Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/1-olTvTVdNyPQXiZPWOMVefnHAlI.roa
File: 1-olTvTVdNyPQXiZPWOMVefnHAlI.roa (raw, json)
Hash identifier: YlFhqv6THmMG4Nss3pCExp8YXdGuVeD7QMRBvGWLvww=
Subject key identifier: FA:89:53:BD:35:5D:37:23:D0:5E:26:4F:58:E3:15:79:F9:C7:02:52
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018B052EEF027FC41F163B120C2738814DF9
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/1-olTvTVdNyPQXiZPWOMVefnHAlI.roa
Signing time: Fri 06 Oct 2023 13:30:43 +0000
ROA not before: Fri 06 Oct 2023 13:30:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 212.228.128.0/18 maxlen: 18
83.107.64.0/18 maxlen: 18
212.228.64.0/18 maxlen: 18
83.107.0.0/18 maxlen: 18
62.49.192.0/18 maxlen: 18
212.248.128.0/17 maxlen: 17
212.225.0.0/17 maxlen: 17
83.104.64.0/18 maxlen: 18
212.229.0.0/18 maxlen: 18
83.107.192.0/18 maxlen: 18
83.104.0.0/18 maxlen: 18
83.104.0.0/14 maxlen: 14
83.107.128.0/18 maxlen: 18
194.222.0.0/16 maxlen: 16
212.228.192.0/18 maxlen: 18
195.8.160.0/19 maxlen: 19
193.237.192.0/19 maxlen: 19
83.106.128.0/18 maxlen: 18
193.237.224.0/19 maxlen: 19
193.237.128.0/21 maxlen: 21
193.237.136.0/22 maxlen: 22
193.237.140.0/22 maxlen: 22
193.237.144.0/21 maxlen: 21
193.237.152.0/21 maxlen: 21
83.106.64.0/18 maxlen: 18
62.49.0.0/18 maxlen: 18
193.237.160.0/19 maxlen: 19
62.49.0.0/16 maxlen: 16
212.228.0.0/18 maxlen: 18
62.49.128.0/18 maxlen: 18
83.106.192.0/18 maxlen: 18
62.56.64.0/18 maxlen: 18
212.228.0.0/15 maxlen: 15
62.49.64.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
62.56.0.0/18 maxlen: 18
83.105.128.0/18 maxlen: 18
77.233.128.0/19 maxlen: 19
193.237.0.0/19 maxlen: 19
193.237.0.0/16 maxlen: 16
83.105.64.0/18 maxlen: 18
80.176.0.0/15 maxlen: 15
195.58.64.0/19 maxlen: 19
83.106.0.0/18 maxlen: 18
193.237.96.0/19 maxlen: 19
193.237.32.0/19 maxlen: 19
83.105.192.0/18 maxlen: 18
193.237.64.0/19 maxlen: 19
212.229.72.0/22 maxlen: 22
212.229.76.0/23 maxlen: 23
212.229.78.0/23 maxlen: 23
212.229.80.0/21 maxlen: 21
212.229.88.0/21 maxlen: 21
212.229.96.0/19 maxlen: 19
83.104.192.0/18 maxlen: 18
141.195.192.0/19 maxlen: 19
141.195.192.0/18 maxlen: 18
83.104.128.0/18 maxlen: 18
212.229.64.0/21 maxlen: 21
212.229.192.0/18 maxlen: 18
212.229.128.0/18 maxlen: 18
83.105.0.0/18 maxlen: 18
141.195.240.0/20 maxlen: 20
2a0a:ef40::/29 maxlen: 29
2001:958::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:2e:ef:02:7f:c4:1f:16:3b:12:0c:27:38:81:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Oct 6 13:30:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa8953bd355d3723d05e264f58e31579f9c70252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:01:bd:76:8e:08:04:d7:7e:35:f4:4d:78:
77:48:a2:77:96:ff:10:64:a6:51:d0:a0:a8:d7:14:
5e:39:87:33:fe:77:c4:23:00:58:fc:eb:c2:bb:36:
6a:d7:d7:3e:26:1e:36:e2:f0:f9:bb:15:86:c0:37:
df:89:96:9c:ce:e8:fa:89:a0:f5:ba:ba:dd:2a:f1:
d4:fe:1e:5c:ac:44:91:da:47:dd:61:16:da:2b:3b:
42:8e:9a:9a:82:cc:e6:f4:76:79:90:eb:bd:11:fa:
cd:b0:0d:30:1e:16:3a:82:d4:a4:d1:77:f0:f7:09:
b6:f2:d0:e8:61:39:cc:53:01:d9:28:71:81:98:a8:
a9:dd:9d:e4:c4:38:33:fd:26:e4:e1:b6:a6:a3:8e:
3a:f3:85:f2:f8:ce:53:b6:21:da:56:95:ad:2e:85:
10:9e:7f:1b:45:0c:4b:10:6c:cc:78:05:b5:1c:05:
26:7b:26:9b:16:4e:da:72:1a:54:ad:e2:cc:5e:06:
91:8d:79:0e:46:a5:d0:fe:c2:b1:7e:92:27:51:e9:
e8:c5:53:ba:db:b8:5e:6d:67:d4:4a:2f:a9:14:d0:
0a:1e:9a:75:8c:88:59:03:d1:de:d5:61:98:30:87:
62:02:57:d7:37:31:cb:93:0a:4b:51:a6:d4:48:3a:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:53:BD:35:5D:37:23:D0:5E:26:4F:58:E3:15:79:F9:C7:02:52
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/1-olTvTVdNyPQXiZPWOMVefnHAlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
141.195.192.0/18
193.237.0.0/16
194.222.0.0/16
195.8.160.0/19
195.58.64.0/19
212.225.0.0/17
212.228.0.0/15
212.248.128.0/17
IPv6:
2001:958::/32
2a0a:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
17:a8:e3:04:e0:9f:fd:10:02:1e:6b:7e:4d:b2:a3:11:05:2f:
71:b4:1f:c6:3a:f4:85:57:45:b0:c0:bf:9c:5d:e1:5e:d7:ed:
d9:b7:d2:7f:77:35:57:e2:ab:ac:d9:38:8c:5a:bc:fd:2a:ec:
0b:34:9e:8f:4f:de:c4:92:45:4c:6d:d2:4e:e4:42:e3:f5:fd:
cf:e4:d0:d5:3e:72:6c:ef:62:a6:e1:5b:23:13:8b:39:f4:d1:
ed:75:9f:42:44:5c:f7:10:f0:f9:a3:0d:ef:3f:f0:c6:c2:98:
0d:fb:c5:63:9e:1e:11:1d:7d:7b:89:20:25:6a:dc:23:7e:32:
99:ee:73:ba:24:38:22:f4:d4:72:64:75:12:4d:da:42:07:38:
53:76:29:f2:19:ae:59:39:86:fe:f7:18:48:a6:f6:63:d2:b6:
04:5b:24:6b:0b:2b:52:3b:d2:02:45:56:36:64:cb:c2:f9:b8:
28:3f:67:d9:4f:21:c3:28:a2:d2:32:f5:42:62:47:09:ec:f6:
8c:5d:2b:98:c9:97:5e:4d:82:34:5d:66:7e:12:f2:b1:22:c6:
4a:a9:76:d6:4d:f0:3c:c7:e0:45:6e:59:e2:17:ef:77:09:fb:
94:6f:5e:e1:18:f3:81:75:56:2c:40:4c:33:5f:3c:c7:0b:64:
9d:f4:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 17:53:11 2023 by rpki-client on console-fra.rpki-client.org