Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/JBOUCFSKGjmGzybWW9YnQAN7VZI.roa
File: JBOUCFSKGjmGzybWW9YnQAN7VZI.roa (raw, json)
Hash identifier: 1+eCn3yo4hbhX3wuUTWIqgrOTcJ+vaaZ1mgMuIOMmqI=
Subject key identifier: 24:13:94:08:54:8A:1A:39:86:CF:26:D6:5B:D6:27:40:03:7B:55:92
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ADB491F88B8E06B15D49B6E06573E
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/JBOUCFSKGjmGzybWW9YnQAN7VZI.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 95.174.160.0/19 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
159.20.8.0/21 maxlen: 24
213.222.64.0/18 maxlen: 24
95.168.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
194.6.128.0/19 maxlen: 24
195.146.192.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
212.39.128.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
178.19.0.0/20 maxlen: 24
81.220.0.0/16 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.85.128.0/19 maxlen: 24
37.64.0.0/13 maxlen: 24
46.165.64.0/18 maxlen: 24
89.185.160.0/19 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
212.198.0.0/16 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
86.63.224.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
85.117.128.0/19 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
95.171.128.0/19 maxlen: 24
77.137.208.0/20 maxlen: 24
81.185.0.0/16 maxlen: 24
80.185.0.0/16 maxlen: 24
77.137.224.0/19 maxlen: 24
84.96.0.0/13 maxlen: 24
87.231.0.0/16 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
188.224.0.0/17 maxlen: 24
95.136.128.0/17 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
185.150.120.0/22 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
109.0.0.0/11 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
213.176.192.0/19 maxlen: 24
84.55.128.0/18 maxlen: 24
89.170.0.0/16 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
188.7.0.0/16 maxlen: 24
212.94.160.0/19 maxlen: 24
188.141.128.0/17 maxlen: 24
83.141.128.0/17 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
95.175.160.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:db:49:1f:88:b8:e0:6b:15:d4:9b:6e:06:57:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24139408548a1a3986cf26d65bd62740037b5592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:30:3f:75:32:41:a8:6f:37:9f:fe:4e:5e:b5:
87:46:3f:aa:c5:9d:79:6e:d2:c7:03:46:05:be:52:
e9:4e:0d:7c:fc:6b:a9:dd:a4:99:03:20:33:fa:25:
17:84:15:f0:47:bb:79:54:6f:38:62:cf:f3:fe:c5:
4f:4f:d0:63:db:41:3a:39:7f:ec:27:31:8d:58:fd:
72:cc:c2:35:c2:f1:2d:83:af:80:b7:9e:75:27:df:
8a:41:fa:25:e3:0c:fc:5f:d8:f7:85:da:fe:f5:63:
c7:7b:83:b0:f5:f2:dd:a8:5a:41:25:c5:c6:de:f8:
1f:7a:a8:74:c3:20:02:89:83:01:c1:10:f3:d7:0a:
84:38:f9:4f:a5:ff:bf:76:d5:97:16:26:f0:18:a6:
2b:2c:12:ca:a9:6d:c1:06:b6:cd:ac:5a:a1:7d:36:
d1:db:c1:2e:62:8c:3a:98:df:d9:62:2c:49:85:ae:
dd:3e:90:e8:fe:0c:50:83:24:ab:e5:8d:dc:f8:8d:
84:6e:75:96:42:9d:9b:12:d6:42:d0:38:c3:98:38:
9f:ec:a5:9c:75:4c:77:a0:00:45:2c:c4:4b:c6:bc:
94:69:cb:a8:63:15:ed:c0:77:25:22:dd:17:9e:3c:
f5:b6:21:64:ce:1e:02:62:29:41:a2:eb:06:71:bb:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:94:08:54:8A:1A:39:86:CF:26:D6:5B:D6:27:40:03:7B:55:92
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/JBOUCFSKGjmGzybWW9YnQAN7VZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
109.0.0.0/11
141.170.216.0/21
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.147.204.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
b3:db:17:e4:3c:8f:06:f2:86:a0:ac:62:70:d8:91:f4:da:a3:
d0:b7:65:71:d4:96:3c:58:97:9a:06:e1:d3:ec:58:62:7d:c6:
78:22:30:63:d5:bf:c2:a9:14:03:54:86:4b:c3:70:ca:94:3e:
45:bc:a9:51:01:9d:3a:e9:98:ea:5f:df:ed:ef:d4:fa:c1:fb:
9a:13:86:b3:a1:be:df:2e:df:1d:3b:b0:c9:85:55:da:51:64:
51:96:a7:27:5b:54:11:49:94:39:49:d3:86:4a:ac:6d:57:5f:
3b:aa:0a:22:f9:4f:20:bd:77:99:ca:19:88:a3:4d:d4:05:23:
82:7a:08:37:ff:a3:26:d2:57:8a:23:78:4a:f9:1e:ac:06:10:
7b:41:34:dc:ca:6f:ea:14:53:8c:29:39:2b:cc:ad:c2:1e:c4:
a7:c7:12:f8:21:0d:48:ef:ce:a4:fd:77:98:2e:d4:d8:a8:b6:
d2:ec:3f:9e:f7:94:93:1f:39:2c:66:8d:dc:4a:92:34:94:55:
32:1a:bc:47:0e:12:fe:30:9c:6c:74:c9:07:e2:f9:f8:4e:00:
30:77:64:35:a0:65:30:0d:60:de:eb:5b:d0:ba:13:b1:40:25:
14:80:20:d7:46:32:32:50:4f:12:4d:66:bb:85:87:71:97:d7:
ae:19:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:54 2023 by rpki-client on console-fra.rpki-client.org