Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/RuRRxUmoEkWi_U2fwsQubocLB1E.roa
File: RuRRxUmoEkWi_U2fwsQubocLB1E.roa (raw, json)
Hash identifier: VukvbGKS65aMxNfLIXdNfXHMxM7eM5Y666l5iWpexyk=
Subject key identifier: 46:E4:51:C5:49:A8:12:45:A2:FD:4D:9F:C2:C4:2E:6E:87:0B:07:51
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01865421966E5F0E1943A8458AE7330F7A67
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/RuRRxUmoEkWi_U2fwsQubocLB1E.roa
Signing time: Wed 15 Feb 2023 08:12:12 +0000
ROA not before: Wed 15 Feb 2023 08:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 24
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 24
212.83.96.0/19 maxlen: 24
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 24
194.111.0.0/16 maxlen: 24
195.165.0.0/16 maxlen: 24
192.89.123.0/24 maxlen: 24
194.197.68.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 24
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 24
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 24
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 18
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 16
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 21
192.58.88.0/23 maxlen: 23
213.28.0.0/16 maxlen: 24
195.156.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 23
192.58.44.0/22 maxlen: 22
192.58.48.0/20 maxlen: 20
192.58.64.0/20 maxlen: 20
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 16
192.89.0.0/16 maxlen: 24
194.89.0.0/16 maxlen: 24
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 24
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 Feb 2023 08:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:21:96:6e:5f:0e:19:43:a8:45:8a:e7:33:0f:7a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 15 08:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e451c549a81245a2fd4d9fc2c42e6e870b0751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ea:db:9a:9f:10:a4:6d:5b:20:ff:e2:26:b1:
76:0f:91:9d:26:67:11:56:79:34:b5:8a:ac:15:95:
e2:43:99:79:f5:d0:21:fc:5d:65:80:79:03:14:27:
66:93:4c:97:66:22:6d:a8:d6:48:b3:a9:1f:ed:b2:
31:75:89:d9:a7:e6:1a:8d:22:d8:c5:d0:9a:5d:36:
ac:0a:09:65:c7:9b:c1:35:3e:47:75:9f:25:06:2f:
3e:53:ce:04:03:e0:aa:56:d2:34:e2:b0:5b:27:05:
c2:aa:6d:f3:15:6f:45:2e:cf:ac:95:80:f4:ac:58:
e8:bf:db:d5:6e:fe:62:ea:07:69:8c:e2:4b:bb:bb:
87:4f:7d:cd:bd:3b:49:fa:27:bc:ad:58:a8:ea:82:
f2:29:8f:98:4d:63:23:e5:59:78:44:89:4c:c7:88:
23:ad:a1:55:57:7f:d5:c3:cb:81:a4:67:a1:6a:34:
5f:33:b7:9d:4b:c5:46:4b:bd:bc:78:02:c1:d0:ac:
e1:38:1d:f9:b6:5c:b0:0a:48:83:97:4d:99:3a:20:
e0:cf:84:69:43:bf:f4:0d:dc:05:19:14:7d:30:88:
29:dd:a3:32:12:a9:1a:cc:22:dc:9c:e5:9b:61:3a:
b7:65:e9:a8:28:9e:0c:85:d9:ef:3d:59:3d:f3:34:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:51:C5:49:A8:12:45:A2:FD:4D:9F:C2:C4:2E:6E:87:0B:07:51
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/RuRRxUmoEkWi_U2fwsQubocLB1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
86:b2:d3:0d:df:66:ce:aa:29:2a:69:f7:7d:69:c1:1d:ae:23:
bd:88:94:64:0b:a6:5a:a8:da:8a:17:bc:aa:4a:39:d5:8b:5a:
5d:49:39:19:97:18:10:4e:90:67:c0:81:7c:17:84:c4:42:dd:
89:96:1d:7f:dc:28:59:a0:26:07:7b:b8:e5:d9:a4:cd:4f:f6:
a2:4d:88:29:ee:dc:49:35:7a:11:0b:c5:03:a2:37:b0:39:85:
cf:fa:b4:a3:89:5e:59:a4:b5:dd:6a:8a:78:ec:45:53:91:b4:
ba:08:67:98:40:d6:ce:a7:d4:7b:b2:eb:86:ee:fa:61:b9:84:
4b:2d:cc:c5:93:cd:2b:58:c6:e8:da:03:db:43:c3:ce:e9:72:
14:e8:ed:b2:54:11:1f:fc:c6:39:e5:97:4a:64:6e:fa:f9:64:
19:c9:24:1c:2e:fe:b1:b4:2d:2d:e3:41:89:31:ae:b3:d3:24:
a8:87:67:f4:97:03:5a:8f:af:c0:c1:f2:45:e0:37:96:97:66:
66:57:13:d5:55:fd:6b:d1:07:d3:16:30:38:47:3d:aa:be:63:
5f:a2:b2:be:26:18:80:81:1d:d2:a1:89:89:06:70:48:06:e4:
dc:22:cc:b5:ef:a9:dc:a7:ba:a8:30:9e:7b:3c:71:7b:0a:33:
90:d0:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:43 2024 by rpki-client on console-ams.rpki-client.org