Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LYgBr5ufog3uqOTFtDzPBxJ5RBc.roa
File: LYgBr5ufog3uqOTFtDzPBxJ5RBc.roa (raw, json)
Hash identifier: hlR8OLDQzrTvv6+eq4CYjnP+eiMDhx1Pt/Eu+LgR1NU=
Subject key identifier: 2D:88:01:AF:9B:9F:A2:0D:EE:A8:E4:C5:B4:3C:CF:07:12:79:44:17
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018B8A37371CA2B9448B9112BD73465FFACC
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LYgBr5ufog3uqOTFtDzPBxJ5RBc.roa
Signing time: Wed 01 Nov 2023 09:29:16 +0000
ROA not before: Wed 01 Nov 2023 09:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 80.66.196.0/22 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
45.80.188.0/22 maxlen: 24
62.133.35.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.32.0/22 maxlen: 24
88.214.20.0/22 maxlen: 24
45.147.48.0/24 maxlen: 32
45.147.49.0/24 maxlen: 32
45.153.244.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
185.248.84.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
91.200.241.0/24 maxlen: 24
45.11.45.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.176.0/22 maxlen: 24
147.78.241.0/24 maxlen: 24
185.200.64.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
185.254.75.0/24 maxlen: 24
185.254.73.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
147.78.240.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
194.124.228.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
213.232.112.0/22 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
194.36.222.0/23 maxlen: 24
94.124.116.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
185.49.32.0/22 maxlen: 24
45.130.23.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
194.36.27.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
78.142.192.0/22 maxlen: 24
194.169.180.0/23 maxlen: 24
78.142.195.0/24 maxlen: 32
78.142.193.0/24 maxlen: 32
78.142.228.0/22 maxlen: 24
45.13.199.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
109.94.168.0/22 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.220.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09::/29 maxlen: 48
2a0b:4080::/32 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a0d:de80::/29 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a03:d9c0::/29 maxlen: 128
2a09:0:3::/48 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a09:0:9000::/40 maxlen: 128
2a0e:6200::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a0d:4bc0::/29 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:37:37:1c:a2:b9:44:8b:91:12:bd:73:46:5f:fa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 1 09:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d8801af9b9fa20deea8e4c5b43ccf0712794417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:d2:f5:47:05:69:1f:d5:14:df:48:ac:03:
cf:04:87:64:ce:0e:1f:ca:cd:e9:c5:ad:db:26:e4:
5c:0e:77:22:b4:14:7e:7d:97:5a:ed:6e:5a:ca:2c:
29:a9:51:67:f4:04:7a:d4:1b:b4:50:93:af:59:1b:
2c:43:04:ea:58:8d:7a:e4:01:52:3c:f7:41:c9:17:
51:f6:92:3d:d4:1a:fa:d8:c1:0f:18:ed:53:75:e6:
88:ec:28:3a:f0:84:8f:84:c2:cb:f6:b1:51:53:2f:
e2:1c:9f:e0:ff:14:56:0f:f3:52:1e:71:15:b7:ed:
02:36:a0:da:2c:76:aa:50:af:e3:4f:32:cf:27:1e:
3d:ba:43:9f:b3:ef:42:6c:74:94:52:a4:6a:22:69:
2f:75:6e:6e:56:b5:4f:68:5f:84:e3:57:50:5f:c0:
5a:b1:86:17:79:59:ae:da:aa:a7:87:35:32:7d:5b:
07:a2:7f:71:0c:65:13:d8:61:53:92:6b:3a:b9:ca:
69:ec:36:57:36:5e:bd:41:f0:48:8f:e3:6c:c0:56:
31:d8:72:da:ac:ad:f6:ac:24:d0:ec:2a:e6:16:30:
d3:49:75:6f:ec:1a:7e:7b:2e:4a:c5:cf:ca:3e:58:
73:1d:28:8f:2f:4e:60:d5:7f:41:60:63:1e:e2:0e:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:01:AF:9B:9F:A2:0D:EE:A8:E4:C5:B4:3C:CF:07:12:79:44:17
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/LYgBr5ufog3uqOTFtDzPBxJ5RBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/23
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
78.142.228.0/22
79.143.140.0/22
80.66.196.0/22
88.214.20.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
147.78.240.0/23
149.62.44.0/22
185.49.32.0/22
185.194.52.0/22
185.200.64.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
194.36.24.0/23
194.36.27.0/24
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
213.232.112.0/22
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
85:91:87:43:f0:3e:39:7e:db:e8:10:0c:d3:cb:64:f3:7f:57:
27:bc:05:59:f0:96:f4:bf:18:cb:85:b6:2e:64:63:8a:11:05:
90:cb:fd:38:60:fc:4a:de:36:b9:17:6c:c7:ab:b3:d2:6e:30:
77:89:43:85:d1:cd:89:78:db:92:62:1f:84:64:ae:f5:9a:c7:
68:40:29:25:38:68:4e:83:68:b0:c8:58:2e:f2:a6:b2:cb:7a:
df:44:f9:d4:5b:6e:2f:cb:d7:b1:a2:71:e7:fc:ec:4b:a5:f4:
cf:0f:50:b2:b9:f1:02:f6:ae:5b:b6:17:f4:16:5e:be:ac:45:
ef:1b:e2:a2:60:4c:9f:0e:02:a8:29:c6:b8:e4:4c:b3:0d:d4:
d1:91:64:b5:28:e0:2a:13:a6:54:bd:0e:aa:37:19:12:a5:07:
00:6e:5e:46:4e:74:b5:f4:58:d4:c5:fb:b4:56:fd:9a:44:03:
d9:ef:34:8c:07:3f:36:3b:4f:d7:f8:a9:0d:59:1b:39:2f:b3:
b0:32:20:56:38:7a:f1:34:3d:2a:3c:19:2a:02:c6:17:33:35:
e4:45:b6:c8:8b:cd:4c:a0:f6:35:b1:6c:17:b0:82:72:67:ac:
c0:3c:16:83:9c:2d:7a:d0:28:47:a1:5a:41:d0:32:61:81:ac:
07:f9:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 13:28:44 2023 by rpki-client on console-fra.rpki-client.org