Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/T42yKg4oQvOECRJKUmc2byy-vhQ.roa
File: T42yKg4oQvOECRJKUmc2byy-vhQ.roa (raw, json)
Hash identifier: Wmz68lEs1uJDj9sIfTmllbHpeK2SYFkbkpamTaDgm/Y=
Subject key identifier: 4F:8D:B2:2A:0E:28:42:F3:84:09:12:4A:52:67:36:6F:2C:BE:BE:14
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01869C43F857DF438A0411CE3F3B7BC92FA9
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/T42yKg4oQvOECRJKUmc2byy-vhQ.roa
Signing time: Wed 01 Mar 2023 08:22:25 +0000
ROA not before: Wed 01 Mar 2023 08:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 16
194.215.0.0/16 maxlen: 16
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 22
212.83.96.0/19 maxlen: 19
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 14
194.111.0.0/16 maxlen: 16
195.165.0.0/16 maxlen: 16
192.89.123.0/24 maxlen: 24
194.197.68.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 16
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 22
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 19
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 18
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 16
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 16
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 21
192.58.88.0/23 maxlen: 23
195.156.0.0/16 maxlen: 16
213.28.0.0/16 maxlen: 16
80.220.0.0/14 maxlen: 21
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 18
192.58.42.0/23 maxlen: 23
192.58.44.0/22 maxlen: 22
192.58.48.0/20 maxlen: 20
192.58.64.0/20 maxlen: 20
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 16
176.72.0.0/16 maxlen: 16
192.89.0.0/16 maxlen: 16
194.89.0.0/16 maxlen: 16
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 16
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 16
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:43:f8:57:df:43:8a:04:11:ce:3f:3b:7b:c9:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Mar 1 08:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8db22a0e2842f38409124a5267366f2cbebe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:3f:be:37:a7:74:42:f4:c5:c6:49:55:b7:
6e:8a:fc:3a:cd:99:58:c1:c3:82:00:e5:6d:23:36:
c7:58:ee:84:6e:0f:7e:62:36:13:65:d0:43:65:77:
14:c9:4b:75:ff:20:93:e3:ad:6b:82:31:13:85:0c:
c8:f7:eb:1d:61:ba:10:ca:55:c4:ad:39:95:cb:f6:
f7:fd:a3:15:12:74:57:77:65:94:c8:70:42:89:05:
7b:c0:6e:b2:af:b0:9b:77:a0:c1:19:25:7a:69:6c:
7d:b4:ed:92:17:7c:09:d7:e6:56:6d:30:ef:7c:c1:
da:c2:3a:31:ad:65:03:20:77:be:8f:98:6b:82:7c:
d0:04:06:f3:61:94:96:04:17:6e:2b:70:5a:c5:21:
4f:88:fb:36:a0:4e:8f:da:a1:5f:55:b0:95:57:a3:
c2:86:ef:a5:03:d2:95:43:2d:8f:ce:40:3e:de:53:
fe:e8:88:09:35:b2:f3:b9:ea:86:c5:29:37:74:28:
8c:e9:4e:39:68:ed:21:5a:da:ca:08:77:45:7a:3f:
95:2b:2b:95:41:5e:e4:f8:38:76:31:90:fd:cf:53:
84:0f:28:0a:32:61:c3:b3:59:cd:45:76:a0:ce:75:
e0:a3:e9:29:2f:04:a0:1d:46:8c:2e:2c:34:f7:15:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:B2:2A:0E:28:42:F3:84:09:12:4A:52:67:36:6F:2C:BE:BE:14
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/T42yKg4oQvOECRJKUmc2byy-vhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
9f:81:14:ce:67:6a:8b:fc:4e:a3:16:f5:cd:f9:11:01:3b:33:
08:86:37:41:b2:78:d4:cc:3d:15:9a:a8:4e:ea:6f:cf:1e:54:
5d:17:24:d1:8e:48:dd:e9:09:37:8f:51:00:a6:14:d9:37:e9:
62:70:88:b5:2e:c3:a6:75:d5:e8:1b:d2:5f:29:54:a3:fa:30:
88:1c:4b:6d:ca:71:2c:f7:3a:3b:c3:47:43:dc:4f:21:03:ce:
79:b4:7f:58:a0:6c:61:d0:a9:45:23:92:97:7b:65:40:48:f2:
e7:73:95:2b:47:98:36:0e:c7:21:06:9e:8d:e9:57:82:fd:54:
b0:4a:77:85:da:5a:d9:32:fd:ad:90:97:18:c3:f2:da:0c:7f:
05:d9:90:9c:90:ee:d3:45:b7:5c:42:8e:92:e7:2d:7a:7f:6d:
45:cf:2c:54:75:c3:94:9b:14:e0:61:17:f0:29:34:43:0b:a6:
df:e8:ef:a3:90:8d:37:60:7c:1d:a9:22:c3:6c:d8:13:ca:29:
39:20:1c:50:6a:94:67:75:31:81:07:0c:b9:ae:50:5a:0f:f2:
db:6f:1d:24:ee:f3:56:33:a0:eb:17:68:ac:3d:76:7a:69:f3:
f2:ed:24:67:52:ba:e6:fc:f0:4d:ee:6b:7c:77:09:cb:01:34:
27:94:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org