Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/vBUNWbb5w5UP3yI2ITpbyyKIks0.roa
File: vBUNWbb5w5UP3yI2ITpbyyKIks0.roa (raw, json)
Hash identifier: G42NJ7+oB4IiYfYCGaIAb15bDy1IvMR6cgJvjkFC3nk=
Subject key identifier: BC:15:0D:59:B6:F9:C3:95:0F:DF:22:36:21:3A:5B:CB:22:88:92:CD
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 0189C504909DBACF8ACB523C71DA402CED3A
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/vBUNWbb5w5UP3yI2ITpbyyKIks0.roa
Signing time: Sat 05 Aug 2023 09:25:57 +0000
ROA not before: Sat 05 Aug 2023 09:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51430
IP address blocks: 128.127.104.0/23 maxlen: 23
128.127.108.0/24 maxlen: 24
128.127.110.0/23 maxlen: 23
128.127.109.0/24 maxlen: 24
128.127.106.0/23 maxlen: 23
37.46.112.0/24 maxlen: 24
37.46.117.0/24 maxlen: 24
37.46.118.0/23 maxlen: 23
37.46.118.0/24 maxlen: 24
37.46.114.0/24 maxlen: 24
37.46.113.0/24 maxlen: 24
37.46.116.0/24 maxlen: 24
37.46.115.0/24 maxlen: 24
37.46.124.0/22 maxlen: 22
37.46.121.0/24 maxlen: 24
37.46.120.0/24 maxlen: 24
37.46.123.0/24 maxlen: 24
37.46.122.0/24 maxlen: 24
91.214.44.0/24 maxlen: 24
91.214.47.0/24 maxlen: 24
213.5.64.0/21 maxlen: 21
185.2.31.0/24 maxlen: 24
185.2.29.0/24 maxlen: 24
185.2.28.0/24 maxlen: 24
185.2.30.0/24 maxlen: 24
79.142.79.0/24 maxlen: 24
31.3.152.0/22 maxlen: 22
31.3.158.0/23 maxlen: 23
31.3.157.0/24 maxlen: 24
31.3.156.0/24 maxlen: 24
185.7.35.0/24 maxlen: 24
185.7.34.0/24 maxlen: 24
185.7.32.0/24 maxlen: 24
185.7.33.0/24 maxlen: 24
185.10.56.0/22 maxlen: 22
79.142.64.0/22 maxlen: 24
79.142.71.0/24 maxlen: 24
79.142.69.0/24 maxlen: 24
79.142.68.0/24 maxlen: 24
79.142.70.0/24 maxlen: 24
79.142.78.0/24 maxlen: 24
79.142.76.0/23 maxlen: 23
79.142.72.0/24 maxlen: 24
79.142.74.0/23 maxlen: 23
79.142.73.0/24 maxlen: 24
2a00:7143:101::/48 maxlen: 48
2a00:7145:c1::/48 maxlen: 48
2a00:7147:e3::/48 maxlen: 48
2a00:7147:e6::/48 maxlen: 48
2a00:7143::/32 maxlen: 32
2a00:7145:b1::/48 maxlen: 48
2a00:7145:c2::/48 maxlen: 48
2a00:7147:e9::/48 maxlen: 48
2a00:7147:e2::/48 maxlen: 48
2a00:7147:22::/48 maxlen: 48
2a00:7147:e5::/48 maxlen: 48
2a00:7140::/32 maxlen: 32
2a00:7146::/48 maxlen: 48
2a00:7145::/48 maxlen: 48
2a00:7147:e8::/48 maxlen: 48
2a00:7142::/32 maxlen: 32
2a00:7147:e1::/48 maxlen: 48
2a00:7147:e10::/48 maxlen: 48
2a00:7147:e4::/48 maxlen: 48
2a00:7144::/32 maxlen: 32
2a00:7147:e7::/48 maxlen: 48
2a00:7147:b1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:04:90:9d:ba:cf:8a:cb:52:3c:71:da:40:2c:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Aug 5 09:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc150d59b6f9c3950fdf2236213a5bcb228892cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:73:eb:af:22:1b:9c:07:fa:fd:bb:5d:f7:
d2:40:16:09:3e:50:9d:16:4a:ba:94:a1:27:b7:72:
d9:b4:a2:74:d0:0a:d5:ad:52:a8:95:7d:08:e9:b8:
60:e0:a3:f2:7c:01:29:0f:23:0e:04:e1:3a:87:49:
0e:d0:4d:b6:83:5b:17:42:99:c0:fd:a1:f3:27:14:
d0:f1:cb:8b:04:8f:80:05:c4:ff:9d:e5:49:7f:95:
d8:90:52:4f:81:8e:ee:9f:4c:0f:5a:75:6b:59:c1:
e8:57:53:27:c2:a3:d5:72:5e:20:ba:85:08:64:79:
af:59:0e:d4:2d:55:6b:be:ea:37:7a:ce:2f:ed:da:
c8:f9:ec:8c:c4:46:d8:bb:43:0d:be:68:ce:bc:df:
76:7d:d9:cf:56:85:4d:ba:71:a0:14:c9:ea:c7:3f:
7c:39:f1:18:71:3e:48:85:86:a4:6f:dd:dd:a8:96:
c2:cc:ad:13:38:d2:48:c7:f9:97:99:0b:a2:9b:cb:
38:37:7e:02:da:3f:bd:d3:65:bc:23:9a:88:4a:8b:
da:a0:70:0f:ae:80:08:e7:73:54:49:76:a5:14:6d:
eb:fa:c0:e3:eb:bf:50:40:8f:85:b5:cd:f6:9b:62:
1e:9f:79:a9:e1:fc:12:ce:fe:a4:d9:6a:57:68:f7:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:0D:59:B6:F9:C3:95:0F:DF:22:36:21:3A:5B:CB:22:88:92:CD
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/vBUNWbb5w5UP3yI2ITpbyyKIks0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.152.0/21
37.46.112.0/20
79.142.64.0/20
91.214.44.0/24
91.214.47.0/24
128.127.104.0/21
185.2.28.0/22
185.7.32.0/22
185.10.56.0/22
213.5.64.0/21
IPv6:
2a00:7140::/32
2a00:7142::-2a00:7145:0:ffff:ffff:ffff:ffff:ffff
2a00:7145:b1::/48
2a00:7145:c1::-2a00:7145:c2:ffff:ffff:ffff:ffff:ffff
2a00:7146::/48
2a00:7147:22::/48
2a00:7147:b1::/48
2a00:7147:e1::-2a00:7147:e9:ffff:ffff:ffff:ffff:ffff
2a00:7147:e10::/48
Signature Algorithm: sha256WithRSAEncryption
3c:4b:eb:16:a3:19:9d:a1:8a:a2:c0:43:a6:8e:eb:44:e6:de:
df:a2:59:c2:50:72:df:13:ac:36:5e:8e:ab:4d:31:fa:6b:4a:
8b:8b:64:11:17:9c:5a:63:14:ea:f0:79:cb:4e:84:ae:33:d0:
91:0a:ac:e8:d0:d2:d3:f1:8c:5e:d9:66:c0:4f:91:1c:88:fe:
34:1d:bb:c3:bf:e9:1d:33:f3:eb:18:a4:4a:ff:e4:82:fe:d3:
aa:dc:83:7a:3f:56:cd:97:3e:53:c7:9e:b8:86:45:ef:d6:20:
9c:13:88:ac:68:24:de:a0:0c:d1:de:bc:1a:1a:54:95:ce:b3:
ed:91:6e:3a:82:68:22:68:3a:b5:b5:79:c6:0c:c5:2c:63:4f:
49:a0:9a:88:41:9a:4e:f3:4d:5e:60:0a:6f:92:a0:c1:8a:7b:
5a:0c:27:0f:5f:8f:00:88:5e:8a:42:06:5b:89:85:4f:e8:ae:
51:f2:e4:68:a9:69:de:48:60:39:fa:94:33:f0:18:95:90:46:
00:1a:77:75:cb:86:3a:8d:39:d4:f1:8f:0d:aa:f1:18:15:ff:
e4:81:8b:9b:b1:92:5b:7e:bc:c8:4f:08:28:77:31:0c:f1:c2:
77:6c:97:90:c3:a4:e1:d2:a1:99:d6:ac:44:58:ab:91:04:29:
d3:26:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 12:22:32 2023 by rpki-client on console-fra.rpki-client.org