Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/owqQ6QB4CJOAcz3xZqU6C0LoWtU.roa
File: owqQ6QB4CJOAcz3xZqU6C0LoWtU.roa (raw, json)
Hash identifier: ggfYD++lEEcb12YVGT8kOMDrSriZ2fJirea+95OTYY0=
Subject key identifier: A3:0A:90:E9:00:78:08:93:80:73:3D:F1:66:A5:3A:0B:42:E8:5A:D5
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018697D2E3CCCE64ED6CAA07CE4C6DD5B1E2
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/owqQ6QB4CJOAcz3xZqU6C0LoWtU.roa
Signing time: Tue 28 Feb 2023 11:40:25 +0000
ROA not before: Tue 28 Feb 2023 11:40:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 192.76.245.0/24 maxlen: 24
192.76.246.0/23 maxlen: 23
192.76.241.0/24 maxlen: 24
192.76.248.0/24 maxlen: 24
192.109.177.0/24 maxlen: 24
192.35.150.0/24 maxlen: 24
192.35.150.0/23 maxlen: 23
192.35.149.0/24 maxlen: 24
192.35.151.0/24 maxlen: 24
192.35.153.0/24 maxlen: 24
129.26.0.0/16 maxlen: 16
192.76.148.0/24 maxlen: 24
129.233.128.0/18 maxlen: 18
192.88.108.0/24 maxlen: 24
212.44.192.0/19 maxlen: 19
192.102.150.0/23 maxlen: 23
192.102.152.0/23 maxlen: 23
192.102.156.0/24 maxlen: 24
192.102.158.0/23 maxlen: 23
192.102.164.0/24 maxlen: 24
192.102.161.0/24 maxlen: 24
192.102.160.0/24 maxlen: 24
192.102.162.0/23 maxlen: 23
192.102.168.0/24 maxlen: 24
192.102.167.0/24 maxlen: 24
192.102.170.0/24 maxlen: 24
192.102.169.0/24 maxlen: 24
192.102.172.0/24 maxlen: 24
192.102.175.0/24 maxlen: 24
192.102.174.0/24 maxlen: 24
192.102.176.0/23 maxlen: 23
129.233.210.0/24 maxlen: 24
129.233.224.0/20 maxlen: 20
192.44.4.0/24 maxlen: 24
192.54.34.0/23 maxlen: 23
192.44.8.0/24 maxlen: 24
192.44.5.0/24 maxlen: 24
192.44.6.0/24 maxlen: 24
192.44.15.0/24 maxlen: 24
192.44.12.0/24 maxlen: 24
192.44.23.0/24 maxlen: 24
192.44.18.0/24 maxlen: 24
192.44.20.0/23 maxlen: 23
192.44.30.0/23 maxlen: 23
192.44.29.0/24 maxlen: 24
192.44.26.0/24 maxlen: 24
192.44.25.0/24 maxlen: 24
192.44.28.0/24 maxlen: 24
192.44.36.0/24 maxlen: 24
84.246.64.0/21 maxlen: 21
192.44.38.0/23 maxlen: 23
192.44.40.0/24 maxlen: 24
2a03:db80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 Feb 2023 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:d2:e3:cc:ce:64:ed:6c:aa:07:ce:4c:6d:d5:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Feb 28 11:40:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a30a90e90078089380733df166a53a0b42e85ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:7d:f6:e7:35:d2:93:cb:60:28:6a:cb:d8:
b8:26:54:2f:40:60:c5:ff:d5:04:c2:75:3e:15:f7:
8f:6a:58:cd:f5:56:2c:d0:b7:8c:d8:e5:40:1c:35:
00:a1:52:77:46:82:80:1f:31:0c:cf:36:dc:ee:ef:
e9:48:1e:a2:01:8f:31:00:04:58:62:fd:97:13:11:
e9:d6:3a:f6:42:1c:d8:32:3e:fa:ac:40:22:18:a3:
0b:5f:c9:b0:22:08:35:f5:aa:71:b1:ee:85:ac:b4:
90:80:d9:f2:94:cb:c8:20:d4:f8:f8:a6:b5:e7:8f:
51:d0:45:7d:e1:d3:f7:e7:b3:8e:ed:45:e4:14:a6:
19:a8:6a:02:d0:34:1d:47:f3:e2:f4:6b:38:a2:5d:
ac:50:9a:fa:2e:64:14:fc:85:3f:98:c1:ee:e8:57:
65:f1:9e:21:4b:c5:b7:bf:cd:1f:77:b0:4d:81:ac:
55:03:12:62:74:47:38:ca:c0:25:79:06:44:63:c7:
64:53:5f:9f:c8:3b:02:95:75:65:c0:e9:fe:62:2e:
18:28:f1:4f:ee:e2:55:db:29:3a:a1:46:37:e1:19:
9b:0f:ac:bc:3f:4b:cd:ce:b1:58:12:87:f2:c9:40:
72:92:09:04:3f:ba:4a:5e:40:ac:a1:07:50:e6:38:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:90:E9:00:78:08:93:80:73:3D:F1:66:A5:3A:0B:42:E8:5A:D5
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/owqQ6QB4CJOAcz3xZqU6C0LoWtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.64.0/21
129.26.0.0/16
129.233.128.0/18
129.233.210.0/24
129.233.224.0/20
192.35.149.0-192.35.151.255
192.35.153.0/24
192.44.4.0-192.44.6.255
192.44.8.0/24
192.44.12.0/24
192.44.15.0/24
192.44.18.0/24
192.44.20.0/23
192.44.23.0/24
192.44.25.0-192.44.26.255
192.44.28.0/22
192.44.36.0/24
192.44.38.0-192.44.40.255
192.54.34.0/23
192.76.148.0/24
192.76.241.0/24
192.76.245.0-192.76.248.255
192.88.108.0/24
192.102.150.0-192.102.153.255
192.102.156.0/24
192.102.158.0-192.102.164.255
192.102.167.0-192.102.170.255
192.102.172.0/24
192.102.174.0-192.102.177.255
192.109.177.0/24
212.44.192.0/19
IPv6:
2a03:db80::/32
Signature Algorithm: sha256WithRSAEncryption
6f:d2:c2:a1:4a:b5:4e:d9:be:c6:51:40:a5:fb:c0:e7:a3:54:
13:9a:1d:5f:21:76:63:02:41:e3:4e:3b:fd:19:69:59:0e:a7:
26:77:6b:3d:73:e0:3a:2a:9e:40:68:61:01:29:28:58:11:49:
5f:6b:2a:c3:e6:7a:fb:fc:1b:c9:f6:b6:6b:5e:f5:72:6e:27:
c9:a3:ee:46:af:a9:97:91:23:f3:d6:4f:da:98:79:93:4e:0f:
f9:b1:11:a4:b1:54:89:d5:d9:84:5c:b1:b4:de:74:bc:14:89:
c2:57:5a:09:c1:38:4e:35:c8:88:ba:a2:4b:34:9b:37:cb:87:
01:c1:bd:af:62:cd:d1:54:e6:77:02:ae:14:26:db:71:ed:43:
ff:ca:2b:c6:f7:9b:1e:8b:39:bc:5c:59:5c:b0:28:3d:36:34:
cb:03:05:13:89:74:11:3c:d3:46:2e:7d:10:d9:83:9d:18:df:
1a:ad:c5:a5:6e:26:20:4b:4e:a5:10:08:a7:97:92:66:7d:79:
24:87:ef:3d:33:2d:3c:9c:fa:8f:2d:05:54:9a:83:50:b0:0e:
e1:e2:00:e5:e7:de:bb:0f:d7:d8:0f:9a:d0:32:9c:e3:e4:90:
1e:de:14:22:86:20:d3:e2:ed:a5:a5:1c:59:f1:f8:e4:bc:b3:
5f:40:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:43 2024 by rpki-client on console-ams.rpki-client.org