Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/y6zGlc8ux0IPWanGo8gbIa92_jg.roa
File: y6zGlc8ux0IPWanGo8gbIa92_jg.roa (raw, json)
Hash identifier: rnyWZbXuJAJvAJxTzjLFU3fQwAzK56NjmWahGvuPkxg=
Subject key identifier: CB:AC:C6:95:CF:2E:C7:42:0F:59:A9:C6:A3:C8:1B:21:AF:76:FE:38
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018572836F8CF9A150ED2E9BFBDA61C61CC0
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/y6zGlc8ux0IPWanGo8gbIa92_jg.roa
Signing time: Mon 02 Jan 2023 12:44:54 +0000
ROA not before: Mon 02 Jan 2023 12:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39737
IP address blocks: 77.93.176.0/20 maxlen: 20
89.46.160.0/22 maxlen: 22
77.93.160.0/23 maxlen: 23
77.93.162.0/24 maxlen: 24
77.93.164.0/22 maxlen: 22
77.93.168.0/22 maxlen: 22
86.107.183.0/24 maxlen: 24
89.43.193.0/24 maxlen: 24
94.177.32.0/21 maxlen: 21
188.247.226.0/23 maxlen: 23
94.177.40.0/21 maxlen: 21
188.247.238.0/24 maxlen: 24
188.247.239.0/24 maxlen: 24
188.247.240.0/21 maxlen: 21
188.247.248.0/21 maxlen: 21
188.247.252.0/22 maxlen: 22
193.58.243.0/24 maxlen: 24
92.55.152.0/24 maxlen: 24
92.55.153.0/24 maxlen: 24
92.55.154.0/24 maxlen: 24
194.102.221.0/24 maxlen: 24
89.44.232.0/22 maxlen: 22
89.18.1.0/24 maxlen: 24
89.18.0.0/21 maxlen: 21
89.18.2.0/24 maxlen: 24
89.18.0.0/20 maxlen: 20
89.18.0.0/24 maxlen: 24
89.18.4.0/24 maxlen: 24
89.18.3.0/24 maxlen: 24
89.18.5.0/24 maxlen: 24
89.18.8.0/24 maxlen: 24
89.18.9.0/24 maxlen: 24
89.18.6.0/24 maxlen: 24
89.18.7.0/24 maxlen: 24
89.18.11.0/24 maxlen: 24
89.18.10.0/24 maxlen: 24
89.18.12.0/24 maxlen: 24
89.18.15.0/24 maxlen: 24
89.18.13.0/24 maxlen: 24
89.18.14.0/24 maxlen: 24
89.38.140.0/22 maxlen: 22
188.247.129.0/24 maxlen: 24
89.35.74.0/23 maxlen: 23
188.247.132.0/23 maxlen: 23
92.55.131.0/24 maxlen: 24
92.55.132.0/24 maxlen: 24
92.55.134.0/24 maxlen: 24
92.55.135.0/24 maxlen: 24
92.55.144.0/21 maxlen: 21
86.105.181.0/24 maxlen: 24
195.20.145.0/24 maxlen: 24
89.47.224.0/21 maxlen: 21
89.37.120.0/21 maxlen: 21
87.243.0.0/21 maxlen: 21
89.34.72.0/23 maxlen: 23
2a00:1480:1::/48 maxlen: 48
2a00:1480:5::/48 maxlen: 48
2a00:1480::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Nov 2023 10:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:6f:8c:f9:a1:50:ed:2e:9b:fb:da:61:c6:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbacc695cf2ec7420f59a9c6a3c81b21af76fe38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:bd:17:09:60:8c:fb:26:29:1c:9f:31:33:
37:db:94:55:a8:bc:05:35:08:ab:e7:45:7b:3b:36:
29:21:e1:58:9d:7b:17:c0:74:f9:89:a2:be:a5:c3:
01:2c:82:bb:cd:99:76:37:37:51:75:5a:61:87:17:
f4:3b:9a:18:b2:62:43:6e:0c:d6:a8:41:bb:f1:e1:
2a:d5:8b:f1:19:81:ff:e8:0f:73:df:a3:53:77:04:
30:c9:13:68:43:77:88:2f:52:dc:0b:9b:3b:09:22:
62:eb:2d:c2:cf:5a:10:99:93:f1:42:2d:05:c9:44:
7d:21:26:4e:43:58:9e:24:42:5d:79:70:a7:43:64:
b5:97:f2:1c:a5:b4:a5:c0:93:4c:39:be:10:87:7a:
03:1e:55:57:4d:51:9e:27:07:d6:9e:64:3b:65:67:
14:56:69:46:c2:82:a5:f9:dc:a0:1e:ed:db:86:99:
a7:31:ba:5a:b1:11:57:9e:e3:f5:6b:c2:f4:c5:1a:
01:90:59:e0:3d:c6:15:6b:61:07:71:c8:62:8e:80:
11:66:20:6b:14:eb:e0:b1:6e:fb:1c:75:a6:74:69:
db:02:25:39:9f:d1:6b:e9:ed:e6:39:cc:2e:72:23:
5a:fb:e2:0f:8f:5c:bf:cb:af:27:11:ea:56:d1:f8:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:C6:95:CF:2E:C7:42:0F:59:A9:C6:A3:C8:1B:21:AF:76:FE:38
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/y6zGlc8ux0IPWanGo8gbIa92_jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.160.0-77.93.162.255
77.93.164.0-77.93.171.255
77.93.176.0/20
86.105.181.0/24
86.107.183.0/24
87.243.0.0/21
89.18.0.0/20
89.34.72.0/23
89.35.74.0/23
89.37.120.0/21
89.38.140.0/22
89.43.193.0/24
89.44.232.0/22
89.46.160.0/22
89.47.224.0/21
92.55.131.0-92.55.132.255
92.55.134.0/23
92.55.144.0-92.55.154.255
94.177.32.0/20
188.247.129.0/24
188.247.132.0/23
188.247.226.0/23
188.247.238.0-188.247.255.255
193.58.243.0/24
194.102.221.0/24
195.20.145.0/24
IPv6:
2a00:1480::/47
2a00:1480:5::/48
Signature Algorithm: sha256WithRSAEncryption
35:71:76:29:d9:db:c8:37:69:27:15:18:18:ff:e9:43:31:03:
47:99:26:60:fd:e6:8d:90:d3:c3:9b:57:6c:3b:3b:09:5c:ab:
0f:72:e0:65:42:98:43:5b:6d:1b:b7:3a:f0:14:fb:85:5b:63:
f1:68:81:3b:17:2f:cd:ea:5c:e6:f7:39:71:1d:65:f6:ae:c2:
93:4a:c3:f5:75:6b:fa:22:f0:e4:5a:78:3a:1c:f4:5b:4c:b8:
b5:43:65:47:ad:9c:5a:39:69:91:7d:34:b8:a2:f0:11:42:74:
d8:29:59:83:4c:ac:cb:b1:0b:97:b7:72:b9:e3:83:12:2a:5a:
c9:43:0f:5a:f3:07:f9:f3:44:2e:47:f3:27:10:b9:c7:15:9e:
94:74:1b:e3:04:40:7c:a6:8e:88:0f:39:3e:88:b9:da:d1:c8:
55:52:79:52:45:62:43:72:d9:5f:b7:7b:86:e1:96:80:b1:ca:
79:ec:75:5b:cb:3a:40:87:46:22:fb:07:62:e0:16:0a:b0:63:
e5:ab:37:ce:8d:b8:4d:cc:bd:c2:04:47:43:e0:6f:04:8a:9b:
c1:d1:e8:01:bd:da:79:17:88:09:87:ca:04:e6:58:36:4f:6e:
6f:cc:0b:78:66:e1:de:31:36:35:00:20:d9:f7:f2:e6:7f:a4:
81:aa:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org