Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/d_n_dZhQNljWbDBB5PWbAhN2JjE.roa
File: d_n_dZhQNljWbDBB5PWbAhN2JjE.roa (raw, json)
Hash identifier: M+OaRrU7uGV4L5tDH3NYB2GrrG94HNuUuQehKsY6rb0=
Subject key identifier: 77:F9:FF:75:98:50:36:58:D6:6C:30:41:E4:F5:9B:02:13:76:26:31
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 0186971D9D2E4C750C09D6255D6F9159C610
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/d_n_dZhQNljWbDBB5PWbAhN2JjE.roa
Signing time: Tue 28 Feb 2023 08:22:25 +0000
ROA not before: Tue 28 Feb 2023 08:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1759
IP address blocks: 81.16.64.0/20 maxlen: 20
194.252.0.0/16 maxlen: 24
194.215.0.0/16 maxlen: 16
86.114.0.0/16 maxlen: 21
192.83.96.0/22 maxlen: 22
212.83.96.0/19 maxlen: 24
213.140.160.0/19 maxlen: 19
192.83.100.0/24 maxlen: 24
141.208.0.0/16 maxlen: 16
193.208.0.0/14 maxlen: 14
194.111.0.0/16 maxlen: 16
195.165.0.0/16 maxlen: 24
192.89.123.0/24 maxlen: 24
194.197.68.0/24 maxlen: 24
192.194.0.0/16 maxlen: 24
192.130.0.0/16 maxlen: 24
213.173.128.0/19 maxlen: 19
194.251.0.0/16 maxlen: 16
131.177.0.0/16 maxlen: 16
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.112.0/22 maxlen: 22
62.73.32.0/19 maxlen: 19
217.140.128.0/17 maxlen: 17
192.83.64.0/19 maxlen: 19
192.103.116.0/24 maxlen: 24
192.83.0.0/18 maxlen: 18
84.248.0.0/14 maxlen: 21
188.238.0.0/16 maxlen: 16
192.103.85.0/24 maxlen: 24
194.137.0.0/16 maxlen: 16
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
88.86.128.0/19 maxlen: 19
212.149.64.0/18 maxlen: 18
192.58.80.0/21 maxlen: 21
192.58.88.0/23 maxlen: 23
213.28.0.0/16 maxlen: 24
195.156.0.0/16 maxlen: 24
80.220.0.0/14 maxlen: 21
193.210.18.0/24 maxlen: 24
193.210.19.0/24 maxlen: 24
109.240.0.0/16 maxlen: 16
212.182.192.0/18 maxlen: 24
192.58.42.0/23 maxlen: 23
192.58.44.0/22 maxlen: 22
192.58.48.0/20 maxlen: 20
192.58.64.0/20 maxlen: 20
93.106.0.0/16 maxlen: 16
194.197.0.0/16 maxlen: 24
176.72.0.0/16 maxlen: 16
192.89.0.0/16 maxlen: 24
194.89.0.0/16 maxlen: 16
62.71.0.0/16 maxlen: 16
84.34.0.0/16 maxlen: 16
193.178.133.0/24 maxlen: 24
88.192.0.0/14 maxlen: 21
80.74.192.0/19 maxlen: 19
46.132.0.0/16 maxlen: 16
212.213.0.0/16 maxlen: 24
86.115.0.0/16 maxlen: 16
194.142.0.0/16 maxlen: 16
2001:8b8::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Mar 2023 08:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:1d:9d:2e:4c:75:0c:09:d6:25:5d:6f:91:59:c6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Feb 28 08:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f9ff7598503658d66c3041e4f59b0213762631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:9e:32:5b:d6:dd:41:2a:5a:13:e1:3a:7b:
60:ac:13:0e:89:42:66:01:7a:8f:a8:0c:58:43:af:
27:10:6d:1b:7c:65:ea:01:f0:3c:4e:ee:27:94:e5:
f2:20:0a:c4:35:2d:69:2c:96:73:21:5b:87:7a:ea:
2a:96:29:9a:10:b2:70:08:71:ad:9e:8b:c2:1c:e4:
bc:82:44:f8:e1:27:19:a6:bd:c1:ca:33:5c:3d:56:
b8:d4:f1:76:42:65:cf:24:6d:01:cc:7d:27:6e:8d:
b5:2a:59:6b:27:c0:30:ea:b4:c1:a0:30:97:0b:1f:
1a:3e:a4:45:87:1d:9b:d7:59:ee:cc:83:ae:71:94:
ce:32:51:0c:65:fc:66:31:9d:3c:59:57:0e:2a:c9:
59:7e:60:88:d4:a4:e2:74:39:50:61:33:73:db:de:
b4:5d:ad:5e:da:20:89:5d:b0:77:68:1e:9b:67:9e:
28:70:12:87:49:8c:ab:a8:10:8e:5a:0d:33:14:79:
98:bb:d0:18:fa:b4:72:36:98:66:b3:c8:16:0f:d5:
72:ef:c2:23:ff:7e:a1:cd:ed:a5:2f:f5:ca:a6:64:
03:75:60:56:4c:34:09:eb:13:ca:2e:6c:08:8d:c4:
9e:15:6a:64:23:24:0c:b3:2b:05:9d:bd:ba:a0:2a:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:FF:75:98:50:36:58:D6:6C:30:41:E4:F5:9B:02:13:76:26:31
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/d_n_dZhQNljWbDBB5PWbAhN2JjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.132.0.0/16
62.71.0.0/16
62.73.32.0/19
80.74.192.0/19
80.220.0.0/14
81.16.64.0/20
84.34.0.0/16
84.248.0.0/14
86.114.0.0/15
88.86.128.0/19
88.192.0.0/14
93.106.0.0/16
109.240.0.0/16
131.177.0.0/16
141.208.0.0/16
176.72.0.0/16
188.238.0.0/16
192.58.42.0-192.58.89.255
192.83.0.0-192.83.100.255
192.89.0.0/16
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.112.0-192.103.116.255
192.130.0.0/16
192.194.0.0/16
193.178.133.0/24
193.208.0.0/14
194.89.0.0/16
194.111.0.0/16
194.137.0.0/16
194.142.0.0/16
194.197.0.0/16
194.215.0.0/16
194.251.0.0-194.252.255.255
195.156.0.0/16
195.165.0.0/16
212.83.96.0/19
212.149.64.0/18
212.182.192.0/18
212.213.0.0/16
213.28.0.0/16
213.140.160.0/19
213.173.128.0/19
217.140.128.0/17
IPv6:
2001:8b8::/29
Signature Algorithm: sha256WithRSAEncryption
7e:9f:67:f8:a7:ef:48:db:9c:1e:d7:87:75:d8:91:1c:db:2f:
6b:60:c7:cc:e9:c2:c0:65:bb:2a:00:a3:50:35:d6:96:37:03:
b4:64:eb:90:88:b8:01:8e:d6:b8:20:74:a7:74:1f:b1:5e:bc:
58:db:c8:70:09:55:30:65:5f:0a:3a:c1:d4:43:56:56:b8:1b:
d8:54:53:39:24:40:14:1d:c0:d7:5e:b8:5f:2d:38:00:27:a0:
86:5c:42:06:cb:d4:af:02:c0:3f:d2:8a:a2:6f:9b:a8:21:ff:
67:61:5d:1e:88:56:60:5a:4b:b0:8d:5f:96:d6:bc:6c:bd:60:
11:46:46:49:1e:17:ea:52:d4:27:f6:9c:a7:46:d7:9d:41:d9:
45:66:d6:48:f3:57:80:40:d2:93:6a:d6:be:b1:c5:35:b5:44:
07:29:59:7c:3e:dd:9a:4d:73:3b:35:9a:81:b5:18:eb:f4:fd:
fc:02:26:a8:b5:bd:06:0c:22:9a:19:6d:a3:80:bc:d8:40:34:
8c:93:b6:96:65:81:4c:b9:f6:a2:28:73:a6:d5:d4:cd:99:c5:
5a:bf:7c:e1:67:d0:45:cc:83:41:bc:3c:d6:97:f2:68:c3:8d:
42:48:bb:14:e3:5f:24:32:f4:cc:5a:6b:dc:53:36:d2:51:e0:
8e:bd:3d:df
-----BEGIN CERTIFICATE-----
MIIGODCCBSCgAwIBAgISAYaXHZ0uTHUMCdYlXW+RWcYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjMwMjI4MDgyMjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Y5ZmY3NTk4NTAzNjU4ZDY2YzMwNDFlNGY1OWIwMjEzNzYyNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsueMlvW3UEqWhPhOntgrBMOiUJm
AXqPqAxYQ68nEG0bfGXqAfA8Tu4nlOXyIArENS1pLJZzIVuHeuoqlimaELJwCHGt
novCHOS8gkT44ScZpr3ByjNcPVa41PF2QmXPJG0BzH0nbo21KllrJ8Aw6rTBoDCX
Cx8aPqRFhx2b11nuzIOucZTOMlEMZfxmMZ08WVcOKslZfmCI1KTidDlQYTNz2960
Xa1e2iCJXbB3aB6bZ54ocBKHSYyrqBCOWg0zFHmYu9AY+rRyNphms8gWD9Vy78Ij
/36hze2lL/XKpmQDdWBWTDQJ6xPKLmwIjcSeFWpkIyQMsysFnb26oCodnQIDAQAB
o4IDRDCCA0AwHQYDVR0OBBYEFHf5/3WYUDZY1mwwQeT1mwITdiYxMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvZF9uX2RaaFFObGpXYkRCQjVQV2JBaE4ySmpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWAYIKwYBBQUHAQcBAf8EggFHMIIBQzCCATAEAgABMIIB
KAMDAC6EAwMAPkcDBAU+SSADBAVQSsADAwJQ3AMEBFEQQAMDAFQiAwMCVPgDAwFW
cgMEBVhWgAMDAljAAwMAXWoDAwBt8AMDAIOxAwMAjdADAwCwSAMDALzuMAwDBAHA
OioDBAHAOlgwCwMDAMBTAwQAwFNkAwMAwFkwDAMEAMBnVQMEAMBnVjAMAwQAwGdb
AwQAwGdcMAwDBADAZ2kDBADAZ2owDAMEBMBncAMEAMBndAMDAMCCAwMAwMIDBADB
soUDAwLB0AMDAMJZAwMAwm8DAwDCiQMDAMKOAwMAwsUDAwDC1zAKAwMAwvsDAwDC
/AMDAMOcAwMAw6UDBAXUU2ADBAbUlUADBAbUtsADAwDU1QMDANUcAwQF1YygAwQF
1a2AAwQH2YyAMA0EAgACMAcDBQMgAQi4MA0GCSqGSIb3DQEBCwUAA4IBAQB+n2f4
p+9I25we14d12JEc2y9rYMfM6cLAZbsqAKNQNdaWNwO0ZOuQiLgBjta4IHSndB+x
XrxY28hwCVUwZV8KOsHUQ1ZWuBvYVFM5JEAUHcDXXrhfLTgAJ6CGXEIGy9SvAsA/
0oqib5uoIf9nYV0eiFZgWkuwjV+W1rxsvWARRkZJHhfqUtQn9pynRtedQdlFZtZI
81eAQNKTata+scU1tUQHKVl8Pt2aTXM7NZqBtRjr9P38Aiaotb0GDCKaGW2jgLzY
QDSMk7aWZYFMufaiKHOm1dTNmcVav3zhZ9BFzINBvDzWl/Jow41CSLsU418kMvTM
WmvcUzbSUeCOvT3f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org