Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/yJAL3o-zHinXK3txWrbhh_kwUXo.roa
File: yJAL3o-zHinXK3txWrbhh_kwUXo.roa (raw, json)
Hash identifier: AAaLs+ZaAVHEbisA1cfmucswQp56p890BjEOsIdSTek=
Subject key identifier: C8:90:0B:DE:8F:B3:1E:29:D7:2B:7B:71:5A:B6:E1:87:F9:30:51:7A
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 018570674F9ABF73B7DAF9A735D79F43AC8F
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/yJAL3o-zHinXK3txWrbhh_kwUXo.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 83.144.64.0/19 maxlen: 19
83.144.64.0/18 maxlen: 18
31.178.0.0/16 maxlen: 16
83.144.96.0/19 maxlen: 19
31.178.0.0/15 maxlen: 15
91.150.192.0/20 maxlen: 20
91.150.192.0/19 maxlen: 19
91.150.208.0/20 maxlen: 20
188.93.164.0/22 maxlen: 22
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
84.10.0.0/17 maxlen: 17
213.134.160.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
84.10.0.0/16 maxlen: 16
213.134.176.0/20 maxlen: 20
95.158.64.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
85.222.0.0/18 maxlen: 18
85.222.0.0/17 maxlen: 17
81.18.192.0/20 maxlen: 20
81.18.192.0/21 maxlen: 21
194.187.40.0/22 maxlen: 22
81.18.200.0/21 maxlen: 21
81.18.208.0/21 maxlen: 21
81.18.208.0/20 maxlen: 20
81.18.216.0/21 maxlen: 21
212.76.32.0/20 maxlen: 20
212.76.32.0/19 maxlen: 19
212.76.48.0/20 maxlen: 20
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
94.75.64.0/19 maxlen: 19
94.75.64.0/18 maxlen: 18
89.72.0.0/13 maxlen: 13
31.186.192.0/19 maxlen: 19
87.207.0.0/16 maxlen: 16
92.244.32.0/20 maxlen: 20
92.244.32.0/19 maxlen: 19
92.244.48.0/20 maxlen: 20
94.75.96.0/19 maxlen: 19
94.172.0.0/17 maxlen: 17
77.236.0.0/20 maxlen: 20
77.236.0.0/19 maxlen: 19
89.64.0.0/13 maxlen: 13
94.172.0.0/16 maxlen: 16
77.236.16.0/20 maxlen: 20
84.10.128.0/17 maxlen: 17
94.172.128.0/17 maxlen: 17
89.64.0.0/12 maxlen: 12
31.179.0.0/16 maxlen: 16
83.175.176.0/20 maxlen: 20
83.175.176.0/21 maxlen: 21
83.175.184.0/21 maxlen: 21
87.206.0.0/16 maxlen: 16
87.206.0.0/15 maxlen: 15
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
2a02:a300::/27 maxlen: 27
Validation: Failed, certificate revoked on Wed 07 Jun 2023 08:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:4f:9a:bf:73:b7:da:f9:a7:35:d7:9f:43:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8900bde8fb31e29d72b7b715ab6e187f930517a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:24:e9:b0:23:36:1e:cf:7b:a1:18:ab:c0:
00:18:13:48:cf:fa:20:ab:f6:6c:41:31:7b:9e:a4:
45:0e:88:d8:93:81:63:df:d3:15:dd:78:6b:b2:bc:
55:a3:7a:4a:ce:f4:29:83:17:66:00:9d:4c:81:56:
95:7a:d3:c7:38:cd:58:23:6e:6c:68:e7:04:81:17:
8e:23:1c:9e:bf:fd:00:21:ae:dc:61:61:66:4d:71:
46:03:f7:1a:17:86:f4:fa:3f:3c:ed:7b:ee:d2:de:
da:c7:20:ea:f3:64:8c:fd:43:38:c5:80:a6:1c:31:
67:0a:70:6f:0e:bf:fa:83:fd:2c:d1:43:d2:64:79:
00:22:a4:fd:73:e0:db:00:5a:f2:48:3d:72:70:a4:
76:4d:df:39:dc:cf:1f:80:af:40:7e:6d:8a:19:df:
06:21:30:d7:1a:35:98:ba:8b:c0:c5:1d:1a:85:e7:
eb:f9:9b:ea:a1:1f:02:ad:3e:8d:0f:76:f8:fe:f4:
41:cb:f3:42:21:a7:3f:0c:72:9b:40:a1:6f:5b:08:
53:17:2f:e2:f9:f2:b7:3d:cd:8e:a8:15:f9:77:0b:
d3:63:3e:e7:50:e2:9e:d0:8e:36:10:5a:da:0a:07:
59:7a:66:fb:35:1e:b1:19:26:17:53:31:a3:b8:96:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:0B:DE:8F:B3:1E:29:D7:2B:7B:71:5A:B6:E1:87:F9:30:51:7A
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/yJAL3o-zHinXK3txWrbhh_kwUXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
83.175.176.0/20
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
91.150.192.0/19
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
194.187.40.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
1a:d8:85:55:7d:38:d7:fb:67:39:43:c2:78:c5:5a:07:6e:cf:
68:a0:f7:de:87:b5:b0:5e:90:dc:2d:db:c8:2f:8f:a4:65:37:
d8:af:99:f1:87:8f:89:42:90:a7:e1:87:f9:e6:ac:7f:48:65:
48:a0:8e:93:70:f8:7e:bd:7a:88:60:77:0c:0f:64:d9:96:71:
a0:2a:9a:84:f0:71:32:8c:dc:94:51:31:5e:c0:63:51:f3:b1:
5c:92:f6:0f:46:9d:57:c0:3c:91:af:8f:46:16:94:57:89:58:
c2:f9:d3:29:d1:c1:d9:55:17:2e:18:d6:e3:bf:c7:3b:14:25:
6e:b4:76:a3:b6:ca:ca:0f:52:c1:12:00:f9:45:56:55:6b:c5:
34:37:bf:13:f1:c3:b8:75:e8:c9:b6:11:f5:69:46:5c:c8:46:
6a:6e:58:95:d2:4b:97:8c:60:bc:c0:97:fa:4c:0f:2b:2c:3c:
a5:b6:3e:04:25:53:3a:1c:cd:e2:b3:fb:47:90:4b:d7:26:aa:
fd:45:a2:88:4d:12:6d:e7:99:80:3c:d6:0f:90:e6:96:e3:04:
94:9a:50:0d:47:70:57:65:22:cc:6c:2c:de:8c:03:4e:a4:e5:
e1:1e:45:74:d7:81:de:52:36:5a:08:e2:03:30:2c:cf:27:fd:
9d:26:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-fra.rpki-client.org