Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zLpWI8ugoXnL4UctD4f0ZGqCaaw.roa
File: zLpWI8ugoXnL4UctD4f0ZGqCaaw.roa (raw, json)
Hash identifier: 2o9nX+GhTT4QP6Wv08ZVBIhru25wIq+s+pOdXPCZfIE=
Subject key identifier: CC:BA:56:23:CB:A0:A1:79:CB:E1:47:2D:0F:87:F4:64:6A:82:69:AC
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0185703992B8602EFF0F7706057181D5771D
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zLpWI8ugoXnL4UctD4f0ZGqCaaw.roa
Signing time: Mon 02 Jan 2023 02:04:59 +0000
ROA not before: Mon 02 Jan 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39651
IP address blocks: 83.177.232.0/21 maxlen: 21
83.188.0.0/18 maxlen: 18
90.144.64.0/19 maxlen: 19
213.102.64.0/19 maxlen: 19
90.141.0.0/19 maxlen: 19
77.218.32.0/19 maxlen: 19
193.150.192.0/18 maxlen: 18
83.177.192.0/19 maxlen: 19
83.177.200.0/21 maxlen: 21
83.177.224.0/19 maxlen: 19
90.143.0.0/19 maxlen: 19
188.148.0.0/14 maxlen: 14
83.190.64.0/18 maxlen: 18
193.14.192.0/20 maxlen: 20
213.102.80.0/20 maxlen: 20
87.227.0.0/17 maxlen: 17
178.218.152.0/22 maxlen: 22
83.191.160.0/19 maxlen: 19
213.100.192.0/19 maxlen: 19
90.141.40.0/21 maxlen: 21
90.141.48.0/20 maxlen: 20
213.89.0.0/16 maxlen: 16
83.182.32.0/19 maxlen: 19
83.188.224.0/19 maxlen: 19
91.130.0.0/18 maxlen: 18
85.194.0.0/18 maxlen: 18
90.143.128.0/17 maxlen: 17
213.200.128.0/18 maxlen: 18
193.13.160.0/20 maxlen: 20
151.177.0.0/16 maxlen: 16
90.129.224.0/19 maxlen: 19
91.128.160.0/19 maxlen: 19
83.248.0.0/13 maxlen: 13
83.180.224.0/19 maxlen: 19
90.142.32.0/19 maxlen: 19
90.142.48.0/20 maxlen: 20
91.128.192.0/19 maxlen: 19
213.103.128.0/19 maxlen: 19
83.177.160.0/19 maxlen: 19
83.181.0.0/19 maxlen: 19
90.133.128.0/19 maxlen: 19
80.216.0.0/15 maxlen: 15
91.128.128.0/19 maxlen: 19
90.133.160.0/19 maxlen: 19
2a04:ae00::/26 maxlen: 26
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:92:b8:60:2e:ff:0f:77:06:05:71:81:d5:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 2 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccba5623cba0a179cbe1472d0f87f4646a8269ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:bc:9f:e4:08:f8:e2:1e:e1:b1:7c:80:c8:
c6:c5:2f:ed:2c:47:c1:cd:70:63:40:c6:37:0f:0f:
58:2f:73:74:ae:c7:af:e0:1d:b3:11:0d:1c:43:4f:
50:03:2b:66:31:02:a4:02:f3:dd:fd:6d:aa:55:a5:
c8:cf:99:10:39:2a:bd:13:26:24:09:36:37:70:aa:
6c:25:42:94:f6:c7:b4:8e:ad:04:b8:f7:d2:5c:96:
3c:69:55:85:42:12:57:ae:75:a5:c1:65:e7:84:c2:
15:07:0b:c2:bc:ed:52:6d:8c:6f:e2:29:f9:70:8c:
91:81:2c:26:55:9a:38:61:b2:85:8f:d4:f5:f8:25:
84:f9:a9:05:45:57:3b:a0:a3:de:1f:08:69:d4:67:
40:a5:a6:46:9d:18:18:90:5c:0b:0f:da:ab:97:07:
b4:d6:86:bf:5f:0b:05:7d:49:c5:94:e2:bc:ec:d6:
d7:88:0b:57:a5:48:7b:ee:84:85:c3:de:89:64:9d:
05:8e:f7:15:3c:cf:96:15:60:c5:ee:9b:3c:a5:0c:
59:b6:cd:cb:aa:3a:6f:6f:2f:5e:d0:ad:0a:ad:eb:
d8:49:ea:9d:ad:9d:97:78:ae:f7:e4:10:44:d4:be:
0c:11:65:42:c9:3d:d4:c7:b1:82:34:65:f0:6b:a5:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:56:23:CB:A0:A1:79:CB:E1:47:2D:0F:87:F4:64:6A:82:69:AC
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/zLpWI8ugoXnL4UctD4f0ZGqCaaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.218.32.0/19
80.216.0.0/15
83.177.160.0-83.177.255.255
83.180.224.0-83.181.31.255
83.182.32.0/19
83.188.0.0/18
83.188.224.0/19
83.190.64.0/18
83.191.160.0/19
83.248.0.0/13
85.194.0.0/18
87.227.0.0/17
90.129.224.0/19
90.133.128.0/18
90.141.0.0/19
90.141.40.0-90.141.63.255
90.142.32.0/19
90.143.0.0/19
90.143.128.0/17
90.144.64.0/19
91.128.128.0-91.128.223.255
91.130.0.0/18
151.177.0.0/16
178.218.152.0/22
188.148.0.0/14
193.13.160.0/20
193.14.192.0/20
193.150.192.0/18
213.89.0.0/16
213.100.192.0/19
213.102.64.0/19
213.103.128.0/19
213.200.128.0/18
IPv6:
2a04:ae00::/26
Signature Algorithm: sha256WithRSAEncryption
1c:d5:6c:04:93:9a:87:5f:17:8e:a2:3c:61:88:74:c6:4c:65:
ae:a9:84:28:b0:ab:38:96:82:27:98:b8:2b:8c:33:d9:a8:4c:
5d:c2:d6:75:41:9e:20:a8:ef:4b:b6:d6:46:3d:04:11:70:5d:
3c:aa:7f:2b:97:1d:43:c9:68:1f:d1:d6:eb:8c:03:3c:1f:7a:
d7:a8:6a:93:75:a4:be:29:39:37:ef:55:14:3e:65:f1:0f:2b:
49:4d:87:c9:01:6a:1d:cd:14:a8:d6:c2:e3:55:58:90:f5:a1:
d2:f2:fa:7a:7d:64:38:db:ca:5e:46:d2:c8:96:f8:fe:19:5a:
15:ec:0e:39:ed:ef:2f:14:73:93:89:f8:b6:8c:2f:a7:5e:25:
12:03:9b:c5:c1:d7:1f:7f:2f:2c:19:33:00:63:3c:47:4f:95:
c6:cf:33:16:69:29:47:71:6c:54:c8:57:7a:90:57:fe:53:fd:
c2:00:56:b7:0c:08:be:c1:3c:8b:27:cf:f1:ce:36:4d:d3:0f:
aa:96:c3:6f:c8:88:80:2b:53:9c:de:a3:b2:38:9d:0c:f5:bd:
b1:bc:bc:9d:62:0c:8f:2e:a2:bf:67:86:cc:75:b3:f6:eb:45:
11:4d:8f:d1:5f:98:89:c0:05:76:51:34:80:64:03:bd:81:7c:
a5:a9:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:53 2024 by rpki-client on console-fra.rpki-client.org