Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/uLbsEOC_KVRMAGA0trPTGUXeYNs.roa
File: uLbsEOC_KVRMAGA0trPTGUXeYNs.roa (raw, json)
Hash identifier: /+No6zr+nXeDVGOz3xGFULBQdtEwvAYmb+JmA9xbLqE=
Subject key identifier: B8:B6:EC:10:E0:BF:29:54:4C:00:60:34:B6:B3:D3:19:45:DE:60:DB
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 0187770F42B7B2F968E7DECBF4DD1A68248E
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/uLbsEOC_KVRMAGA0trPTGUXeYNs.roa
Signing time: Wed 12 Apr 2023 20:01:41 +0000
ROA not before: Wed 12 Apr 2023 20:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 178.80.64.0/21 maxlen: 21
178.80.72.0/21 maxlen: 21
178.80.80.0/21 maxlen: 21
178.80.88.0/21 maxlen: 21
178.80.96.0/20 maxlen: 20
178.80.0.0/20 maxlen: 20
178.80.16.0/20 maxlen: 20
178.80.32.0/20 maxlen: 20
178.80.48.0/20 maxlen: 20
178.80.160.0/20 maxlen: 20
178.80.176.0/20 maxlen: 20
178.80.192.0/19 maxlen: 19
178.80.112.0/20 maxlen: 20
178.80.128.0/20 maxlen: 20
178.80.144.0/20 maxlen: 20
46.153.128.0/20 maxlen: 20
46.153.144.0/20 maxlen: 20
46.153.160.0/19 maxlen: 19
31.166.192.0/19 maxlen: 19
46.153.96.0/19 maxlen: 19
31.166.224.0/20 maxlen: 20
46.153.240.0/20 maxlen: 20
46.153.192.0/20 maxlen: 20
46.153.208.0/20 maxlen: 20
46.153.224.0/20 maxlen: 20
46.152.160.0/20 maxlen: 20
31.166.32.0/19 maxlen: 19
46.152.176.0/20 maxlen: 20
178.81.240.0/20 maxlen: 20
46.152.192.0/19 maxlen: 19
178.81.192.0/20 maxlen: 20
46.152.128.0/19 maxlen: 19
31.166.0.0/20 maxlen: 20
178.81.208.0/20 maxlen: 20
31.166.16.0/20 maxlen: 20
178.81.224.0/20 maxlen: 20
46.153.16.0/20 maxlen: 20
46.153.32.0/20 maxlen: 20
31.166.160.0/19 maxlen: 19
46.153.48.0/20 maxlen: 20
46.153.64.0/19 maxlen: 19
46.152.224.0/20 maxlen: 20
46.152.240.0/20 maxlen: 20
46.153.0.0/20 maxlen: 20
31.166.128.0/20 maxlen: 20
178.81.16.0/20 maxlen: 20
178.81.32.0/20 maxlen: 20
178.81.48.0/20 maxlen: 20
178.80.224.0/19 maxlen: 19
178.81.0.0/20 maxlen: 20
46.152.64.0/19 maxlen: 19
46.152.96.0/19 maxlen: 19
46.152.0.0/19 maxlen: 19
46.152.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:0f:42:b7:b2:f9:68:e7:de:cb:f4:dd:1a:68:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Apr 12 20:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8b6ec10e0bf29544c006034b6b3d31945de60db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:d6:2a:bf:ba:70:38:69:14:75:7e:e4:8f:
e3:60:1c:ef:01:3a:ee:02:88:92:f9:73:2c:cf:a7:
25:1a:a9:95:f6:31:7e:7f:10:ad:5b:d8:67:48:36:
1a:2b:10:c2:e1:a4:bc:dc:a8:fb:50:75:3c:f8:84:
86:d5:75:51:bb:12:5a:65:e0:f0:9d:1a:1c:2c:8b:
5c:37:29:c7:90:f5:f5:f7:eb:47:56:dc:c7:96:bc:
00:29:ba:62:6e:8e:65:b8:10:43:5f:1a:15:6d:21:
a0:b5:70:c7:23:bb:89:56:3f:f3:ff:ea:a8:80:36:
1b:0e:ee:fd:70:4e:e3:4a:b7:4f:ef:30:a2:d6:a9:
0d:eb:8e:d4:68:b4:60:89:62:7c:2c:4f:ff:09:36:
03:bf:26:11:d3:76:d0:4c:de:18:a4:cf:a0:54:4a:
4b:cf:95:22:a3:b5:aa:1c:a5:3d:f4:cf:48:a7:3c:
91:20:73:95:0e:2b:e7:19:15:d6:33:ad:eb:48:50:
3c:d4:08:ab:14:bd:39:65:fc:2e:09:77:17:cc:a3:
98:14:40:65:cf:f1:01:54:5c:5f:9b:46:52:67:ed:
d9:e6:96:30:4b:d8:b8:29:cb:1a:0b:10:90:22:07:
b8:12:e8:40:fe:70:36:f6:3e:b7:48:ea:24:2c:a6:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B6:EC:10:E0:BF:29:54:4C:00:60:34:B6:B3:D3:19:45:DE:60:DB
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/uLbsEOC_KVRMAGA0trPTGUXeYNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.166.0.0/18
31.166.128.0/20
31.166.160.0-31.166.239.255
46.152.0.0/15
178.80.0.0-178.81.63.255
178.81.192.0/18
Signature Algorithm: sha256WithRSAEncryption
73:94:ba:15:6b:c3:33:b5:a3:f3:d6:5f:50:49:b5:83:a5:de:
0e:50:d7:68:6a:be:ca:41:d2:5b:a8:3f:9d:aa:13:68:4c:be:
2e:37:cc:d0:6f:08:39:2e:13:17:2b:36:01:71:4e:4b:a7:c4:
fd:10:25:96:57:21:e8:9d:3f:1c:a5:8c:aa:4f:3c:89:9d:32:
81:7c:5a:85:50:24:db:85:85:3c:e8:12:ec:23:9e:d5:54:77:
db:ef:c4:4c:44:e6:bd:18:62:5d:71:c6:cb:10:8f:c2:36:d7:
96:3f:dd:fc:94:bb:74:36:bd:5d:1d:7a:a9:68:d4:61:18:da:
c9:12:23:22:8b:51:18:27:f7:1a:b1:5b:21:c3:e3:c8:0a:b0:
27:f6:7b:c4:af:c8:27:4a:36:1a:43:64:cc:58:b7:f2:99:25:
4d:09:e2:e1:04:9c:d1:a2:4a:36:cc:d1:cd:a6:51:bc:da:54:
e6:63:a6:8d:37:cc:77:f1:c7:20:01:3a:c4:b7:52:42:7e:cc:
d1:97:dd:30:ae:25:dc:fc:ab:77:45:7b:b1:38:9b:21:46:3f:
63:5b:25:ee:5c:24:bb:cb:36:2f:44:5f:a4:93:86:c6:1c:9f:
26:9e:a9:6c:6d:49:f0:9d:39:a3:af:cc:7d:b2:a8:50:ca:ee:
78:d5:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:20 2023 by rpki-client on console-ams.rpki-client.org