Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-84OYREPQZBGMTvrRxjKeoIAXCM.roa
File: 1-84OYREPQZBGMTvrRxjKeoIAXCM.roa (raw, json)
Hash identifier: F0fdM+Su3bezz1ApxZ5PJGVlkbtte+dVklMFzDDxsIM=
Subject key identifier: FB:CE:0E:61:11:0F:41:90:46:31:3B:EB:47:18:CA:7A:82:00:5C:23
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 018AE0C0AFF486FC6D09DED600642A15989F
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-84OYREPQZBGMTvrRxjKeoIAXCM.roa
Signing time: Fri 29 Sep 2023 11:43:58 +0000
ROA not before: Fri 29 Sep 2023 11:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51430
IP address blocks: 128.127.104.0/23 maxlen: 23
128.127.108.0/24 maxlen: 24
128.127.110.0/23 maxlen: 23
128.127.109.0/24 maxlen: 24
128.127.106.0/23 maxlen: 23
37.46.112.0/24 maxlen: 24
37.46.117.0/24 maxlen: 24
37.46.118.0/23 maxlen: 23
37.46.118.0/24 maxlen: 24
37.46.114.0/24 maxlen: 24
37.46.113.0/24 maxlen: 24
37.46.116.0/24 maxlen: 24
37.46.115.0/24 maxlen: 24
37.46.124.0/22 maxlen: 22
37.46.121.0/24 maxlen: 24
37.46.120.0/24 maxlen: 24
37.46.123.0/24 maxlen: 24
37.46.122.0/24 maxlen: 24
37.46.119.0/24 maxlen: 24
91.214.44.0/24 maxlen: 24
91.214.47.0/24 maxlen: 24
213.5.64.0/21 maxlen: 21
185.2.31.0/24 maxlen: 24
185.2.29.0/24 maxlen: 24
185.2.28.0/24 maxlen: 24
185.2.30.0/24 maxlen: 24
79.142.79.0/24 maxlen: 24
31.3.152.0/22 maxlen: 22
31.3.158.0/23 maxlen: 23
31.3.157.0/24 maxlen: 24
31.3.156.0/24 maxlen: 24
185.7.35.0/24 maxlen: 24
185.7.34.0/24 maxlen: 24
185.7.32.0/24 maxlen: 24
185.7.33.0/24 maxlen: 24
185.10.56.0/22 maxlen: 22
79.142.64.0/22 maxlen: 24
79.142.71.0/24 maxlen: 24
79.142.69.0/24 maxlen: 24
79.142.68.0/24 maxlen: 24
79.142.70.0/24 maxlen: 24
79.142.78.0/24 maxlen: 24
79.142.76.0/23 maxlen: 23
79.142.72.0/24 maxlen: 24
79.142.74.0/23 maxlen: 23
79.142.73.0/24 maxlen: 24
2a00:7143:101::/48 maxlen: 48
2a00:7145:c1::/48 maxlen: 48
2a00:7147:e3::/48 maxlen: 48
2a00:7147:e6::/48 maxlen: 48
2a00:7143::/32 maxlen: 32
2a00:7145:b1::/48 maxlen: 48
2a00:7145:c2::/48 maxlen: 48
2a00:7147:e9::/48 maxlen: 48
2a00:7147:22::/48 maxlen: 48
2a00:7147:e2::/48 maxlen: 48
2a00:7147:e5::/48 maxlen: 48
2a00:7140::/32 maxlen: 32
2a00:7146::/48 maxlen: 48
2a00:7145::/48 maxlen: 48
2a00:7147:e8::/48 maxlen: 48
2a00:7142::/32 maxlen: 32
2a00:7147:e1::/48 maxlen: 48
2a00:7147:e10::/48 maxlen: 48
2a00:7147:e4::/48 maxlen: 48
2a00:7144::/32 maxlen: 32
2a00:7147:e7::/48 maxlen: 48
2a00:7147:b1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:c0:af:f4:86:fc:6d:09:de:d6:00:64:2a:15:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Sep 29 11:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbce0e61110f419046313beb4718ca7a82005c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:82:f1:d1:8a:15:de:a4:ba:d1:90:9f:1f:
b2:a6:92:48:5d:8f:22:0c:a2:b3:d3:95:b0:b0:1e:
12:ac:cf:5b:c7:98:28:e1:d9:b1:71:e5:ec:69:0c:
d1:62:26:3a:10:9c:b2:a1:e0:2b:f5:d1:89:98:e4:
5b:06:22:30:23:a0:ac:e7:dd:fa:2f:e7:4d:0f:e5:
ce:a9:a6:17:33:96:f1:47:0f:d2:c2:af:a2:a6:5c:
76:ce:cd:45:87:6c:3f:78:d0:87:48:49:71:00:47:
f5:8f:e6:4b:38:b1:dd:1a:25:70:b6:96:26:d0:a7:
ff:b7:30:cf:e3:33:5f:14:30:1d:1f:ee:f4:38:1d:
04:b8:02:ca:ef:b6:5b:8d:cf:b5:2f:66:b2:85:c1:
93:17:a8:11:6d:65:aa:9c:63:23:92:c2:49:b9:1e:
70:6e:4e:ec:55:51:37:5d:1b:23:33:36:ab:5f:5a:
f8:b1:3e:53:a4:c7:fc:d9:6b:bc:01:d5:16:0c:c0:
9a:9c:74:5b:ae:64:0a:a4:7d:ba:6b:48:08:27:71:
c1:b8:b6:79:11:93:24:64:22:6d:c2:dd:55:eb:f2:
76:15:74:2f:c2:5f:29:91:a3:5f:48:8a:05:81:18:
28:2c:f0:5f:38:07:d3:a8:5b:6e:c3:f0:b6:ab:6b:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CE:0E:61:11:0F:41:90:46:31:3B:EB:47:18:CA:7A:82:00:5C:23
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-84OYREPQZBGMTvrRxjKeoIAXCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.152.0/21
37.46.112.0/20
79.142.64.0/20
91.214.44.0/24
91.214.47.0/24
128.127.104.0/21
185.2.28.0/22
185.7.32.0/22
185.10.56.0/22
213.5.64.0/21
IPv6:
2a00:7140::/32
2a00:7142::-2a00:7145:0:ffff:ffff:ffff:ffff:ffff
2a00:7145:b1::/48
2a00:7145:c1::-2a00:7145:c2:ffff:ffff:ffff:ffff:ffff
2a00:7146::/48
2a00:7147:22::/48
2a00:7147:b1::/48
2a00:7147:e1::-2a00:7147:e9:ffff:ffff:ffff:ffff:ffff
2a00:7147:e10::/48
Signature Algorithm: sha256WithRSAEncryption
82:95:17:c4:07:fc:13:03:44:59:d9:7f:54:c8:24:7f:cb:11:
e2:10:1a:73:d1:35:d6:f0:d5:ee:18:78:a2:1a:60:c3:f0:0e:
89:3e:9f:21:13:84:66:fd:b2:14:e3:52:ac:fb:c2:86:aa:86:
91:25:2f:f5:67:a5:cb:d7:95:89:d9:e9:61:67:4e:9f:65:2e:
6c:d7:47:4c:0e:e4:57:e8:6e:68:44:2a:a8:7d:d7:69:06:da:
db:32:34:b7:34:b9:c5:29:ec:06:b9:5d:52:27:79:34:a4:aa:
9a:c6:b4:5d:1f:22:bb:02:d4:8c:f5:5a:c7:4b:29:25:87:8a:
79:c7:e3:f9:3a:91:ab:34:d2:c1:38:25:2d:59:a6:81:29:2a:
62:66:8b:69:16:c6:16:6a:c1:61:73:06:c8:75:47:f4:23:89:
72:50:84:d5:7f:e4:33:ea:a0:40:45:6b:18:21:5d:ba:c8:f0:
95:ba:b5:9d:eb:7e:f8:48:aa:5b:d4:80:31:88:9b:c1:0a:25:
63:09:a7:54:23:5a:59:5f:44:e1:1d:27:db:f5:34:5f:aa:7a:
1c:f0:14:7a:0d:9d:85:6d:20:59:32:0e:7e:b2:bb:d2:15:3e:
0b:ef:1d:33:dd:72:53:a3:cd:0f:d0:e1:c3:46:5d:a6:ce:48:
df:af:de:b9
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYrgwK/0hvxtCd7WAGQqFZifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky
NTY2MTUwHhcNMjMwOTI5MTE0MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmNlMGU2MTExMGY0MTkwNDYzMTNiZWI0NzE4Y2E3YTgyMDA1YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpWC8dGKFd6kutGQnx+yppJIXY8i
DKKz05WwsB4SrM9bx5go4dmxceXsaQzRYiY6EJyyoeAr9dGJmORbBiIwI6Cs5936
L+dND+XOqaYXM5bxRw/Swq+iplx2zs1Fh2w/eNCHSElxAEf1j+ZLOLHdGiVwtpYm
0Kf/tzDP4zNfFDAdH+70OB0EuALK77Zbjc+1L2ayhcGTF6gRbWWqnGMjksJJuR5w
bk7sVVE3XRsjMzarX1r4sT5TpMf82Wu8AdUWDMCanHRbrmQKpH26a0gIJ3HBuLZ5
EZMkZCJtwt1V6/J2FXQvwl8pkaNfSIoFgRgoLPBfOAfTqFtuw/C2q2tnNQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFPvODmERD0GQRjE760cYynqCAFwjMB8GA1UdIwQY
MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh
LWJkMzdkYTBlNDQ3Yy8xLzEtODRPWVJFUFFaQkdNVHZyUnhqS2VvSUFYQ00ucm9h
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0
N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujBCBAIAATA8AwQD
HwOYAwQEJS5wAwQET45AAwQAW9YsAwQAW9YvAwQDgH9oAwQCuQIcAwQCuQcgAwQC
uQo4AwQD1QVAMHQEAgACMG4DBQAqAHFAMBADBQEqAHFCAwcAKgBxRQAAAwcAKgBx
RQCxMBIDBwAqAHFFAMEDBwAqAHFFAMIDBwAqAHFGAAADBwAqAHFHACIDBwAqAHFH
ALEwEgMHACoAcUcA4QMHASoAcUcA6AMHACoAcUcOEDANBgkqhkiG9w0BAQsFAAOC
AQEAgpUXxAf8EwNEWdl/VMgkf8sR4hAac9E11vDV7hh4ohpgw/AOiT6fIROEZv2y
FONSrPvChqqGkSUv9Wely9eVidnpYWdOn2UubNdHTA7kV+huaEQqqH3XaQba2zI0
tzS5xSnsBrldUid5NKSqmsa0XR8iuwLUjPVax0spJYeKecfj+TqRqzTSwTglLVmm
gSkqYmaLaRbGFmrBYXMGyHVH9COJclCE1X/kM+qgQEVrGCFdusjwlbq1net++Eiq
W9SAMYibwQolYwmnVCNaWV9E4R0n2/U0X6p6HPAUeg2dhW0gWTIOfrK70hU+C+8d
M91yU6PND9Dhw0Zdps5I36/euQ==
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:55 2024 by rpki-client on console-fra.rpki-client.org