Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/m2P74kTXMBC56IZ5FTGQ-VECHJE.roa
File: m2P74kTXMBC56IZ5FTGQ-VECHJE.roa (raw, json)
Hash identifier: jquMCSABnhBeP9MJ1wbXZ4hKwWJUI+aLriOWVaezxgw=
Subject key identifier: 9B:63:FB:E2:44:D7:30:10:B9:E8:86:79:15:31:90:F9:51:02:1C:91
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01856C7811B7BA02011632CCE8409A4B4F9E
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/m2P74kTXMBC56IZ5FTGQ-VECHJE.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21021
IP address blocks: 217.172.224.0/19 maxlen: 19
217.75.48.0/20 maxlen: 20
217.70.48.0/20 maxlen: 20
195.93.222.0/23 maxlen: 23
83.68.64.0/19 maxlen: 19
195.93.134.0/23 maxlen: 23
89.230.0.0/16 maxlen: 16
89.17.224.0/19 maxlen: 19
94.78.128.0/18 maxlen: 18
80.245.176.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
89.229.0.0/16 maxlen: 16
84.38.80.0/20 maxlen: 20
176.107.112.0/21 maxlen: 21
81.190.0.0/16 maxlen: 16
185.31.184.0/22 maxlen: 22
31.6.128.0/18 maxlen: 18
194.116.132.0/23 maxlen: 23
89.231.0.0/16 maxlen: 16
80.244.128.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
31.6.192.0/19 maxlen: 19
193.200.118.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
193.43.240.0/22 maxlen: 22
37.131.128.0/19 maxlen: 19
95.129.224.0/21 maxlen: 21
193.106.76.0/22 maxlen: 22
37.190.128.0/17 maxlen: 17
89.228.0.0/16 maxlen: 16
95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
176.221.96.0/19 maxlen: 19
46.186.0.0/17 maxlen: 17
85.117.0.0/19 maxlen: 19
213.136.224.0/19 maxlen: 19
46.231.56.0/21 maxlen: 21
62.61.32.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 03 Jul 2023 08:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:11:b7:ba:02:01:16:32:cc:e8:40:9a:4b:4f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b63fbe244d73010b9e88679153190f951021c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:99:45:54:84:8a:9e:ae:ff:08:c1:d6:a1:
73:cc:a0:92:ab:d2:d2:dc:40:6d:15:68:8c:cb:3d:
19:41:2b:5e:24:5c:f1:32:1c:3f:d5:9f:17:2e:84:
8e:8a:d2:22:42:96:51:69:9d:46:66:cb:cf:8f:a9:
15:d0:1f:59:f3:42:3c:9a:f3:db:a6:cc:aa:81:2f:
eb:19:c6:2d:b5:77:06:94:aa:cf:ad:73:14:78:93:
a7:7f:4d:32:9b:dd:c6:c4:62:48:28:2d:80:e1:62:
37:ce:8f:c0:31:6a:5e:bf:73:9d:6f:ad:35:c5:d4:
ac:b7:ac:4b:c6:3e:6d:04:87:20:95:57:71:02:2a:
01:55:cd:2d:e2:e7:25:c6:f8:cb:8e:a3:60:83:d5:
d2:47:fd:de:04:ee:3a:ec:52:cc:b3:17:86:b3:92:
4b:d0:5f:eb:45:b3:d2:68:c5:71:b0:10:64:a0:63:
e1:cf:fd:61:2c:49:43:a0:8c:84:c7:b4:ba:7d:d3:
97:56:90:99:da:de:64:46:03:a3:80:4d:e1:27:e4:
bc:12:1c:b7:0a:70:7c:fb:83:10:ca:78:c5:8a:47:
8a:af:14:6c:f4:ac:92:05:1c:c1:ce:ac:7e:4f:8e:
f7:ae:0d:fe:f6:37:08:ef:1e:4a:f9:2f:cc:8f:4e:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:FB:E2:44:D7:30:10:B9:E8:86:79:15:31:90:F9:51:02:1C:91
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/m2P74kTXMBC56IZ5FTGQ-VECHJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:31:c3:64:0d:e9:39:bf:1b:9d:67:3a:9b:c5:ee:69:ff:8a:
b4:53:fc:2a:38:22:44:04:dc:06:ba:2d:7f:93:17:29:b3:52:
3b:aa:91:fc:74:de:ec:d1:ac:88:35:78:96:7f:31:f4:99:3f:
21:ab:00:fc:20:12:96:28:75:79:f3:1d:fc:b2:54:96:63:db:
a2:8b:c2:f6:af:fd:04:fd:35:76:39:b7:da:d9:d4:02:5c:2a:
7b:c4:c1:c6:34:8d:da:b0:33:0a:13:8b:e4:b2:80:19:d1:5a:
8a:f8:ef:13:b1:26:79:74:fd:18:05:d9:99:8b:6d:fc:92:3d:
1f:e5:6a:09:9b:39:46:59:89:6f:af:16:78:73:e7:49:48:19:
cb:a4:62:31:df:6b:e4:0e:7e:eb:ec:26:d0:5a:9d:8b:18:09:
58:32:44:53:63:27:ed:65:2c:65:99:0a:c4:19:1c:45:0f:f5:
70:d6:95:9b:fd:a4:cc:c4:e6:5c:9f:d4:27:70:35:fd:e6:67:
89:9f:f2:ab:9a:7f:f4:51:16:3f:25:5a:80:8f:5a:05:3f:7c:
9c:76:29:45:85:65:36:30:c3:7c:5b:07:96:7f:3b:09:0b:28:
26:d0:e1:1b:5e:0d:0b:47:ea:d7:e2:b5:ce:b9:4e:21:3e:15:
5e:34:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:50 2024 by rpki-client on console-fra.rpki-client.org