Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/DWaKNc5xCOjesaTLqKkFSBhtc1c.roa
File: DWaKNc5xCOjesaTLqKkFSBhtc1c.roa (raw, json)
Hash identifier: DTgwk89VW5Oj6cS50LXWZ78ta6bRokPvG3UuoNnbUCQ=
Subject key identifier: 0D:66:8A:35:CE:71:08:E8:DE:B1:A4:CB:A8:A9:05:48:18:6D:73:57
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01864F99E38DF0A5048FB6B469FE55902360
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/DWaKNc5xCOjesaTLqKkFSBhtc1c.roa
Signing time: Tue 14 Feb 2023 11:05:30 +0000
ROA not before: Tue 14 Feb 2023 11:05:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 24
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 24
212.83.96.0/19 maxlen: 24
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 24
194.111.0.0/16 maxlen: 24
195.165.0.0/16 maxlen: 24
192.89.123.0/24 maxlen: 24
194.197.68.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 24
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 24
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 24
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 24
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 24
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 24
192.58.88.0/23 maxlen: 24
195.156.0.0/16 maxlen: 24
213.28.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 24
192.58.44.0/22 maxlen: 24
192.58.48.0/20 maxlen: 24
192.58.64.0/20 maxlen: 24
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 16
194.89.0.0/16 maxlen: 24
192.89.0.0/16 maxlen: 24
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 24
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Feb 2023 08:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:99:e3:8d:f0:a5:04:8f:b6:b4:69:fe:55:90:23:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 14 11:05:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d668a35ce7108e8deb1a4cba8a90548186d7357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:68:c3:50:cf:68:fe:6b:87:42:13:ae:22:
6d:55:7d:36:c0:45:be:97:9b:de:f0:59:cd:6d:05:
88:03:9d:03:4d:2e:f3:8c:70:9c:d5:16:2e:c7:7a:
c4:c3:d1:a6:59:1d:05:66:0e:65:97:77:cd:ba:6b:
aa:e4:cd:ec:c7:26:31:ac:19:8f:ea:e4:f3:6e:79:
96:71:64:68:77:38:5f:ff:3a:b8:e0:05:08:92:16:
d1:48:64:cf:e4:bb:60:68:ff:72:21:69:b4:a1:22:
38:d1:d6:1b:1c:ea:f6:8c:fe:a8:bc:38:8e:dd:9c:
1a:03:e9:29:04:e8:e1:bb:39:79:e5:86:a0:5b:b6:
de:10:2a:ac:fa:f2:42:c3:2e:71:00:30:49:27:a0:
18:ac:be:c6:13:b3:9b:d4:8b:51:4c:de:e9:c7:8d:
fe:29:1a:a7:d4:19:e9:9b:ca:58:3f:b1:9d:80:1c:
df:c4:42:3f:74:fc:f8:9e:a2:62:fe:70:7c:74:f9:
d8:bc:96:53:1b:33:d4:6c:93:d1:5a:1b:57:52:b1:
76:aa:1f:19:f3:07:e9:60:05:cc:73:70:65:a2:59:
f3:b8:95:54:a2:6f:47:3b:ba:76:82:4a:0b:d9:a4:
b2:b8:ba:ba:7d:68:7d:b9:48:7c:ef:48:0d:4e:ff:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:66:8A:35:CE:71:08:E8:DE:B1:A4:CB:A8:A9:05:48:18:6D:73:57
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/DWaKNc5xCOjesaTLqKkFSBhtc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
67:b2:a1:9e:e7:90:c2:40:03:20:90:b0:7c:0d:b6:93:bf:85:
12:29:2a:7d:1b:36:53:8f:ee:01:96:65:6a:3c:81:6c:8a:47:
da:bd:56:50:50:c9:0d:34:ed:ad:68:f2:0b:1b:84:29:f6:4b:
7a:3b:93:e1:56:dd:43:26:ed:f9:15:ae:01:4b:12:82:0a:5d:
60:6b:70:c2:a1:ac:0b:1c:95:15:c3:6e:a9:62:a9:7f:40:c9:
ef:6a:a2:2a:09:99:2b:3d:9d:86:25:a2:9c:94:f4:28:6a:21:
53:4f:34:83:49:9f:3c:d3:32:2a:2a:d9:2a:45:2e:2e:43:3e:
19:99:1b:b6:6d:6b:89:fc:ec:7e:a2:98:5c:3c:90:34:60:88:
60:e5:a4:d6:56:c6:f0:36:7d:5b:39:7b:4b:69:85:27:d4:08:
22:4e:cf:8d:37:33:31:9d:8c:27:b1:b3:9c:fe:a1:9d:d7:8c:
ff:d2:ad:51:43:8c:4e:50:cf:5d:d0:da:88:cb:35:24:f2:f1:
d9:29:57:53:46:63:3c:fd:6f:2a:7e:23:ff:75:a8:50:d9:88:
5a:20:e9:43:80:c4:51:1d:84:8a:ef:b6:f0:1a:da:2f:fe:d1:
49:a2:7b:4c:d4:5c:5b:67:b7:3b:93:59:f0:eb:4e:cc:98:74:
a3:e5:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org