Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/uPLvpWK8uWeTyuSuQitBUukaKKQ.roa
File: uPLvpWK8uWeTyuSuQitBUukaKKQ.roa (raw, json)
Hash identifier: 1oP7jZ8zGQUWOCMGoFdBMVROVXEHewcNI7Do2neP7JI=
Subject key identifier: B8:F2:EF:A5:62:BC:B9:67:93:CA:E4:AE:42:2B:41:52:E9:1A:28:A4
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018AF63E783FA47D60A9DC2CA37F27B62F8D
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/uPLvpWK8uWeTyuSuQitBUukaKKQ.roa
Signing time: Tue 03 Oct 2023 15:53:23 +0000
ROA not before: Tue 03 Oct 2023 15:53:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 212.228.128.0/18 maxlen: 18
83.107.64.0/18 maxlen: 18
212.228.64.0/18 maxlen: 18
83.107.0.0/18 maxlen: 18
62.49.192.0/18 maxlen: 18
212.248.128.0/17 maxlen: 17
212.225.0.0/17 maxlen: 17
83.104.64.0/18 maxlen: 18
212.229.0.0/18 maxlen: 18
83.107.192.0/18 maxlen: 18
83.104.0.0/18 maxlen: 18
83.104.0.0/14 maxlen: 14
83.107.128.0/18 maxlen: 18
212.228.192.0/18 maxlen: 18
195.8.160.0/19 maxlen: 19
193.237.192.0/19 maxlen: 19
83.106.128.0/18 maxlen: 18
193.237.224.0/19 maxlen: 19
193.237.128.0/21 maxlen: 21
193.237.136.0/22 maxlen: 22
193.237.144.0/21 maxlen: 21
193.237.140.0/22 maxlen: 22
193.237.152.0/21 maxlen: 21
83.106.64.0/18 maxlen: 18
62.49.0.0/18 maxlen: 18
193.237.160.0/19 maxlen: 19
62.49.0.0/16 maxlen: 16
212.228.0.0/18 maxlen: 18
83.106.192.0/18 maxlen: 18
62.49.128.0/18 maxlen: 18
62.56.64.0/18 maxlen: 18
212.228.0.0/15 maxlen: 15
62.49.64.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
62.56.0.0/18 maxlen: 18
83.105.128.0/18 maxlen: 18
77.233.128.0/19 maxlen: 19
193.237.0.0/19 maxlen: 19
193.237.0.0/16 maxlen: 16
83.105.64.0/18 maxlen: 18
80.176.0.0/15 maxlen: 15
195.58.64.0/19 maxlen: 19
193.237.96.0/19 maxlen: 19
83.106.0.0/18 maxlen: 18
193.237.32.0/19 maxlen: 19
83.105.192.0/18 maxlen: 18
193.237.64.0/19 maxlen: 19
212.229.78.0/23 maxlen: 23
212.229.72.0/22 maxlen: 22
212.229.76.0/23 maxlen: 23
212.229.80.0/21 maxlen: 21
212.229.88.0/21 maxlen: 21
212.229.96.0/19 maxlen: 19
83.104.192.0/18 maxlen: 18
83.104.128.0/18 maxlen: 18
212.229.64.0/21 maxlen: 21
212.229.192.0/18 maxlen: 18
212.229.128.0/18 maxlen: 18
83.105.0.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:3e:78:3f:a4:7d:60:a9:dc:2c:a3:7f:27:b6:2f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Oct 3 15:53:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8f2efa562bcb96793cae4ae422b4152e91a28a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:2b:81:d4:c7:32:07:60:24:4f:a2:70:ca:
2f:4d:e2:ec:58:3c:10:6f:46:f2:80:6e:26:8e:a1:
57:d7:df:30:47:eb:18:71:4a:76:f0:7a:bf:54:9f:
26:6b:e7:8b:cd:91:15:3e:09:ad:b8:60:ae:d2:a5:
30:61:36:da:7c:37:5f:90:05:16:c9:c5:19:b5:1c:
e7:9c:a2:b9:29:61:03:10:1d:72:11:ed:27:01:7d:
ff:62:24:de:32:82:4d:ce:dc:f5:44:35:5d:17:e7:
b4:25:a1:fe:9c:9e:95:b2:58:9e:e8:5b:db:ec:10:
c9:d1:74:7a:11:ee:f3:98:f6:de:8d:86:ac:5d:b5:
cc:85:03:eb:65:02:d6:78:09:4d:50:be:9d:28:65:
ce:5a:bb:7a:88:e4:d6:f5:cc:9e:65:84:78:c3:25:
73:7e:ad:fe:d0:44:a6:f0:87:d3:e6:e7:eb:03:fc:
b2:bf:c5:e0:99:32:47:ed:6d:59:92:c9:fb:49:8a:
75:cb:23:54:62:9b:09:c9:86:a0:5d:b4:c7:27:35:
4c:d3:4b:81:09:f7:a9:c2:26:b0:f9:cf:cf:9d:64:
31:f5:be:52:6b:ed:06:83:af:15:e0:6e:4f:46:f5:
b8:53:bd:84:c7:78:fc:cb:3b:95:43:31:13:ae:48:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:EF:A5:62:BC:B9:67:93:CA:E4:AE:42:2B:41:52:E9:1A:28:A4
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/uPLvpWK8uWeTyuSuQitBUukaKKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
193.237.0.0/16
195.8.160.0/19
195.58.64.0/19
212.225.0.0/17
212.228.0.0/15
212.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
88:af:be:5e:04:70:2e:9f:18:76:4c:38:17:03:3c:45:42:57:
02:9b:72:13:b0:d2:1d:e2:d2:a9:dd:7a:d8:27:03:d0:f7:5a:
e8:f6:b9:59:8e:41:60:c8:74:90:d2:4f:37:d6:20:7a:64:10:
e5:7e:4c:d5:5e:30:86:60:a0:97:2b:8b:c9:a2:0e:f4:6e:9b:
60:53:60:66:f6:e4:49:c3:00:ce:4c:05:a2:b0:b8:4b:92:02:
54:7e:6c:87:a3:a0:b1:b8:e7:37:80:75:5a:dd:56:10:f2:a4:
ef:22:d3:9b:e8:b8:97:f8:10:1b:67:68:04:02:0b:42:71:2b:
0d:3d:1d:e0:7e:d8:5f:e3:38:2f:cc:f1:c2:b6:c3:86:21:77:
ed:59:f6:f1:3d:de:a0:b1:ba:43:96:1a:af:a0:d0:53:38:44:
22:8f:24:4f:a1:0c:72:49:da:ae:5e:f1:b0:94:6e:b5:60:4c:
97:1f:10:80:b6:65:a3:e2:e7:cc:73:62:aa:32:38:34:cd:6d:
ca:b2:77:e8:b5:24:3d:3f:6a:fd:81:57:fa:fd:8c:e4:c9:91:
12:8a:74:fb:ed:5d:88:fc:99:b1:34:4e:75:d7:39:95:69:bb:
e5:da:0b:57:b0:c6:2a:55:2c:c3:1e:75:ca:65:91:29:96:1b:
a8:d9:22:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 16:52:07 2023 by rpki-client on console-fra.rpki-client.org