CDAD518BA33384ADBE95A1BEF23
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/qvP8l9rHojOQ_ZnfUxmgj4E91Cc.roa
Signing time: Mon 03 Jul 2023 13:52:10 +0000
ROA not before: Mon 03 Jul 2023 13:52:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.155.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
77.94.175.0/24 maxlen: 24
84.47.135.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.142.0/24 maxlen: 24
84.47.140.0/23 maxlen: 23
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
84.47.150.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
84.47.156.0/22 maxlen: 22
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
213.135.64.0/23 maxlen: 23
84.47.172.0/24 maxlen: 24
213.135.67.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
85.91.122.0/24 maxlen: 24
85.91.120.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
84.47.174.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.82.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 29 Aug 2023 16:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:06:6c:da:d5:18:ba:33:38:4a:db:e9:5a:1b:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jul 3 13:52:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaf3fc97dac7a23390fd99df5319a08f813dd427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:67:79:98:1e:a6:b2:22:c4:57:25:23:3a:
30:56:ea:71:e0:3e:32:45:29:cc:df:68:c6:ed:f3:
68:0e:ea:a5:cf:c0:b8:db:0f:46:34:4b:14:e8:62:
54:d8:b3:f5:a6:6b:1b:31:e3:f6:c5:ce:f0:cb:54:
c8:1f:ff:72:44:94:bf:ae:32:e5:47:cb:9b:d5:5c:
d3:f5:15:8c:39:56:4b:85:93:0e:b3:05:ef:fa:93:
f2:cd:ef:c6:d6:d1:b7:a4:40:24:37:d1:81:e1:65:
e2:5c:9a:45:b2:36:9d:b9:4b:62:a4:e8:e4:c1:d2:
ea:87:83:2e:d4:86:76:80:3a:94:a8:9f:b9:9e:5b:
89:73:42:f1:86:c9:e6:6d:e3:af:95:f3:0f:f7:95:
bf:5d:df:56:51:5a:26:fa:61:d9:e0:ca:09:2f:02:
ff:bb:2c:7a:d1:30:bf:ce:4a:aa:af:9c:fe:94:3b:
69:33:b4:76:7b:74:65:44:2b:4b:e0:58:fb:22:2a:
8f:8f:37:a4:e4:d5:4c:a8:b4:74:65:cf:cb:a0:06:
da:a3:ef:0f:f9:2d:78:1a:27:e1:3a:96:75:d2:f0:
36:b4:d3:ff:ef:0e:8b:bc:be:82:e4:21:f8:96:f5:
51:80:b7:b7:2d:bf:4f:f7:59:30:7b:2c:7d:d4:78:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:FC:97:DA:C7:A2:33:90:FD:99:DF:53:19:A0:8F:81:3D:D4:27
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/qvP8l9rHojOQ_ZnfUxmgj4E91Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.142.255
84.47.144.0/23
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.79.0-213.135.80.255
213.135.82.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
08:c2:2f:77:5e:d1:50:03:c2:4f:b7:f6:ed:95:8b:7d:81:bb:
b8:fd:15:ae:96:90:91:da:ba:7e:b3:0c:55:0d:bd:2c:36:ac:
d7:e5:4b:6e:8e:2c:98:a3:8a:da:98:6b:85:2d:d7:80:ba:2e:
73:27:d8:95:e1:69:ee:fb:ea:38:42:98:19:ff:b1:41:0d:20:
df:01:7d:01:fd:d0:3e:4b:e2:0b:0b:c5:8c:71:40:e1:b2:18:
a0:b8:bf:c7:f8:63:45:14:5c:8c:6a:ec:4e:57:6c:03:b7:07:
79:40:9b:3c:0b:7b:14:b1:10:7f:21:27:f2:84:fd:f6:73:9c:
7a:41:01:85:04:c4:c1:8a:e4:bb:01:c5:dd:70:8e:3b:55:3a:
88:7c:4d:e0:07:1d:f1:0c:f1:85:1c:ea:35:a6:14:6f:d3:59:
39:f1:72:a8:95:03:80:5e:bf:db:00:a0:2c:09:78:8f:18:08:
57:b2:52:98:ba:98:66:52:8f:f2:de:20:ba:d5:29:ed:88:45:
df:5c:82:7c:98:6f:f9:ce:e3:20:e8:a6:bd:d5:b9:fd:dc:82:
ee:bd:a4:e3:80:18:16:ad:a8:89:03:8b:39:89:f6:10:54:1b:
a9:98:67:88:69:12:97:cc:47:3d:05:72:2e:06:5f:22:d3:cd:
03:54:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org