Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/rtUUjR8D9PzU8Lb3vCddJnXTUPA.roa
File: rtUUjR8D9PzU8Lb3vCddJnXTUPA.roa (raw, json)
Hash identifier: p32ftYHmudxXT63Knq8VSmLWVMXNAReHgbPHNb2eIxQ=
Subject key identifier: AE:D5:14:8D:1F:03:F4:FC:D4:F0:B6:F7:BC:27:5D:26:75:D3:50:F0
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 018CC6B8273598DD08A0077FB7AC93F76710
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/rtUUjR8D9PzU8Lb3vCddJnXTUPA.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21021
IP address blocks: 217.172.224.0/19 maxlen: 19
217.75.48.0/20 maxlen: 20
217.70.48.0/20 maxlen: 20
195.93.222.0/23 maxlen: 23
83.68.64.0/19 maxlen: 19
195.93.134.0/23 maxlen: 23
89.230.0.0/16 maxlen: 16
89.17.224.0/19 maxlen: 19
94.78.128.0/18 maxlen: 18
80.245.176.0/20 maxlen: 20
217.144.192.0/19 maxlen: 19
31.42.16.0/20 maxlen: 20
89.229.0.0/16 maxlen: 16
84.38.80.0/20 maxlen: 20
176.107.112.0/21 maxlen: 21
81.190.0.0/16 maxlen: 16
185.31.184.0/22 maxlen: 22
31.6.128.0/18 maxlen: 18
194.116.132.0/23 maxlen: 23
89.231.0.0/16 maxlen: 16
80.244.128.0/19 maxlen: 19
62.141.192.0/18 maxlen: 18
92.42.112.0/21 maxlen: 21
93.94.184.0/21 maxlen: 21
31.6.192.0/19 maxlen: 19
193.200.118.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
193.43.240.0/22 maxlen: 22
37.131.128.0/19 maxlen: 19
193.43.243.0/24 maxlen: 24
193.43.242.0/24 maxlen: 24
95.129.224.0/21 maxlen: 21
193.106.76.0/22 maxlen: 22
37.190.128.0/17 maxlen: 17
89.228.0.0/16 maxlen: 16
95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
176.221.96.0/19 maxlen: 19
46.186.0.0/17 maxlen: 17
85.117.0.0/19 maxlen: 19
213.136.224.0/19 maxlen: 19
46.231.56.0/21 maxlen: 21
62.61.32.0/19 maxlen: 19
87.116.192.0/18 maxlen: 18
94.251.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Fri 09 Feb 2024 08:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:27:35:98:dd:08:a0:07:7f:b7:ac:93:f7:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed5148d1f03f4fcd4f0b6f7bc275d2675d350f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:03:2f:49:6b:8f:99:6d:dc:a7:94:32:91:
ad:7d:c7:f9:8a:04:c4:da:77:20:73:8e:ab:c7:6c:
7b:42:0b:84:45:4b:9d:0c:88:42:5f:c1:5a:32:97:
81:e4:8c:54:35:28:cd:91:da:35:e2:aa:e0:25:4b:
6d:c8:fc:bd:a2:5c:bf:f8:1e:a8:dc:a3:91:f3:5d:
70:07:7a:cf:f4:c4:34:59:0c:ae:ef:61:8c:d4:04:
91:a4:4a:b5:b7:f3:d3:37:de:d1:88:21:aa:76:94:
ea:05:4e:11:6a:16:3f:d8:21:21:9f:1d:75:60:3c:
56:cb:0e:a9:a4:e8:c0:3d:4b:3a:75:f9:08:6b:40:
01:c0:af:32:ef:9c:3c:48:2b:33:0f:54:1f:f6:fe:
5d:63:e3:d7:11:ee:93:1a:29:21:97:45:43:73:0c:
4b:e6:6b:41:5c:c7:66:26:0c:cb:00:fa:d6:22:90:
56:90:f8:3a:a3:9f:b6:e8:80:a9:26:8b:78:d9:7b:
be:29:ee:bf:a9:a0:26:f0:01:cd:8f:d5:80:b9:a0:
17:12:e0:18:29:db:92:68:ab:08:8b:1c:db:58:ec:
9e:c3:34:73:b7:32:29:d0:6c:72:43:31:b6:f3:fc:
06:fa:51:6f:b2:a0:f9:e2:e6:e4:37:f7:8f:67:f5:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:14:8D:1F:03:F4:FC:D4:F0:B6:F7:BC:27:5D:26:75:D3:50:F0
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/rtUUjR8D9PzU8Lb3vCddJnXTUPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0-31.6.223.255
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:b9:4c:1f:70:c7:8e:8e:2d:55:c1:95:06:88:64:a7:6d:f0:
23:42:2f:58:d0:e9:56:06:e9:b0:48:4c:07:b2:84:e2:3c:1f:
ae:5a:62:6b:40:46:e4:87:6b:51:04:97:2e:d9:0d:c2:c3:14:
88:c2:19:23:8e:74:ee:b6:0c:3a:bf:be:20:c2:17:c9:d9:35:
0d:9c:86:30:f4:ed:0c:9a:ca:ae:ac:c0:8d:aa:2c:44:b8:4f:
aa:45:95:f7:be:cf:f1:97:e9:ac:a9:8a:8b:7d:29:1c:ea:da:
b3:15:1c:0e:6b:0a:6b:a3:3d:89:07:45:4f:29:dc:ad:7f:1a:
fa:cf:4b:d5:bc:f4:4f:ed:55:db:e9:4f:d2:8c:eb:17:c6:1d:
a0:0a:2c:85:d1:53:0a:87:71:4a:ac:fc:53:24:bf:f6:8c:a0:
b4:0e:45:11:ae:7b:1b:a5:d5:fc:92:df:91:32:ab:45:ff:6d:
b9:32:02:18:2d:43:12:37:d4:39:e7:c4:97:ba:08:d2:7a:b6:
8c:e6:24:84:f4:1d:2c:4a:73:00:d6:36:92:29:88:50:0f:9a:
4b:6a:64:3b:9e:6f:30:1f:4f:de:f4:d3:a7:82:79:91:90:10:
01:e4:e9:0b:ff:2e:b0:9b:86:ca:27:9f:3f:35:df:a8:bc:90:
da:6c:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:50 2024 by rpki-client on console-fra.rpki-client.org