Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/LW53FvAkWcW5SWV84Y2QRR6wcXE.roa
File: LW53FvAkWcW5SWV84Y2QRR6wcXE.roa (raw, json)
Hash identifier: i/mNAaLbriWWct/v2Y1rAuNqrQz8qOEGg4RpmawyeXs=
Subject key identifier: 2D:6E:77:16:F0:24:59:C5:B9:49:65:7C:E1:8D:90:45:1E:B0:71:71
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018630216CE122BB7B25903B4D8FFDCFDA8C
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/LW53FvAkWcW5SWV84Y2QRR6wcXE.roa
Signing time: Wed 08 Feb 2023 08:25:42 +0000
ROA not before: Wed 08 Feb 2023 08:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 24
86.114.0.0/16 maxlen: 16
192.83.96.0/22 maxlen: 24
213.140.160.0/19 maxlen: 19
212.83.96.0/19 maxlen: 24
141.208.0.0/16 maxlen: 16
192.83.100.0/24 maxlen: 24
193.208.0.0/14 maxlen: 24
194.111.0.0/16 maxlen: 24
195.165.0.0/16 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 24
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 24
62.73.32.0/19 maxlen: 19
192.83.64.0/19 maxlen: 24
217.140.128.0/17 maxlen: 17
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 24
84.248.0.0/14 maxlen: 24
188.238.0.0/16 maxlen: 24
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 24
192.58.80.0/21 maxlen: 24
212.149.64.0/18 maxlen: 18
192.58.88.0/23 maxlen: 24
195.156.0.0/16 maxlen: 24
213.28.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
109.240.0.0/16 maxlen: 24
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 24
192.58.44.0/22 maxlen: 24
192.58.48.0/20 maxlen: 24
192.58.64.0/20 maxlen: 24
93.106.0.0/16 maxlen: 24
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 24
194.89.0.0/16 maxlen: 24
192.89.0.0/16 maxlen: 24
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 24
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 24
194.142.0.0/16 maxlen: 24
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 14 Feb 2023 10:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:21:6c:e1:22:bb:7b:25:90:3b:4d:8f:fd:cf:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 8 08:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d6e7716f02459c5b949657ce18d90451eb07171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:35:68:e4:2c:4c:40:36:17:34:9a:5d:d2:
be:9b:49:43:1d:0f:05:3a:86:b2:38:7e:96:81:4e:
19:93:15:86:53:90:9c:38:95:92:6a:c5:47:ee:2d:
3c:39:fc:07:8d:03:e6:eb:f1:c6:62:f4:24:76:73:
02:4d:f4:58:c3:79:76:44:80:f9:44:57:e3:f1:04:
a7:28:56:01:e6:35:16:45:f0:d8:54:f0:78:e6:97:
f8:a0:cb:1b:a2:d6:20:92:45:c8:35:de:eb:48:cb:
6a:4f:f7:4e:c3:54:ad:ab:4b:be:e6:7d:9d:0a:56:
46:91:fe:4b:e1:31:4e:ab:fe:48:97:0f:3e:91:96:
df:59:4c:3d:9d:cd:68:11:4f:50:62:da:fc:63:29:
f9:87:72:02:4a:7a:c4:2d:8d:69:25:c1:5a:91:85:
8d:68:de:b0:6e:ee:6b:32:9c:17:80:bb:b2:b3:e7:
c1:3c:4c:b6:19:1b:49:89:7f:3a:f5:ee:91:b0:85:
ed:da:fc:47:71:0e:76:8c:aa:cd:86:9a:5e:f8:ec:
67:2f:07:27:bb:94:82:f3:12:b3:61:e2:e0:68:13:
5b:a1:ce:8d:d1:bd:25:db:da:c4:8d:19:bf:5b:52:
63:d7:04:44:df:c9:d8:c7:03:35:92:5f:8e:82:b5:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:77:16:F0:24:59:C5:B9:49:65:7C:E1:8D:90:45:1E:B0:71:71
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/LW53FvAkWcW5SWV84Y2QRR6wcXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
5f:94:36:6b:37:a7:b4:ab:d5:92:52:5f:63:b3:bf:97:67:39:
48:f3:5e:0a:1d:43:61:3d:43:5f:5b:70:41:c7:13:04:22:d5:
ed:34:f0:ae:47:73:40:f8:06:f3:c2:78:43:4d:46:d8:7a:d9:
cf:f6:d1:92:d4:97:79:2a:68:7e:75:23:7f:9f:75:98:d9:47:
4b:a4:47:e4:90:e8:b2:a9:c8:60:02:32:ce:b8:d7:aa:b2:a4:
df:d0:ba:5d:39:80:ba:94:34:e0:cf:ee:a7:08:f6:8f:2f:89:
17:e7:dd:6f:12:ed:07:e8:4a:2e:08:aa:5f:d7:b3:cf:47:da:
36:e9:d3:c2:57:c7:33:8e:f8:38:1c:08:9c:1a:c8:f0:c5:54:
a7:6b:e3:3e:f6:b6:18:43:2b:04:d0:82:37:af:9e:01:0f:17:
78:ed:42:69:f7:86:6f:ae:da:89:0f:10:2f:70:1d:c8:8e:a5:
52:a8:cb:4e:2d:ce:66:fe:ad:e4:f1:ef:d0:cd:5b:10:53:10:
1c:53:de:91:9f:3f:3f:9d:53:d8:c8:35:e1:78:e2:f4:85:b6:
f2:28:32:1a:23:10:a3:5d:b1:4c:c7:1e:80:1d:cd:4a:32:b5:
3d:1e:e1:35:67:8d:65:4e:6e:0a:ed:ca:71:71:81:b0:f0:33:
53:6d:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org