Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/1-cupZ3LLTWkUYmAZFifGG7MBeZU.roa
File: 1-cupZ3LLTWkUYmAZFifGG7MBeZU.roa (raw, json)
Hash identifier: YMctRkmjXogTy9b5QWwzZY1+9H2HuIZwWU0xn6W6NFg=
Subject key identifier: F9:CB:A9:67:72:CB:4D:69:14:62:60:19:16:27:C6:1B:B3:01:79:95
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 018CC803017C9DFF424EDEA3492F05F681F8
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/1-cupZ3LLTWkUYmAZFifGG7MBeZU.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12654
IP address blocks: 84.205.71.0/24 maxlen: 24
84.205.70.0/24 maxlen: 24
84.205.69.0/24 maxlen: 24
84.205.68.0/24 maxlen: 24
84.205.67.0/24 maxlen: 24
84.205.66.0/24 maxlen: 24
84.205.65.0/24 maxlen: 24
84.205.77.0/24 maxlen: 24
84.205.78.0/24 maxlen: 24
84.205.76.0/24 maxlen: 24
84.205.75.0/24 maxlen: 24
84.205.74.0/24 maxlen: 24
84.205.73.0/24 maxlen: 24
84.205.72.0/24 maxlen: 24
84.205.85.0/24 maxlen: 24
84.205.84.0/24 maxlen: 24
84.205.82.0/24 maxlen: 24
84.205.81.0/24 maxlen: 24
84.205.80.0/24 maxlen: 24
84.205.79.0/24 maxlen: 24
84.205.91.0/24 maxlen: 24
84.205.90.0/24 maxlen: 24
84.205.89.0/24 maxlen: 24
84.205.88.0/24 maxlen: 24
84.205.87.0/24 maxlen: 24
84.205.86.0/24 maxlen: 24
84.205.95.0/24 maxlen: 24
84.205.94.0/24 maxlen: 24
84.205.93.0/24 maxlen: 24
84.205.92.0/24 maxlen: 24
84.205.64.0/24 maxlen: 24
93.175.152.0/24 maxlen: 24
93.175.151.0/24 maxlen: 24
93.175.150.0/24 maxlen: 24
93.175.149.0/24 maxlen: 24
93.175.148.0/24 maxlen: 24
93.175.146.0/24 maxlen: 24
93.175.153.0/24 maxlen: 24
2001:7fb:fe13::/48 maxlen: 48
2001:7fb:ff13::/48 maxlen: 48
2001:7fb:fd02::/48 maxlen: 48
2001:7fb:ff02::/48 maxlen: 48
2001:7fb:ff10::/48 maxlen: 48
2001:7fb:fe10::/48 maxlen: 48
2001:7fb:fe17::/48 maxlen: 48
2001:7fb:ff17::/48 maxlen: 48
2001:7fb:fe06::/48 maxlen: 48
2001:7fb:ff06::/48 maxlen: 48
2001:7fb:fe03::/48 maxlen: 48
2001:7fb:fe0d::/48 maxlen: 48
2001:7fb:ff0d::/48 maxlen: 48
2001:7fb:ff14::/48 maxlen: 48
2001:7fb:fe14::/48 maxlen: 48
2001:7fb:fe00::/48 maxlen: 48
2001:7fb:ff00::/48 maxlen: 48
2001:7fb:fe0a::/48 maxlen: 48
2001:7fb:ff0a::/48 maxlen: 48
2001:7fb:fe07::/48 maxlen: 48
2001:7fb:ff07::/48 maxlen: 48
2001:7fb:fe18::/48 maxlen: 48
2001:7fb:ff18::/48 maxlen: 48
2001:7fb:ff04::/48 maxlen: 48
2001:7fb:fe04::/48 maxlen: 48
2001:7fb:fe0e::/48 maxlen: 48
2001:7fb:ff0e::/48 maxlen: 48
2001:7fb:fe0b::/48 maxlen: 48
2001:7fb:ff0b::/48 maxlen: 48
2001:7fb:fe15::/48 maxlen: 48
2001:7fb:ff15::/48 maxlen: 48
2001:7fb:fe01::/48 maxlen: 48
2001:7fb:ff01::/48 maxlen: 48
2001:7fb:fe12::/48 maxlen: 48
2001:7fb:ff12::/48 maxlen: 48
2001:7fb:ff0f::/48 maxlen: 48
2001:7fb:fe0f::/48 maxlen: 48
2001:7fb:ff05::/48 maxlen: 48
2001:7fb:fe05::/48 maxlen: 48
2001:7fb:ff0c::/48 maxlen: 48
2001:7fb:fe0c::/48 maxlen: 48
2001:7fb:fe16::/48 maxlen: 48
2001:7fb:ff16::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 07:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:01:7c:9d:ff:42:4e:de:a3:49:2f:05:f6:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9cba96772cb4d69146260191627c61bb3017995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:59:36:db:15:5c:54:41:dd:1b:7d:07:0f:
98:30:5f:e1:41:0d:2d:8d:0b:6a:f0:07:8d:18:18:
ca:9a:d1:54:ef:7f:ac:5d:08:5e:a7:1c:f2:87:b5:
6b:f4:dc:f1:49:5a:6f:26:cd:59:8e:f8:df:95:c1:
54:dc:f6:d0:21:6d:53:0d:81:f7:73:86:5e:da:03:
1a:f6:23:f3:c9:67:fe:7e:c1:e9:8f:aa:87:74:2f:
67:0c:4d:d6:ae:6b:5e:76:07:26:0b:62:3a:08:80:
41:05:5a:52:12:a6:9c:eb:d5:23:8c:60:81:e8:bf:
ed:63:53:4b:d5:5e:fa:86:7e:dd:89:a3:84:5c:33:
94:0e:07:5d:57:53:25:87:ee:aa:a4:29:81:0b:70:
34:52:d0:60:74:57:da:08:ea:bd:79:4e:29:ac:fb:
35:57:9d:b3:2c:67:d0:fa:e8:12:38:b6:95:6e:fe:
eb:e7:96:97:65:28:d9:89:36:21:70:fc:72:ac:c3:
fe:eb:48:57:a4:0a:6c:ed:c7:de:7f:ae:78:27:90:
c4:4e:5d:e4:e3:16:90:81:33:5a:56:51:2f:1a:ef:
e0:40:0e:7b:24:90:3f:90:9b:d9:27:25:c0:45:3f:
89:73:e7:d3:6e:db:41:87:65:3c:89:06:a6:45:9e:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:A9:67:72:CB:4D:69:14:62:60:19:16:27:C6:1B:B3:01:79:95
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/1-cupZ3LLTWkUYmAZFifGG7MBeZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0-84.205.82.255
84.205.84.0-84.205.95.255
93.175.146.0/24
93.175.148.0-93.175.153.255
IPv6:
2001:7fb:fd02::/48
2001:7fb:fe00::/47
2001:7fb:fe03::-2001:7fb:fe07:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe0a::-2001:7fb:fe10:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe12::-2001:7fb:fe18:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff00::-2001:7fb:ff02:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff04::/46
2001:7fb:ff0a::-2001:7fb:ff10:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff12::-2001:7fb:ff18:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:13:02:d2:44:99:94:b9:e5:bc:ef:7f:a0:1f:9b:54:0c:7d:
38:8f:97:95:d2:d7:eb:2a:8e:f2:21:cd:70:60:ce:8b:92:a5:
e7:7a:e0:29:2a:88:aa:68:31:13:f6:53:3f:a2:19:57:f9:b3:
90:0e:f1:18:28:0c:4d:99:f5:be:b6:4d:f9:7b:35:5c:5f:3d:
6b:1c:6c:5c:0e:95:7e:c5:a4:5a:35:4f:2b:c1:b4:40:31:03:
17:e5:c4:78:35:63:1d:90:c4:18:cf:cf:dc:09:04:69:92:4a:
6b:87:a0:12:fe:41:08:a6:90:23:84:ce:9d:ab:ce:92:6a:87:
87:11:da:9b:c6:a1:bf:4a:f3:1e:5c:19:42:ed:6d:fd:f9:40:
c7:7f:70:0f:62:6e:a1:bc:7f:0a:48:07:31:52:5e:80:88:da:
0f:75:23:ba:3f:e6:b2:d5:15:a6:1f:f1:de:7e:45:28:6c:4d:
d5:0b:e7:d4:4d:25:37:5e:fc:9d:9e:30:e0:f0:a0:0d:bc:72:
fb:b8:0a:3e:4d:c7:31:df:4b:8d:19:52:16:32:0e:d6:97:2e:
97:87:76:b8:f1:23:71:18:e6:9a:2e:58:fa:86:54:29:c1:79:
0a:14:81:a3:23:65:0f:24:a6:50:66:ca:ee:15:f2:48:f8:e5:
80:be:9c:c8
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAYzIAwF8nf9CTt6jSS8F9oH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez
ZGY5MjIwHhcNMjQwMTAyMDIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWNiYTk2NzcyY2I0ZDY5MTQ2MjYwMTkxNjI3YzYxYmIzMDE3OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRBZNtsVXFRB3Rt9Bw+YMF/hQQ0t
jQtq8AeNGBjKmtFU73+sXQhepxzyh7Vr9NzxSVpvJs1ZjvjflcFU3PbQIW1TDYH3
c4Ze2gMa9iPzyWf+fsHpj6qHdC9nDE3WrmtedgcmC2I6CIBBBVpSEqac69UjjGCB
6L/tY1NL1V76hn7diaOEXDOUDgddV1Mlh+6qpCmBC3A0UtBgdFfaCOq9eU4prPs1
V52zLGfQ+ugSOLaVbv7r55aXZSjZiTYhcPxyrMP+60hXpAps7cfef654J5DETl3k
4xaQgTNaVlEvGu/gQA57JJA/kJvZJyXART+Jc+fTbttBh2U8iQamRZ5pewIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFPnLqWdyy01pFGJgGRYnxhuzAXmVMB8GA1UdIwQY
MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvMS1jdXBaM0xMVFdrVVltQVpGaWZHRzdNQmVaVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzMvZmUyZDcyLWMyZGQtNDZjMS05NDI5LWU2NjM2OTY0OTQx
MS8xL2lCZXFfc1ljT21zQ1MycWZWUC0zWk1vOS1TSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB5wYIKwYBBQUHAQcBAf8EgdcwgdQwNgQCAAEwMDAMAwQG
VM1AAwQAVM1SMAwDBAJUzVQDBAVUzUADBABdr5IwDAMEAl2vlAMEAV2vmDCBmQQC
AAIwgZIDBwAgAQf7/QIDBwEgAQf7/gAwEgMHACABB/v+AwMHAyABB/v+ADASAwcB
IAEH+/4KAwcAIAEH+/4QMBIDBwEgAQf7/hIDBwAgAQf7/hgwEQMGACABB/v/AwcA
IAEH+/8CAwcCIAEH+/8EMBIDBwEgAQf7/woDBwAgAQf7/xAwEgMHASABB/v/EgMH
ACABB/v/GDANBgkqhkiG9w0BAQsFAAOCAQEAdhMC0kSZlLnlvO9/oB+bVAx9OI+X
ldLX6yqO8iHNcGDOi5Kl53rgKSqIqmgxE/ZTP6IZV/mzkA7xGCgMTZn1vrZN+Xs1
XF89axxsXA6VfsWkWjVPK8G0QDEDF+XEeDVjHZDEGM/P3AkEaZJKa4egEv5BCKaQ
I4TOnavOkmqHhxHam8ahv0rzHlwZQu1t/flAx39wD2Juobx/CkgHMVJegIjaD3Uj
uj/mstUVph/x3n5FKGxN1Qvn1E0lN178nZ4w4PCgDbxy+7gKPk3HMd9LjRlSFjIO
1pcul4d2uPEjcRjmmi5Y+oZUKcF5ChSBoyNlDySmUGbK7hXySPjlgL6cyA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 10:26:53 2024 by rpki-client on console-ams.rpki-client.org